last executing test programs: 6m3.044000517s ago: executing program 32 (id=28): syz_open_dev$ndb(0x0, 0x0, 0x200) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @remote, 0x8006, 0x7800, 0x3, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = creat(0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r5, 0x8903, 0x1000000000000) pipe(&(0x7f0000000480)) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000100)="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") 5m44.920393281s ago: executing program 33 (id=51): syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000300)=0x1f06) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb90929", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000001080)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x7, 0x8, {{0x9, 0x4, 0x1, 0x3, 0x24, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x84, [@remote, @multicast1, @loopback]}, @end]}}}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_usbip_server_init(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m41.341037698s ago: executing program 4 (id=75): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x3) read$FUSE(r0, &(0x7f0000002000)={0x2020}, 0x2020) 5m40.102534875s ago: executing program 4 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340001010101010100000400080108"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) 5m38.694915236s ago: executing program 4 (id=81): r0 = syz_open_dev$sg(&(0x7f0000000380), 0x100000, 0x119180) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0xa, 0x400000) bind$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @private=0xa010101, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x100101, 0x0, 0x801}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x9c) 5m35.463575641s ago: executing program 4 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x2, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}, @remote, [], "caa7c1b7f4c336af"}}}}}}}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mount$9p_tcp(0x0, 0x0, &(0x7f0000000340), 0x800002, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) socket$l2tp(0x2, 0x2, 0x73) 5m31.276485827s ago: executing program 4 (id=86): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0}, {0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x4) read$FUSE(r0, &(0x7f0000002000)={0x2020}, 0x2020) 5m30.405153554s ago: executing program 4 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x49844}}], 0x0, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r6, &(0x7f0000001f40)=""/72, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 5m14.890948924s ago: executing program 34 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x49844}}], 0x0, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r6, &(0x7f0000001f40)=""/72, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 4m9.444779631s ago: executing program 5 (id=49): syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x476b, &(0x7f0000000040)={0x0, 0x7def, 0x2010, 0x3, 0x375}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r4 = accept$inet6(r2, &(0x7f00000004c0), &(0x7f0000000500)=0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[], 0x50) syz_emit_vhci(0x0, 0x0) 4m7.175821192s ago: executing program 5 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8800028040000100240001006d6f6465000000000000000000000000000000000200000000000000000000000500030005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 4m6.293173163s ago: executing program 5 (id=182): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m4.394161594s ago: executing program 5 (id=189): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4m3.277900747s ago: executing program 7 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m2.323079051s ago: executing program 7 (id=198): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8a1c551265406c7f306003d8a0f4bd00"}}) 3m57.92963996s ago: executing program 7 (id=200): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80800) syz_usbip_server_init(0x1) 3m56.197944081s ago: executing program 7 (id=206): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)) 3m55.426736411s ago: executing program 7 (id=208): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59e", 0x29, r0) 3m54.545324886s ago: executing program 7 (id=212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 3m48.63880007s ago: executing program 35 (id=189): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3m39.005745037s ago: executing program 36 (id=212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 3m22.463280166s ago: executing program 2 (id=257): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_ethernet(0x4a, &(0x7f000001b000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00142c00fe8000000000000000000002000000bbff020000000000495622d868631e6901890000000000000034c8311b6bef15c50100000091adc58e0c6fe9523713589a04c83b299e2075509cf3a04dacd7a3bd73c2850a44c0eee6b5f347f43f6f9076f19bddd48aebea7dc44d3573a6700f87e8ce102cd89d918a330bcf99db6c4b500a48fd43aacfef"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x300, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x4}}, 0x6, 0x1, 0x3, 0x80, 0x0, 0x6}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e21, 0x0, @empty, 0x7}}, 0xfffffff8, 0x1, 0x4, 0xfffffff8, 0x4}, &(0x7f0000000180)=0x98) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={&(0x7f0000002300)='fscache_acquire\x00', r2, 0x0, 0x2}, 0x18) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 3m18.475093892s ago: executing program 6 (id=262): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{}, {0xc6, 0xc8, 0x2e0}}}}, 0xb) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 3m15.995429396s ago: executing program 2 (id=264): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 3m15.321580661s ago: executing program 2 (id=265): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0xfffffffc) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) 3m15.278217968s ago: executing program 6 (id=266): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) read$FUSE(r0, 0x0, 0x0) 3m14.733687567s ago: executing program 2 (id=267): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80800) syz_usbip_server_init(0x1) 3m14.46590442s ago: executing program 6 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x9975, r2, 0x0) read$FUSE(r3, 0x0, 0x0) unlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m13.708853971s ago: executing program 6 (id=270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000c80)={@flat=@binder={0x73622a85, 0x0, 0x2, 0x58}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x17}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}}, &(0x7f0000000240)={0x47, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m13.147630764s ago: executing program 6 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8800028040000100240001006d6f6465000000000000000000000000000000000200000000000000000000000500030005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3m12.48254122s ago: executing program 6 (id=273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 3m11.129705868s ago: executing program 2 (id=275): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0xfffffffc) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) 3m8.501378018s ago: executing program 2 (id=277): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) open_by_handle_at(r3, 0x0, 0x10000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m56.375430176s ago: executing program 37 (id=273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 2m52.894387618s ago: executing program 38 (id=277): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) open_by_handle_at(r3, 0x0, 0x10000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 57.90990987s ago: executing program 0 (id=361): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x69a840, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 54.844768678s ago: executing program 0 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) 53.72075693s ago: executing program 0 (id=369): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44801) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x20, 0x3, 0x3, "58cb02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.557416334s ago: executing program 0 (id=377): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000d004"]) 49.556630672s ago: executing program 0 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.710556774s ago: executing program 0 (id=384): userfaultfd(0x80001) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r7, 0x0, 0x7c, 0x9, 0x2, [0x0], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x4, 0xffffffff, 0x3], [0x2, 0x5, 0x0, 0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r8}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) 30.733075509s ago: executing program 39 (id=384): userfaultfd(0x80001) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r7, 0x0, 0x7c, 0x9, 0x2, [0x0], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x4, 0xffffffff, 0x3], [0x2, 0x5, 0x0, 0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r8}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) 15.00169518s ago: executing program 9 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 14.717908293s ago: executing program 3 (id=436): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000010040)) listen(0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.938674285s ago: executing program 9 (id=438): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xee, 0xb0, 0xf3, 0x20, 0x4b4, 0x1002, 0xcdc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xf7, 0xf2}}]}}]}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b850000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r2, 0x0, 0x1}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0xf, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11.748495978s ago: executing program 8 (id=440): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044051}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x240088c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a00000008"], 0x84}}, 0x0) 10.127381261s ago: executing program 3 (id=442): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x69a840, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 9.868887637s ago: executing program 1 (id=443): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000d004"]) 9.361403183s ago: executing program 3 (id=444): getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000540)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "dcff7f00", 0x1002, 0x2}) 9.304913437s ago: executing program 8 (id=445): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x80000, 0xff, 0x80000}) 8.365737729s ago: executing program 1 (id=446): syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 8.32423293s ago: executing program 8 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 8.206135985s ago: executing program 9 (id=448): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) 8.008130347s ago: executing program 3 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 7.229937229s ago: executing program 1 (id=450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xe2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 7.227205948s ago: executing program 9 (id=451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000010040)) listen(0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.022054663s ago: executing program 8 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000081bcaf6a020000077400018014000180080001000000000008000200e00000020c00028005000100000000000c00028005000100060000000c00038005000100000000000c00028005000100000000002c0001"], 0xc0}}, 0x0) 3.785908072s ago: executing program 1 (id=453): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x69a840, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 3.489725348s ago: executing program 9 (id=454): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044051}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x240088c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a00000008"], 0x84}}, 0x0) 3.40413145s ago: executing program 8 (id=455): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000d004"]) 2.815370058s ago: executing program 1 (id=456): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000500)="011b71275c7045349800f7a79a5ad6e26d1860ef55fce97d", 0x18}], 0x1) 2.721472894s ago: executing program 8 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') read$FUSE(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$kcm(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48}) 2.678462813s ago: executing program 3 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.224921711s ago: executing program 9 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xef2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000200)={0x0, 0x0, 0x5}) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480), 0x0, 0x24040890) 148.724496ms ago: executing program 3 (id=460): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 0s ago: executing program 1 (id=461): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8a1c551265406c7f306003d8a0f4bd00"}}) kernel console output (not intermixed with test programs): left promiscuous mode [ 340.457569][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.465543][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.617931][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.625924][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.760543][ T5856] vhci_hcd: vhci_device speed not set [ 340.790282][ T33] veth1_macvtap: left promiscuous mode [ 340.797033][ T33] veth0_macvtap: left promiscuous mode [ 340.803175][ T33] veth1_vlan: left promiscuous mode [ 340.808853][ T33] veth0_vlan: left promiscuous mode [ 341.308100][ T30] audit: type=1800 audit(1750493323.285:3): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.106" name="bus" dev="overlay" ino=188 res=0 errno=0 [ 342.143152][ T33] team0 (unregistering): Port device team_slave_1 removed [ 342.168460][ T33] team0 (unregistering): Port device team_slave_0 removed [ 342.421201][ T5797] Bluetooth: hci1: command tx timeout [ 342.563380][ T9] lo speed is unknown, defaulting to 1000 [ 342.570600][ T9] syz0: Port: 1 Link DOWN [ 342.573712][ T6144] veth1_vlan: entered promiscuous mode [ 343.263577][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.475804][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.528088][ T6144] veth0_macvtap: entered promiscuous mode [ 343.616097][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.674555][ T6144] veth1_macvtap: entered promiscuous mode [ 343.762692][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.071042][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.331460][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.466730][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.500083][ T5797] Bluetooth: hci1: command tx timeout [ 344.798528][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.081146][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.593925][ T5810] Bluetooth: hci1: command tx timeout [ 346.649414][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.823268][ T6144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.840383][ T6144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.849651][ T6144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.858980][ T6144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.251074][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.257876][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.449508][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.675158][ T5797] Bluetooth: hci1: command tx timeout [ 348.689372][ T33] bridge_slave_1: left allmulticast mode [ 348.695244][ T33] bridge_slave_1: left promiscuous mode [ 348.702210][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.757184][ T33] bridge_slave_0: left allmulticast mode [ 348.763763][ T33] bridge_slave_0: left promiscuous mode [ 348.771227][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.947089][ T33] bridge_slave_1: left allmulticast mode [ 348.954890][ T33] bridge_slave_1: left promiscuous mode [ 348.962493][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.079313][ T33] bridge_slave_0: left allmulticast mode [ 349.086703][ T33] bridge_slave_0: left promiscuous mode [ 349.095284][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.247122][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.280744][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.301747][ T33] bond0 (unregistering): Released all slaves [ 350.598235][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.618903][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.696583][ T33] bond0 (unregistering): Released all slaves [ 350.947453][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 352.621159][ T33] hsr_slave_0: left promiscuous mode [ 352.676852][ T33] hsr_slave_1: left promiscuous mode [ 352.687095][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.694974][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.834146][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.843540][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.089041][ T33] hsr_slave_0: left promiscuous mode [ 353.100524][ T5812] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 353.132923][ T33] hsr_slave_1: left promiscuous mode [ 353.140901][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.149036][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.159443][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.167169][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.206055][ T33] veth1_macvtap: left promiscuous mode [ 353.212386][ T33] veth0_macvtap: left promiscuous mode [ 353.218256][ T33] veth1_vlan: left promiscuous mode [ 353.224844][ T33] veth0_vlan: left promiscuous mode [ 353.331971][ T33] veth1_macvtap: left promiscuous mode [ 353.337872][ T33] veth0_macvtap: left promiscuous mode [ 353.344336][ T33] veth1_vlan: left promiscuous mode [ 353.350017][ T33] veth0_vlan: left promiscuous mode [ 354.361358][ T5812] Bluetooth: hci0: connection err: -111 [ 354.419771][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 355.812079][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.820590][ T33] team0 (unregistering): Port device team_slave_1 removed [ 355.881564][ T6451] process 'syz.2.115' launched './file0' with NULL argv: empty string added [ 355.974782][ T33] team0 (unregistering): Port device team_slave_0 removed [ 356.839711][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.954013][ T33] team0 (unregistering): Port device team_slave_1 removed [ 356.993172][ T33] team0 (unregistering): Port device team_slave_0 removed [ 357.189786][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 357.198557][ T5810] Bluetooth: hci0: Injecting HCI hardware error event [ 357.213584][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.223652][ T5810] Bluetooth: hci0: hardware error 0x00 [ 357.427017][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.451491][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.674383][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.682304][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.690940][ T6375] bridge_slave_0: entered allmulticast mode [ 358.700059][ T6375] bridge_slave_0: entered promiscuous mode [ 358.997618][ T6224] veth0_vlan: entered promiscuous mode [ 359.024532][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.032298][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.040061][ T6375] bridge_slave_1: entered allmulticast mode [ 359.049256][ T6375] bridge_slave_1: entered promiscuous mode [ 359.105479][ T6224] veth1_vlan: entered promiscuous mode [ 359.450485][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.489440][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.843727][ T6375] team0: Port device team_slave_0 added [ 359.914407][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.939408][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 359.998940][ T6375] team0: Port device team_slave_1 added [ 360.144136][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.260675][ T5812] Bluetooth: hci2: command tx timeout [ 360.352381][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 360.481461][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.540620][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.547897][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.575818][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.640621][ T6224] veth0_macvtap: entered promiscuous mode [ 360.752775][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.866175][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.873587][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.900115][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.924882][ T6224] veth1_macvtap: entered promiscuous mode [ 361.251453][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.217437][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.339122][ T5810] Bluetooth: hci2: command tx timeout [ 362.408214][ T6375] hsr_slave_0: entered promiscuous mode [ 362.417514][ T6375] hsr_slave_1: entered promiscuous mode [ 362.485704][ T14] bridge_slave_1: left allmulticast mode [ 362.491756][ T14] bridge_slave_1: left promiscuous mode [ 362.501351][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.682360][ T14] bridge_slave_0: left allmulticast mode [ 362.688738][ T14] bridge_slave_0: left promiscuous mode [ 362.696307][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.333585][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.432974][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.494338][ T14] bond0 (unregistering): Released all slaves [ 363.770307][ T6224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.779519][ T6224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.788507][ T6224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.797643][ T6224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.233409][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.243066][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.252583][ T6448] bridge_slave_0: entered allmulticast mode [ 364.262305][ T6448] bridge_slave_0: entered promiscuous mode [ 364.346763][ T14] hsr_slave_0: left promiscuous mode [ 364.382469][ T14] hsr_slave_1: left promiscuous mode [ 364.391510][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.399637][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.427981][ T5810] Bluetooth: hci2: command tx timeout [ 364.479683][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.487519][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.657504][ T14] veth1_macvtap: left promiscuous mode [ 364.663569][ T14] veth0_macvtap: left promiscuous mode [ 364.670461][ T14] veth1_vlan: left promiscuous mode [ 364.676675][ T14] veth0_vlan: left promiscuous mode [ 365.692552][ T5810] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 367.204382][ T5810] Bluetooth: hci2: command tx timeout [ 367.794000][ T14] team0 (unregistering): Port device team_slave_1 removed [ 367.835218][ T14] team0 (unregistering): Port device team_slave_0 removed [ 368.257237][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.265100][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.273252][ T6448] bridge_slave_1: entered allmulticast mode [ 368.282652][ T6448] bridge_slave_1: entered promiscuous mode [ 369.743692][ T5812] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 369.752469][ T5812] Bluetooth: hci4: Injecting HCI hardware error event [ 369.761744][ T5812] Bluetooth: hci4: hardware error 0x00 [ 370.909210][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.180987][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.795843][ T5812] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 372.171247][ T6448] team0: Port device team_slave_0 added [ 372.311250][ T6448] team0: Port device team_slave_1 added [ 372.365773][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.488381][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.527779][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.622039][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.649659][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.718366][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.726930][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.753136][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.762191][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.775625][ T6375] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 372.987119][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.998102][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.025361][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.057946][ T6375] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 373.140260][ T6375] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 373.292931][ T6375] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 374.203503][ T6448] hsr_slave_0: entered promiscuous mode [ 374.214083][ T6448] hsr_slave_1: entered promiscuous mode [ 374.223906][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.231902][ T6448] Cannot create hsr debugfs directory [ 374.751056][ T5810] Bluetooth: hci3: command tx timeout [ 376.089284][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.265603][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.405355][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.413229][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.647668][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.655371][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.825760][ T5810] Bluetooth: hci3: command tx timeout [ 376.963123][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 377.583409][ T6536] tipc: Started in network mode [ 377.589516][ T6536] tipc: Node identity 0236d9c18608, cluster identity 4711 [ 377.597646][ T6536] tipc: Enabled bearer , priority 0 [ 377.735197][ T6542] syzkaller0: MTU too low for tipc bearer [ 377.742147][ T6542] tipc: Disabling bearer [ 378.013519][ T4287] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.283528][ T4287] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.537496][ T4287] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.827977][ T4287] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.911391][ T5810] Bluetooth: hci3: command tx timeout [ 378.975670][ T6555] loop1: detected capacity change from 0 to 512 [ 379.034392][ T6555] ======================================================= [ 379.034392][ T6555] WARNING: The mand mount option has been deprecated and [ 379.034392][ T6555] and is ignored by this kernel. Remove the mand [ 379.034392][ T6555] option from the mount to silence this warning. [ 379.034392][ T6555] ======================================================= [ 379.117680][ T6555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 379.124386][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.131300][ T6555] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 379.138450][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.156284][ T6510] bridge_slave_0: entered allmulticast mode [ 379.165809][ T6510] bridge_slave_0: entered promiscuous mode [ 379.392687][ T6555] EXT4-fs (loop1): 1 truncate cleaned up [ 379.436308][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.444333][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.452286][ T6510] bridge_slave_1: entered allmulticast mode [ 379.483800][ T6555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.502391][ T6510] bridge_slave_1: entered promiscuous mode [ 379.673004][ T6448] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.735897][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.963043][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.997500][ T6448] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.044213][ T6448] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.092208][ T6563] input: syz1 as /devices/virtual/input/input7 [ 380.102333][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.138473][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.243375][ T6448] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 380.505532][ T4287] bridge_slave_1: left allmulticast mode [ 380.514059][ T4287] bridge_slave_1: left promiscuous mode [ 380.520917][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.627861][ T4287] bridge_slave_0: left allmulticast mode [ 380.634466][ T4287] bridge_slave_0: left promiscuous mode [ 380.641396][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.979157][ T5810] Bluetooth: hci3: command tx timeout [ 381.405620][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.425251][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.447056][ T4287] bond0 (unregistering): Released all slaves [ 381.478964][ T6510] team0: Port device team_slave_0 added [ 381.488429][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 381.506528][ T6510] team0: Port device team_slave_1 added [ 382.020214][ T4287] hsr_slave_0: left promiscuous mode [ 382.061053][ T4287] hsr_slave_1: left promiscuous mode [ 382.071285][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.079304][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.152588][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.161884][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.232012][ T4287] veth1_macvtap: left promiscuous mode [ 382.237898][ T4287] veth0_macvtap: left promiscuous mode [ 382.244024][ T4287] veth1_vlan: left promiscuous mode [ 382.249848][ T4287] veth0_vlan: left promiscuous mode [ 382.871169][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 382.900960][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 383.192925][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.200466][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.227389][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.478892][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.486028][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.512112][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.519879][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.113874][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.144174][ T6510] hsr_slave_0: entered promiscuous mode [ 384.152958][ T6510] hsr_slave_1: entered promiscuous mode [ 384.161085][ T6510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.168889][ T6510] Cannot create hsr debugfs directory [ 384.624765][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.737259][ T6593] netlink: 240 bytes leftover after parsing attributes in process `syz.2.141'. [ 384.765783][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.773191][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.998152][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.005772][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.079317][ T6375] veth0_vlan: entered promiscuous mode [ 385.380958][ T6375] veth1_vlan: entered promiscuous mode [ 386.200894][ T6375] veth0_macvtap: entered promiscuous mode [ 386.263579][ T6375] veth1_macvtap: entered promiscuous mode [ 386.443889][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.536517][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.581499][ T6510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.682175][ T6375] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.691295][ T6375] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.700589][ T6375] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.709552][ T6375] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.740934][ T6510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.846932][ T6510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.983101][ T6510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.946464][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.341181][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.426745][ T6625] loop2: detected capacity change from 0 to 512 [ 388.523684][ T6625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.619581][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.731169][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.738814][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.753319][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.760808][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.857558][ T6625] EXT4-fs (loop2): 1 truncate cleaned up [ 388.866890][ T6625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.294026][ T6510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.425989][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.336043][ T6653] tipc: Enabled bearer , priority 0 [ 391.437961][ T6653] syzkaller0: MTU too low for tipc bearer [ 391.445485][ T6653] tipc: Disabling bearer [ 391.502453][ T6657] loop1: detected capacity change from 0 to 512 [ 391.578084][ T6448] veth0_vlan: entered promiscuous mode [ 391.652578][ T6657] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.713650][ T6448] veth1_vlan: entered promiscuous mode [ 391.806052][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.870902][ T6657] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 391.881867][ T6657] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.111247][ T6448] veth0_macvtap: entered promiscuous mode [ 392.194766][ T6448] veth1_macvtap: entered promiscuous mode [ 392.434436][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.462626][ T5796] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 392.595976][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.702457][ T6448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.712690][ T6448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.722163][ T6448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.731288][ T6448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.401951][ T6692] loop2: detected capacity change from 0 to 512 [ 395.491897][ T6692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.603573][ T6692] EXT4-fs (loop2): 1 truncate cleaned up [ 395.611637][ T6692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.682952][ T6510] veth0_vlan: entered promiscuous mode [ 395.713234][ T6510] veth1_vlan: entered promiscuous mode [ 395.989514][ T6510] veth0_macvtap: entered promiscuous mode [ 396.047725][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.106762][ T6510] veth1_macvtap: entered promiscuous mode [ 396.309983][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.485960][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.536202][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.545386][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.632290][ T6510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.641444][ T6510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.650672][ T6510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.660680][ T6510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.695495][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 396.939302][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 396.983938][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.992405][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.003751][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 397.104723][ T5879] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 397.117140][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.126377][ T5879] usb 3-1: Product: syz [ 397.130902][ T5879] usb 3-1: Manufacturer: syz [ 397.135727][ T5879] usb 3-1: SerialNumber: syz [ 397.238423][ T5879] usb 3-1: config 0 descriptor?? [ 397.258055][ T6704] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.324080][ T5879] hub 3-1:0.0: bad descriptor, ignoring hub [ 397.331135][ T5879] hub 3-1:0.0: probe with driver hub failed with error -5 [ 397.347734][ T5879] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 397.632540][ T6712] tipc: Started in network mode [ 397.637712][ T6712] tipc: Node identity 065c1e641492, cluster identity 4711 [ 397.646137][ T6712] tipc: Enabled bearer , priority 0 [ 397.705023][ T6704] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 397.711837][ T6704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.720212][ T6704] vhci_hcd vhci_hcd.0: Device attached [ 397.885289][ T6712] syzkaller0: MTU too low for tipc bearer [ 397.892155][ T6712] tipc: Disabling bearer [ 397.902551][ T6713] vhci_hcd: connection closed [ 397.931514][ T4287] vhci_hcd: stop threads [ 397.938297][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 397.941162][ T4287] vhci_hcd: release socket [ 397.950029][ T1995] usb 3-1: USB disconnect, device number 4 [ 397.954615][ T4287] vhci_hcd: disconnect device [ 397.965897][ T5856] vhci_hcd: vhci_device speed not set [ 399.043328][ T6731] loop1: detected capacity change from 0 to 512 [ 399.215976][ T6731] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.428416][ T6731] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 399.440164][ T6731] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.871963][ T5796] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 400.407140][ T6753] loop1: detected capacity change from 0 to 512 [ 400.443329][ T6753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 400.625029][ T6753] EXT4-fs (loop1): 1 truncate cleaned up [ 400.633083][ T6753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.212803][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.531683][ T6771] tipc: Enabled bearer , priority 0 [ 401.630113][ T6775] syzkaller0: MTU too low for tipc bearer [ 401.636073][ T6775] tipc: Disabling bearer [ 401.643798][ T6774] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 401.650599][ T6774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.659281][ T6774] vhci_hcd vhci_hcd.0: Device attached [ 401.761865][ T6776] vhci_hcd: connection closed [ 401.771047][ T4166] vhci_hcd: stop threads [ 401.781249][ T4166] vhci_hcd: release socket [ 401.785883][ T4166] vhci_hcd: disconnect device [ 403.000717][ T4166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.008986][ T4166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.125806][ T6792] loop1: detected capacity change from 0 to 512 [ 403.302434][ T6792] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.419204][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.427420][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.565049][ T6792] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 403.577685][ T6792] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 403.925063][ T5796] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 404.440254][ T6816] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 404.447046][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.455225][ T6816] vhci_hcd vhci_hcd.0: Device attached [ 404.570185][ T6815] loop1: detected capacity change from 0 to 512 [ 404.671805][ T6815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 404.979812][ T6817] vhci_hcd: connection closed [ 405.000568][ T6815] EXT4-fs (loop1): 1 truncate cleaned up [ 405.013789][ T6815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.077008][ T3595] vhci_hcd: stop threads [ 405.081961][ T3595] vhci_hcd: release socket [ 405.086657][ T3595] vhci_hcd: disconnect device [ 405.283191][ T1995] vhci_hcd: vhci_device speed not set [ 405.364558][ T6827] tipc: Started in network mode [ 405.368259][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.372125][ T6827] tipc: Node identity 1a3c903a920f, cluster identity 4711 [ 405.377774][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.394024][ T6827] tipc: Enabled bearer , priority 0 [ 405.438206][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.447023][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.467396][ T6830] input: syz0 as /devices/virtual/input/input9 [ 405.697266][ T6831] syzkaller0: MTU too low for tipc bearer [ 405.703508][ T6831] tipc: Disabling bearer [ 406.371774][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.879017][ T6851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 407.885941][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.894410][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 407.998961][ T6853] vhci_hcd: connection closed [ 407.999722][ T4114] vhci_hcd: stop threads [ 408.009837][ T4114] vhci_hcd: release socket [ 408.014483][ T4114] vhci_hcd: disconnect device [ 408.428872][ T6861] loop6: detected capacity change from 0 to 512 [ 408.558266][ T6861] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.687197][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.694317][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.775311][ T6866] loop2: detected capacity change from 0 to 512 [ 408.839558][ T6866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 408.913303][ T6861] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 408.924403][ T6861] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 409.032248][ T6866] EXT4-fs (loop2): 1 truncate cleaned up [ 409.040943][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.443051][ T6510] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 409.641728][ T6881] tipc: Enabled bearer , priority 0 [ 409.703846][ T6881] syzkaller0: MTU too low for tipc bearer [ 409.715244][ T6881] tipc: Disabling bearer [ 409.806980][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.530752][ T1995] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 410.759553][ T1995] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.768114][ T1995] usb 2-1: config 0 has no interface number 0 [ 410.818959][ T1995] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 410.828483][ T1995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.840579][ T1995] usb 2-1: Product: syz [ 410.844968][ T1995] usb 2-1: Manufacturer: syz [ 410.850942][ T1995] usb 2-1: SerialNumber: syz [ 411.006349][ T1995] usb 2-1: config 0 descriptor?? [ 411.067372][ T6890] syz.5.189 (6890) used greatest stack depth: 2472 bytes left [ 411.251113][ T1995] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 411.302197][ T1995] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 411.314062][ T1995] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 411.322777][ T1995] usb 2-1: media controller created [ 411.486593][ T1995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.518356][ T6904] loop6: detected capacity change from 0 to 7 [ 411.594321][ T6904] Dev loop6: unable to read RDB block 7 [ 411.600617][ T6904] loop6: unable to read partition table [ 411.823631][ T6904] loop6: partition table beyond EOD, truncated [ 411.830470][ T6904] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.050254][ T1995] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 413.265532][ T6909] netlink: 'syz.2.199': attribute type 11 has an invalid length. [ 415.241187][ T1995] usb 2-1: USB disconnect, device number 4 [ 415.923166][ T6915] loop6: detected capacity change from 0 to 512 [ 415.959281][ T6917] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 415.966083][ T6917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.974416][ T6917] vhci_hcd vhci_hcd.0: Device attached [ 416.078844][ T6915] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.094280][ T6918] vhci_hcd: connection closed [ 416.162949][ T54] vhci_hcd: stop threads [ 416.172699][ T54] vhci_hcd: release socket [ 416.177377][ T54] vhci_hcd: disconnect device [ 416.357954][ T6915] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 416.372406][ T6915] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 417.013077][ T6510] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 417.320135][ T6932] tipc: Enabled bearer , priority 0 [ 417.434268][ T6932] syzkaller0: MTU too low for tipc bearer [ 417.440377][ T6932] tipc: Disabling bearer [ 419.119046][ T6952] loop6: detected capacity change from 0 to 7 [ 419.156569][ T6952] Dev loop6: unable to read RDB block 7 [ 419.162891][ T6952] loop6: unable to read partition table [ 419.193447][ T6952] loop6: partition table beyond EOD, truncated [ 419.200711][ T6952] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.181889][ T6969] loop6: detected capacity change from 0 to 512 [ 421.317391][ T6973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 421.324248][ T6973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.332665][ T6973] vhci_hcd vhci_hcd.0: Device attached [ 421.430019][ T6969] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.471780][ T6975] vhci_hcd: connection closed [ 421.473058][ T68] vhci_hcd: stop threads [ 421.487049][ T68] vhci_hcd: release socket [ 421.493538][ T68] vhci_hcd: disconnect device [ 421.559650][ T5856] vhci_hcd: vhci_device speed not set [ 421.597757][ T6969] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 421.609033][ T6969] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 422.055260][ T6510] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 424.952575][ T6993] tipc: Started in network mode [ 424.957737][ T6993] tipc: Node identity fec220d8f83d, cluster identity 4711 [ 424.971266][ T6993] tipc: Enabled bearer , priority 0 [ 425.128038][ T6991] syzkaller0: MTU too low for tipc bearer [ 425.135231][ T6991] tipc: Disabling bearer [ 426.412921][ T7006] loop6: detected capacity change from 0 to 7 [ 426.510177][ T7006] Dev loop6: unable to read RDB block 7 [ 426.516094][ T7006] loop6: unable to read partition table [ 426.551710][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.570067][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.581404][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.599629][ T7006] loop6: partition table beyond EOD, truncated [ 426.609619][ T7006] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 426.610264][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.630489][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.788767][ T5810] Bluetooth: hci5: command tx timeout [ 430.805481][ T7024] loop6: detected capacity change from 0 to 512 [ 430.823914][ T5810] Bluetooth: hci5: command tx timeout [ 431.022401][ T7024] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.080808][ T7027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 431.087639][ T7027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.096923][ T7027] vhci_hcd vhci_hcd.0: Device attached [ 431.186797][ T7031] vhci_hcd: connection closed [ 431.200091][ T3706] vhci_hcd: stop threads [ 431.214435][ T3706] vhci_hcd: release socket [ 431.220246][ T3706] vhci_hcd: disconnect device [ 431.242253][ T7024] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 431.253090][ T7024] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 432.899842][ T5810] Bluetooth: hci5: command tx timeout [ 433.450066][ T7009] chnl_net:caif_netlink_parms(): no params data found [ 433.991858][ T6510] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 434.987352][ T5810] Bluetooth: hci5: command tx timeout [ 435.202597][ T7046] tipc: Enabled bearer , priority 0 [ 435.313943][ T7054] syzkaller0: MTU too low for tipc bearer [ 435.321261][ T7054] tipc: Disabling bearer [ 435.339669][ T5856] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 435.709031][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 435.811828][ T5856] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 435.823350][ T5856] usb 2-1: config 0 has no interface number 0 [ 435.831314][ T5856] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 435.935685][ T5856] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 435.945509][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 435.954975][ T5856] usb 2-1: Product: syz [ 435.960176][ T5856] usb 2-1: SerialNumber: syz [ 436.041421][ T5856] usb 2-1: config 0 descriptor?? [ 436.084004][ T5856] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 436.094577][ T5856] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10 [ 436.461700][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 436.467692][ T1995] usb 2-1: USB disconnect, device number 5 [ 436.468842][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 436.483337][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.492583][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.500820][ T7009] bridge_slave_0: entered allmulticast mode [ 436.510184][ T7009] bridge_slave_0: entered promiscuous mode [ 436.601546][ T1995] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 436.813124][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.820908][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.828894][ T7009] bridge_slave_1: entered allmulticast mode [ 436.838187][ T7009] bridge_slave_1: entered promiscuous mode [ 437.110758][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.228248][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.246394][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.267332][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.279921][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.284889][ T7070] loop6: detected capacity change from 0 to 7 [ 437.447074][ T7070] Dev loop6: unable to read RDB block 7 [ 437.453781][ T7070] loop6: unable to read partition table [ 437.560776][ T7070] loop6: partition table beyond EOD, truncated [ 437.572556][ T7070] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.854729][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.864887][ T1995] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 438.144802][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.248094][ T1995] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 438.258829][ T1995] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.272725][ T1995] usb 3-1: config 2 interface 0 has no altsetting 0 [ 438.441963][ T1995] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 438.451697][ T1995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.460050][ T1995] usb 3-1: Product: syz [ 438.464352][ T1995] usb 3-1: Manufacturer: syz [ 438.469232][ T1995] usb 3-1: SerialNumber: syz [ 438.756977][ T7009] team0: Port device team_slave_0 added [ 438.930254][ T7009] team0: Port device team_slave_1 added [ 439.420156][ T5812] Bluetooth: hci6: command tx timeout [ 439.440611][ T1995] usb 3-1: USB disconnect, device number 5 [ 441.132478][ T7089] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 441.139308][ T7089] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.150288][ T7089] vhci_hcd vhci_hcd.0: Device attached [ 441.198463][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.205768][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.233024][ T7009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.321136][ T7090] vhci_hcd: connection closed [ 441.325706][ T33] vhci_hcd: stop threads [ 441.335428][ T33] vhci_hcd: release socket [ 441.340444][ T33] vhci_hcd: disconnect device [ 441.381410][ T5856] vhci_hcd: vhci_device speed not set [ 441.481243][ T5810] Bluetooth: hci6: command tx timeout [ 441.612158][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.612241][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.612521][ T7009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.188181][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.437454][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.530048][ T7009] hsr_slave_0: entered promiscuous mode [ 442.532767][ T7009] hsr_slave_1: entered promiscuous mode [ 442.534856][ T7009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.534908][ T7009] Cannot create hsr debugfs directory [ 442.673367][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.826088][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 442.826247][ T5810] Bluetooth: hci3: Injecting HCI hardware error event [ 442.826899][ T5810] Bluetooth: hci3: hardware error 0x00 [ 442.842914][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.362660][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 443.534073][ T7104] tipc: Enabled bearer , priority 0 [ 443.613703][ T5812] Bluetooth: hci6: command tx timeout [ 444.170404][ T7104] syzkaller0: MTU too low for tipc bearer [ 444.176325][ T7104] tipc: Disabling bearer [ 445.058987][ T5810] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 445.203018][ T14] bridge_slave_1: left allmulticast mode [ 445.209936][ T14] bridge_slave_1: left promiscuous mode [ 445.216498][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.282129][ T14] bridge_slave_0: left allmulticast mode [ 445.288061][ T14] bridge_slave_0: left promiscuous mode [ 445.295037][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.749860][ T5810] Bluetooth: hci6: command tx timeout [ 445.952490][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.991639][ T7118] loop6: detected capacity change from 0 to 7 [ 446.008807][ T7118] Dev loop6: unable to read RDB block 7 [ 446.014759][ T7118] loop6: unable to read partition table [ 446.056148][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.081022][ T7118] loop6: partition table beyond EOD, truncated [ 446.087556][ T7118] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.116775][ T14] bond0 (unregistering): Released all slaves [ 449.053299][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 449.264254][ T5856] usb 2-1: device descriptor read/64, error -71 [ 449.285167][ T14] hsr_slave_0: left promiscuous mode [ 449.295227][ T14] hsr_slave_1: left promiscuous mode [ 449.303752][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.311739][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.330606][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.343842][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.410908][ T14] veth1_macvtap: left promiscuous mode [ 449.416772][ T14] veth0_macvtap: left promiscuous mode [ 449.423031][ T14] veth1_vlan: left promiscuous mode [ 449.428795][ T14] veth0_vlan: left promiscuous mode [ 449.516441][ T5856] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 449.659072][ T5856] usb 2-1: device descriptor read/64, error -71 [ 449.770142][ T5856] usb usb2-port1: attempt power cycle [ 450.119055][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 450.184873][ T5856] usb 2-1: device descriptor read/8, error -71 [ 450.358012][ T14] team0 (unregistering): Port device team_slave_1 removed [ 450.391620][ T14] team0 (unregistering): Port device team_slave_0 removed [ 450.469691][ T5856] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 450.540401][ T5856] usb 2-1: device descriptor read/8, error -71 [ 450.650604][ T5856] usb usb2-port1: unable to enumerate USB device [ 450.941595][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.950006][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.957738][ T7068] bridge_slave_0: entered allmulticast mode [ 450.967960][ T7068] bridge_slave_0: entered promiscuous mode [ 451.065259][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.079605][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.088365][ T7068] bridge_slave_1: entered allmulticast mode [ 451.132348][ T7068] bridge_slave_1: entered promiscuous mode [ 451.636781][ T14] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.673076][ T7009] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 451.826598][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.939260][ T14] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.053563][ T7009] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 452.117003][ T7146] tipc: Enabled bearer , priority 0 [ 452.137249][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.171473][ T14] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.205727][ T7009] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 452.365483][ T7144] syzkaller0: MTU too low for tipc bearer [ 452.371668][ T7144] tipc: Disabling bearer [ 452.441110][ T14] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.472596][ T7009] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 452.723284][ T7068] team0: Port device team_slave_0 added [ 453.033458][ T7068] team0: Port device team_slave_1 added [ 453.442174][ T14] bridge_slave_1: left allmulticast mode [ 453.448156][ T14] bridge_slave_1: left promiscuous mode [ 453.457058][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.484711][ T14] bridge_slave_0: left allmulticast mode [ 453.492207][ T14] bridge_slave_0: left promiscuous mode [ 453.499295][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.576736][ T7156] loop6: detected capacity change from 0 to 7 [ 454.595190][ T7156] Dev loop6: unable to read RDB block 7 [ 454.601701][ T7156] loop6: unable to read partition table [ 454.630399][ T7156] loop6: partition table beyond EOD, truncated [ 454.637066][ T7156] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.677455][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.767003][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.794629][ T14] bond0 (unregistering): Released all slaves [ 455.296712][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.305096][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.332386][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.358458][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.365944][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.396611][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.434282][ T14] tipc: Left network mode [ 457.861737][ T14] hsr_slave_0: left promiscuous mode [ 457.893281][ T14] hsr_slave_1: left promiscuous mode [ 457.902606][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.910684][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.002990][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.010965][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.195536][ T14] veth1_macvtap: left promiscuous mode [ 458.201528][ T14] veth0_macvtap: left promiscuous mode [ 458.207551][ T14] veth1_vlan: left promiscuous mode [ 458.213445][ T14] veth0_vlan: left promiscuous mode [ 459.009300][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 459.182322][ T14] team0 (unregistering): Port device team_slave_1 removed [ 459.216506][ T14] team0 (unregistering): Port device team_slave_0 removed [ 459.486630][ T9] usb 3-1: device descriptor read/64, error -71 [ 459.739821][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 459.806960][ T7068] hsr_slave_0: entered promiscuous mode [ 459.817192][ T7068] hsr_slave_1: entered promiscuous mode [ 459.844952][ T7173] tipc: Enabled bearer , priority 0 [ 459.905356][ T7172] tipc: Disabling bearer [ 459.929723][ T9] usb 3-1: device descriptor read/64, error -71 [ 460.041145][ T9] usb usb3-port1: attempt power cycle [ 460.420524][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 460.499982][ T9] usb 3-1: device descriptor read/8, error -71 [ 460.807396][ T7009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.826725][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 460.903585][ T9] usb 3-1: device descriptor read/8, error -71 [ 461.024900][ T9] usb usb3-port1: unable to enumerate USB device [ 461.425111][ T7068] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 461.555694][ T7009] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.586922][ T7068] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 461.647899][ T7068] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 461.736693][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.744252][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.786471][ T7068] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 461.902990][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.910452][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.766200][ T7009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.778352][ T7009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.416253][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.725928][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.864247][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.871707][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.977051][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.984702][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.417502][ T7009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.547055][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.139468][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.146213][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.322110][ T7009] veth0_vlan: entered promiscuous mode [ 471.187468][ T7229] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 472.615340][ T7009] veth1_vlan: entered promiscuous mode [ 476.506654][ T7009] veth0_macvtap: entered promiscuous mode [ 476.616553][ T7009] veth1_macvtap: entered promiscuous mode [ 476.817154][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.922309][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.017753][ T7009] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.027430][ T7009] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.036743][ T7009] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.046073][ T7009] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.766913][ T7243] loop1: detected capacity change from 0 to 512 [ 477.914638][ T7243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 478.156283][ T7243] EXT4-fs (loop1): 1 truncate cleaned up [ 478.164402][ T7243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.446520][ T7068] veth0_vlan: entered promiscuous mode [ 478.612084][ T7068] veth1_vlan: entered promiscuous mode [ 478.777096][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.789546][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.804235][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.831003][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.870588][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.904838][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.351199][ T7068] veth0_macvtap: entered promiscuous mode [ 479.411189][ T7068] veth1_macvtap: entered promiscuous mode [ 479.754661][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.144848][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.301536][ T7068] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.310769][ T7068] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.320062][ T7068] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.329216][ T7068] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.989549][ T5810] Bluetooth: hci1: command tx timeout [ 483.058865][ T5810] Bluetooth: hci1: command tx timeout [ 484.100946][ T7250] chnl_net:caif_netlink_parms(): no params data found [ 484.670286][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 484.681464][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 484.694308][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 484.729593][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 484.746912][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 485.149692][ T5810] Bluetooth: hci1: command tx timeout [ 486.898950][ T5810] Bluetooth: hci2: command tx timeout [ 487.021163][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.028901][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.036630][ T7250] bridge_slave_0: entered allmulticast mode [ 487.045442][ T7250] bridge_slave_0: entered promiscuous mode [ 487.229366][ T5810] Bluetooth: hci1: command tx timeout [ 487.466549][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.474948][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.482836][ T7250] bridge_slave_1: entered allmulticast mode [ 487.493027][ T7250] bridge_slave_1: entered promiscuous mode [ 488.096103][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.340424][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.581189][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.597700][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.684218][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.736274][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.773213][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 488.786981][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 488.815921][ T7250] team0: Port device team_slave_0 added [ 488.938368][ T7250] team0: Port device team_slave_1 added [ 488.979271][ T5812] Bluetooth: hci2: command tx timeout [ 489.821896][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.829336][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.855861][ T7250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.041896][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.049195][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.075956][ T7250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.668879][ T5812] Bluetooth: hci7: command tx timeout [ 491.674751][ T5810] Bluetooth: hci2: command tx timeout [ 495.485584][ T5812] Bluetooth: hci7: command tx timeout [ 495.485694][ T5810] Bluetooth: hci2: command tx timeout [ 495.737870][ T7250] hsr_slave_0: entered promiscuous mode [ 495.748105][ T7250] hsr_slave_1: entered promiscuous mode [ 495.756859][ T7250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.765177][ T7250] Cannot create hsr debugfs directory [ 496.865605][ T7311] chnl_net:caif_netlink_parms(): no params data found [ 497.175592][ T3667] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.274072][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.282060][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.291134][ T7287] bridge_slave_0: entered allmulticast mode [ 497.300754][ T7287] bridge_slave_0: entered promiscuous mode [ 497.403602][ T3667] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.425587][ T7343] loop1: detected capacity change from 0 to 512 [ 497.542190][ T5812] Bluetooth: hci7: command tx timeout [ 497.559480][ T7343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 497.592855][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.604242][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.617203][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.642568][ T7343] EXT4-fs (loop1): 1 truncate cleaned up [ 497.651216][ T7343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.664714][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.675183][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.683111][ T7287] bridge_slave_1: entered allmulticast mode [ 497.691735][ T7287] bridge_slave_1: entered promiscuous mode [ 497.729617][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.740748][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.777906][ T3667] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.054312][ T3667] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.400156][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.681497][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.980371][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.187130][ T7354] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 499.194636][ T7354] overlayfs: failed to set xattr on upper [ 499.200752][ T7354] overlayfs: ...falling back to redirect_dir=nofollow. [ 499.209892][ T7354] overlayfs: ...falling back to index=off. [ 499.215893][ T7354] overlayfs: ...falling back to uuid=null. [ 499.625594][ T5810] Bluetooth: hci7: command tx timeout [ 499.710085][ T7287] team0: Port device team_slave_0 added [ 499.744191][ T3667] bridge_slave_1: left allmulticast mode [ 499.750393][ T3667] bridge_slave_1: left promiscuous mode [ 499.756959][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.788708][ T5810] Bluetooth: hci4: command tx timeout [ 499.905290][ T3667] bridge_slave_0: left allmulticast mode [ 499.911312][ T3667] bridge_slave_0: left promiscuous mode [ 499.917880][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.690447][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.783859][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.833277][ T3667] bond0 (unregistering): Released all slaves [ 501.880081][ T5810] Bluetooth: hci4: command tx timeout [ 502.212707][ T7287] team0: Port device team_slave_1 added [ 503.376203][ T3667] hsr_slave_0: left promiscuous mode [ 503.401330][ T3667] hsr_slave_1: left promiscuous mode [ 503.417179][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.425068][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.443882][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.451823][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.515632][ T3667] veth1_macvtap: left promiscuous mode [ 503.522048][ T3667] veth0_macvtap: left promiscuous mode [ 503.528046][ T3667] veth1_vlan: left promiscuous mode [ 503.534025][ T3667] veth0_vlan: left promiscuous mode [ 503.955350][ T5810] Bluetooth: hci4: command tx timeout [ 504.228411][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 504.293169][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 505.196901][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.204811][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.212517][ T7311] bridge_slave_0: entered allmulticast mode [ 505.221273][ T7311] bridge_slave_0: entered promiscuous mode [ 505.476584][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.485027][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.492601][ T7311] bridge_slave_1: entered allmulticast mode [ 505.500957][ T7311] bridge_slave_1: entered promiscuous mode [ 505.543925][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.551341][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.580462][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.848066][ T3667] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.907465][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.914797][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.951085][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.058996][ T5810] Bluetooth: hci4: command tx timeout [ 506.093079][ T3667] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.434592][ T3667] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.491321][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.676624][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.735013][ T3667] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.924850][ T7287] hsr_slave_0: entered promiscuous mode [ 506.935197][ T7287] hsr_slave_1: entered promiscuous mode [ 506.943950][ T7287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.951840][ T7287] Cannot create hsr debugfs directory [ 507.113304][ T7250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.264779][ T7311] team0: Port device team_slave_0 added [ 507.311167][ T7250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.484079][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 507.525973][ T7311] team0: Port device team_slave_1 added [ 507.609187][ T7250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.973303][ T7250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.161295][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.168453][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.197376][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.497496][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.507514][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.536775][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.597200][ T3667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.726259][ T3667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.111697][ T3667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.189779][ T7311] hsr_slave_0: entered promiscuous mode [ 509.200053][ T7311] hsr_slave_1: entered promiscuous mode [ 509.208315][ T7311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.216291][ T7311] Cannot create hsr debugfs directory [ 509.434865][ T3667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.754178][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.762170][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.770356][ T7346] bridge_slave_0: entered allmulticast mode [ 509.781557][ T7346] bridge_slave_0: entered promiscuous mode [ 509.972804][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.980574][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.988307][ T7346] bridge_slave_1: entered allmulticast mode [ 510.037587][ T7346] bridge_slave_1: entered promiscuous mode [ 510.792930][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.919268][ T3667] bridge_slave_1: left allmulticast mode [ 510.925171][ T3667] bridge_slave_1: left promiscuous mode [ 510.932003][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.015918][ T3667] bridge_slave_0: left allmulticast mode [ 511.022237][ T3667] bridge_slave_0: left promiscuous mode [ 511.029062][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.119474][ T3667] bridge_slave_1: left allmulticast mode [ 511.125489][ T3667] bridge_slave_1: left promiscuous mode [ 511.131998][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.243238][ T3667] bridge_slave_0: left allmulticast mode [ 511.249322][ T3667] bridge_slave_0: left promiscuous mode [ 511.255936][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.051799][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.124659][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.152851][ T3667] bond0 (unregistering): Released all slaves [ 512.580618][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.650841][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.705285][ T3667] bond0 (unregistering): Released all slaves [ 513.287415][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.489935][ T3667] tipc: Left network mode [ 513.839825][ T7346] team0: Port device team_slave_0 added [ 514.077062][ T7421] loop1: detected capacity change from 0 to 512 [ 514.077104][ T7346] team0: Port device team_slave_1 added [ 514.233212][ T7421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 514.302878][ T7421] EXT4-fs (loop1): 1 truncate cleaned up [ 514.312393][ T7421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.327851][ T3667] hsr_slave_0: left promiscuous mode [ 514.350842][ T3667] hsr_slave_1: left promiscuous mode [ 514.360788][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.368665][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.416562][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.424674][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.524776][ T3667] hsr_slave_0: left promiscuous mode [ 514.545684][ T3667] hsr_slave_1: left promiscuous mode [ 514.555882][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.565112][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.598920][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.606615][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.668313][ T3667] veth1_macvtap: left promiscuous mode [ 514.674404][ T3667] veth0_macvtap: left promiscuous mode [ 514.680521][ T3667] veth1_vlan: left promiscuous mode [ 514.686055][ T3667] veth0_vlan: left promiscuous mode [ 514.715943][ T3667] veth1_macvtap: left promiscuous mode [ 514.722296][ T3667] veth0_macvtap: left promiscuous mode [ 514.728225][ T3667] veth1_vlan: left promiscuous mode [ 514.734323][ T3667] veth0_vlan: left promiscuous mode [ 515.401611][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.904212][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 515.930078][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 516.637601][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 516.675350][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 516.777028][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'. [ 516.958802][ T1995] libceph: connect (1)[c::]:6789 error -101 [ 516.965370][ T1995] libceph: mon0 (1)[c::]:6789 connect error [ 517.013738][ T7444] ceph: No mds server is up or the cluster is laggy [ 517.238325][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.281115][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.288314][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.316521][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.350502][ T7287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.501388][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.509795][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.539412][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.569262][ T7287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 517.629661][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.650370][ T7287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 517.782476][ T7287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 517.853910][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.861556][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.861065][ T7346] hsr_slave_0: entered promiscuous mode [ 518.873448][ T7346] hsr_slave_1: entered promiscuous mode [ 519.010236][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.017741][ T3778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.512540][ T3667] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.620591][ T3667] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.828122][ T3667] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.998412][ T3667] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.129798][ T7311] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 520.202603][ T7311] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 520.302654][ T7311] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 520.505562][ T7311] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 520.740893][ T3667] bridge_slave_1: left allmulticast mode [ 520.746792][ T3667] bridge_slave_1: left promiscuous mode [ 520.753280][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.977869][ T3667] bridge_slave_0: left allmulticast mode [ 520.984905][ T3667] bridge_slave_0: left promiscuous mode [ 520.992616][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.095333][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.135688][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.157543][ T3667] bond0 (unregistering): Released all slaves [ 522.339966][ T3667] tipc: Left network mode [ 522.756387][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.386945][ T3667] hsr_slave_0: left promiscuous mode [ 523.421909][ T3667] hsr_slave_1: left promiscuous mode [ 523.431782][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.439778][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.457501][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.465920][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.527444][ T3667] veth1_macvtap: left promiscuous mode [ 523.533769][ T3667] veth0_macvtap: left promiscuous mode [ 523.542186][ T3667] veth1_vlan: left promiscuous mode [ 523.551398][ T3667] veth0_vlan: left promiscuous mode [ 524.525244][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 524.590422][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 525.331276][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.384289][ T7346] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 525.484434][ T7346] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 525.534042][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.541671][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.632144][ T7346] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 525.711782][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.719480][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.787067][ T7346] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 525.885867][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.219632][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.810873][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.822846][ T7250] veth0_vlan: entered promiscuous mode [ 526.921910][ T7250] veth1_vlan: entered promiscuous mode [ 526.983739][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.991465][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.155314][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.163037][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.236388][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.504868][ T7250] veth0_macvtap: entered promiscuous mode [ 527.591887][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.615783][ T7250] veth1_macvtap: entered promiscuous mode [ 527.807817][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.815418][ T3647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.847197][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.883588][ T7497] loop1: detected capacity change from 0 to 512 [ 527.986009][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.993731][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.050129][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.089322][ T7497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 528.187027][ T7250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.196551][ T7250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.206258][ T7250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.215424][ T7250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.298751][ T7497] EXT4-fs (loop1): 1 truncate cleaned up [ 528.306725][ T7497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.862280][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.052341][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.428283][ T7287] veth0_vlan: entered promiscuous mode [ 529.455043][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.632731][ T7287] veth1_vlan: entered promiscuous mode [ 530.024890][ T7287] veth0_macvtap: entered promiscuous mode [ 530.155713][ T7287] veth1_macvtap: entered promiscuous mode [ 530.372252][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.463210][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.527745][ T7287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.536939][ T7287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.546783][ T7287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.555961][ T7287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.725258][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.586920][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.593928][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.176081][ T7311] veth0_vlan: entered promiscuous mode [ 534.613993][ T7311] veth1_vlan: entered promiscuous mode [ 535.458251][ T7311] veth0_macvtap: entered promiscuous mode [ 535.491017][ T7346] veth0_vlan: entered promiscuous mode [ 535.616750][ T7346] veth1_vlan: entered promiscuous mode [ 535.671844][ T7311] veth1_macvtap: entered promiscuous mode [ 536.136976][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.202621][ T7346] veth0_macvtap: entered promiscuous mode [ 536.354249][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.400780][ T7346] veth1_macvtap: entered promiscuous mode [ 536.574653][ T7311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.584014][ T7311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.593714][ T7311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.610269][ T7311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.821520][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.919064][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.989629][ T7346] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.998838][ T7346] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.007860][ T7346] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.017112][ T7346] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.396409][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.406162][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.421186][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.434414][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.445726][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.454918][ T7626] loop1: detected capacity change from 0 to 512 [ 541.546728][ T5797] Bluetooth: hci3: command tx timeout [ 541.642111][ T7626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 541.836742][ T7626] EXT4-fs (loop1): 1 truncate cleaned up [ 541.844989][ T7626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.009386][ T7600] chnl_net:caif_netlink_parms(): no params data found [ 542.135513][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.325630][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.574654][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.587942][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.763728][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.773619][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.783902][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.802264][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.889883][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.982716][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.566263][ T14] bridge_slave_1: left allmulticast mode [ 543.572641][ T14] bridge_slave_1: left promiscuous mode [ 543.579356][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.599388][ T14] bridge_slave_0: left allmulticast mode [ 543.605261][ T14] bridge_slave_0: left promiscuous mode [ 543.612399][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.629311][ T5797] Bluetooth: hci3: command tx timeout [ 544.391553][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.428316][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.465137][ T14] bond0 (unregistering): Released all slaves [ 544.988763][ T5797] Bluetooth: hci1: command tx timeout [ 545.087579][ T14] hsr_slave_0: left promiscuous mode [ 545.135992][ T14] hsr_slave_1: left promiscuous mode [ 545.148129][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.156175][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.199603][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.207458][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.291401][ T14] veth1_macvtap: left promiscuous mode [ 545.297156][ T14] veth0_macvtap: left promiscuous mode [ 545.303319][ T14] veth1_vlan: left promiscuous mode [ 545.308970][ T14] veth0_vlan: left promiscuous mode [ 545.709801][ T5797] Bluetooth: hci3: command tx timeout [ 545.905558][ T14] team0 (unregistering): Port device team_slave_1 removed [ 545.948263][ T14] team0 (unregistering): Port device team_slave_0 removed [ 546.750032][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.757587][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.765437][ T7600] bridge_slave_0: entered allmulticast mode [ 546.774927][ T7600] bridge_slave_0: entered promiscuous mode [ 547.091081][ T5797] Bluetooth: hci1: command tx timeout [ 547.201946][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.209929][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.217907][ T7600] bridge_slave_1: entered allmulticast mode [ 547.228025][ T7600] bridge_slave_1: entered promiscuous mode [ 547.547209][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.696126][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.789165][ T5797] Bluetooth: hci3: command tx timeout [ 547.894455][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.026189][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.317175][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.514615][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.523918][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.532719][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.557494][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.570221][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 548.652508][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.856356][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.026621][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.035440][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.067030][ T7600] team0: Port device team_slave_0 added [ 549.138833][ T5797] Bluetooth: hci1: command tx timeout [ 549.344006][ T7600] team0: Port device team_slave_1 added [ 551.189648][ T5797] Bluetooth: hci2: command tx timeout [ 551.214343][ T3667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.222810][ T3667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.229022][ T5797] Bluetooth: hci1: command tx timeout [ 551.336077][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.343457][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.370176][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.509401][ T14] bridge_slave_1: left allmulticast mode [ 551.515324][ T14] bridge_slave_1: left promiscuous mode [ 551.523606][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.766379][ T14] bridge_slave_0: left allmulticast mode [ 551.772685][ T14] bridge_slave_0: left promiscuous mode [ 551.779604][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.640421][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.738035][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.769633][ T14] bond0 (unregistering): Released all slaves [ 552.862623][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.869964][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.896440][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.309255][ T5810] Bluetooth: hci2: command tx timeout [ 553.670061][ T14] hsr_slave_0: left promiscuous mode [ 553.728973][ T14] hsr_slave_1: left promiscuous mode [ 553.737273][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.745702][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.812720][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.820801][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.928618][ T14] veth1_macvtap: left promiscuous mode [ 553.935063][ T14] veth0_macvtap: left promiscuous mode [ 553.942703][ T14] veth1_vlan: left promiscuous mode [ 553.948294][ T14] veth0_vlan: left promiscuous mode [ 554.820919][ T14] team0 (unregistering): Port device team_slave_1 removed [ 554.856858][ T7720] loop9: detected capacity change from 0 to 512 [ 554.965045][ T7720] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 554.967715][ T14] team0 (unregistering): Port device team_slave_0 removed [ 555.311070][ T7720] EXT4-fs (loop9): 1 truncate cleaned up [ 555.320153][ T7720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.409310][ T5810] Bluetooth: hci2: command tx timeout [ 556.326920][ T7346] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.518299][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.532406][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.541304][ T7641] bridge_slave_0: entered allmulticast mode [ 556.557494][ T7641] bridge_slave_0: entered promiscuous mode [ 557.511398][ T5810] Bluetooth: hci2: command tx timeout [ 557.645046][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.653308][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.662307][ T7641] bridge_slave_1: entered allmulticast mode [ 557.671910][ T7641] bridge_slave_1: entered promiscuous mode [ 557.736477][ T7600] hsr_slave_0: entered promiscuous mode [ 557.747080][ T7600] hsr_slave_1: entered promiscuous mode [ 557.758909][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.767028][ T7600] Cannot create hsr debugfs directory [ 559.177902][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.651500][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 559.682639][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.834198][ T3667] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.104461][ T3667] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.194616][ T7641] team0: Port device team_slave_0 added [ 561.282492][ T3667] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.569133][ T7641] team0: Port device team_slave_1 added [ 561.614339][ T3667] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.021984][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.029461][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.056891][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.580918][ T3667] bridge_slave_1: left allmulticast mode [ 562.587035][ T3667] bridge_slave_1: left promiscuous mode [ 562.596324][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.697317][ T3667] bridge_slave_0: left allmulticast mode [ 562.703617][ T3667] bridge_slave_0: left promiscuous mode [ 562.710820][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.262197][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.298427][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.316157][ T3667] bond0 (unregistering): Released all slaves [ 563.371180][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.378452][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.405670][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.640533][ T3667] hsr_slave_0: left promiscuous mode [ 563.687102][ T3667] hsr_slave_1: left promiscuous mode [ 563.695376][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.703464][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.801818][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.809928][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.949562][ T3667] veth1_macvtap: left promiscuous mode [ 563.955590][ T3667] veth0_macvtap: left promiscuous mode [ 563.961965][ T3667] veth1_vlan: left promiscuous mode [ 563.967686][ T3667] veth0_vlan: left promiscuous mode [ 564.650301][ T7775] binder_alloc: 7773: binder_alloc_buf, no vma [ 564.941234][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 564.971063][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 567.921265][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.929784][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.937447][ T7691] bridge_slave_0: entered allmulticast mode [ 567.946399][ T7691] bridge_slave_0: entered promiscuous mode [ 568.121719][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.129674][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.137643][ T7691] bridge_slave_1: entered allmulticast mode [ 568.147600][ T7691] bridge_slave_1: entered promiscuous mode [ 568.204721][ T7641] hsr_slave_0: entered promiscuous mode [ 568.214693][ T7641] hsr_slave_1: entered promiscuous mode [ 568.225026][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.232966][ T7641] Cannot create hsr debugfs directory [ 568.745290][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.377475][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.763026][ T7691] team0: Port device team_slave_0 added [ 569.773881][ T7600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 569.873933][ T7600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 569.973617][ T7691] team0: Port device team_slave_1 added [ 570.007293][ T7600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.192571][ T7600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 572.412693][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.421341][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.448463][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.729700][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.737214][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.767041][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.405836][ T7691] hsr_slave_0: entered promiscuous mode [ 573.416226][ T7691] hsr_slave_1: entered promiscuous mode [ 573.425607][ T7691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.434038][ T7691] Cannot create hsr debugfs directory [ 573.779027][ T7641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 573.901797][ T7641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 573.969088][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.063432][ T7641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 574.149891][ T7641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.353834][ T7600] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.455941][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.463985][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.618664][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.626623][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.368330][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.525156][ T7691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 576.596879][ T7691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 576.660344][ T7691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 576.797167][ T7691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 576.881271][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.035895][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.043809][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.172150][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.180006][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.510938][ T7641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.941955][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.358236][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.524457][ T7600] veth0_vlan: entered promiscuous mode [ 578.618399][ T7691] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.667983][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.675667][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.721477][ T7600] veth1_vlan: entered promiscuous mode [ 578.877868][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.885619][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.074490][ T5879] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 579.322344][ T7600] veth0_macvtap: entered promiscuous mode [ 579.370542][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.382510][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.395219][ T5879] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.409151][ T5879] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 579.418974][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.494728][ T7600] veth1_macvtap: entered promiscuous mode [ 579.649463][ T5879] usb 10-1: config 0 descriptor?? [ 579.723600][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.881092][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.902343][ T5879] usbhid 10-1:0.0: can't add hid device: -71 [ 579.912241][ T5879] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 580.017684][ T7600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.027889][ T7600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.028477][ T5879] usb 10-1: USB disconnect, device number 2 [ 580.037527][ T7600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.052267][ T7600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.096738][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.507163][ T7641] veth0_vlan: entered promiscuous mode [ 580.665547][ T7641] veth1_vlan: entered promiscuous mode [ 581.098226][ T7641] veth0_macvtap: entered promiscuous mode [ 581.257250][ T7641] veth1_macvtap: entered promiscuous mode [ 581.984399][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.133311][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.231404][ T7641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.241013][ T7641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.252047][ T7641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.261911][ T7641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.364483][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.376006][ T7691] veth0_vlan: entered promiscuous mode [ 585.523831][ T7691] veth1_vlan: entered promiscuous mode [ 585.897263][ T7691] veth0_macvtap: entered promiscuous mode [ 586.032769][ T7691] veth1_macvtap: entered promiscuous mode [ 586.252439][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.254337][ T7915] syz.9.348 uses obsolete (PF_INET,SOCK_PACKET) [ 586.360366][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.462952][ T7691] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.474345][ T7691] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.483993][ T7691] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.493421][ T7691] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.503601][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.511844][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.627867][ T3647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.636320][ T3647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.598671][ T7963] tipc: Started in network mode [ 592.604162][ T7963] tipc: Node identity 4285e22ac54, cluster identity 4711 [ 592.612988][ T7963] tipc: Enabled bearer , priority 0 [ 592.701968][ T7963] syzkaller0: MTU too low for tipc bearer [ 592.708231][ T7963] tipc: Disabling bearer [ 592.839641][ T5879] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 593.031194][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.038285][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.187046][ T5879] usb 10-1: config 0 has an invalid interface number: 29 but max is 0 [ 593.199168][ T5879] usb 10-1: config 0 has no interface number 0 [ 593.205969][ T5879] usb 10-1: config 0 interface 29 has no altsetting 0 [ 593.370398][ T5879] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 593.380263][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.389114][ T5879] usb 10-1: Product: syz [ 593.393852][ T5879] usb 10-1: Manufacturer: syz [ 593.399054][ T5879] usb 10-1: SerialNumber: syz [ 593.722272][ T5879] usb 10-1: config 0 descriptor?? [ 593.854027][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.863482][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.996372][ T3667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.004522][ T3667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.090863][ T5879] peak_usb 10-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 594.199950][ T5879] peak_usb 10-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 594.209196][ T5879] peak_usb 10-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 594.441097][ T5879] peak_usb 10-1:0.29: probe with driver peak_usb failed with error -71 [ 594.520418][ T5879] usb 10-1: USB disconnect, device number 3 [ 595.115435][ T5851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 595.329043][ T7990] binder: BINDER_SET_CONTEXT_MGR already set [ 595.335340][ T7990] binder: 7988:7990 ioctl 4018620d 200000000040 returned -16 [ 595.350677][ T5851] usb 4-1: device descriptor read/64, error -71 [ 596.107175][ T5851] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 596.299116][ T5851] usb 4-1: device descriptor read/64, error -71 [ 597.221821][ T5851] usb usb4-port1: attempt power cycle [ 598.239153][ T5851] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 598.391960][ T5851] usb 4-1: device descriptor read/8, error -71 [ 598.946386][ T8011] tipc: Enabled bearer , priority 0 [ 599.008932][ T8011] syzkaller0: MTU too low for tipc bearer [ 599.014851][ T8011] tipc: Disabling bearer [ 600.711108][ T5851] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 601.126125][ T5851] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 601.134827][ T5851] usb 1-1: config 0 has no interface number 0 [ 601.141406][ T5851] usb 1-1: config 0 interface 29 has no altsetting 0 [ 601.209657][ T5851] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 601.219647][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.228095][ T5851] usb 1-1: Product: syz [ 601.232971][ T5851] usb 1-1: Manufacturer: syz [ 601.237815][ T5851] usb 1-1: SerialNumber: syz [ 601.371644][ T5851] usb 1-1: config 0 descriptor?? [ 601.420957][ T8039] binder: BINDER_SET_CONTEXT_MGR already set [ 601.427370][ T8039] binder: 8037:8039 ioctl 4018620d 200000000040 returned -16 [ 601.569593][ T8042] random: crng reseeded on system resumption [ 601.631481][ T5851] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 601.836398][ T5851] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 601.845426][ T5851] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 601.988457][ T5851] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 602.096075][ T5851] usb 1-1: USB disconnect, device number 2 [ 602.250717][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.258976][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.375301][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.383635][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.488989][ T5879] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 602.691304][ T5879] usb 2-1: device descriptor read/64, error -71 [ 603.034849][ T5879] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 603.248915][ T5879] usb 2-1: device descriptor read/64, error -71 [ 603.378435][ T5879] usb usb2-port1: attempt power cycle [ 603.560473][ T8061] overlayfs: missing 'lowerdir' [ 603.609828][ T8060] tipc: Started in network mode [ 603.615126][ T8060] tipc: Node identity e6925af67eaf, cluster identity 4711 [ 603.626324][ T8060] tipc: Enabled bearer , priority 0 [ 603.713948][ T8062] syzkaller0: MTU too low for tipc bearer [ 603.720148][ T8062] tipc: Disabling bearer [ 603.746027][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 603.830302][ T5879] usb 2-1: device descriptor read/8, error -71 [ 604.101054][ T5879] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 604.216236][ T5879] usb 2-1: device descriptor read/8, error -71 [ 604.360889][ T5879] usb usb2-port1: unable to enumerate USB device [ 605.785645][ T8079] binder: BINDER_SET_CONTEXT_MGR already set [ 605.792329][ T8079] binder: 8078:8079 ioctl 4018620d 200000000040 returned -16 [ 607.249006][ T5857] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 607.968344][ T8097] netlink: 44 bytes leftover after parsing attributes in process `syz.8.385'. [ 607.979479][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.8.385'. [ 607.989865][ T8097] netlink: 44 bytes leftover after parsing attributes in process `syz.8.385'. [ 608.064913][ T8099] xt_connbytes: Forcing CT accounting to be enabled [ 608.072184][ T8099] Cannot find add_set index 0 as target [ 609.014155][ T5857] usb 10-1: config 0 has an invalid interface number: 29 but max is 0 [ 609.022673][ T5857] usb 10-1: config 0 has no interface number 0 [ 609.029118][ T5857] usb 10-1: config 0 interface 29 has no altsetting 0 [ 610.545214][ T5857] usb 10-1: string descriptor 0 read error: -71 [ 610.552224][ T5857] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 610.561818][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.771198][ T5857] usb 10-1: config 0 descriptor?? [ 610.839156][ T5857] usb 10-1: can't set config #0, error -71 [ 610.940675][ T5857] usb 10-1: USB disconnect, device number 4 [ 611.422291][ T8109] overlayfs: missing 'lowerdir' [ 615.234868][ T5879] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 615.465176][ T5879] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 615.474394][ T5879] usb 4-1: config 0 has no interface number 0 [ 615.481297][ T5879] usb 4-1: config 0 interface 29 has no altsetting 0 [ 615.648855][ T5879] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 615.659119][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.667798][ T5879] usb 4-1: Product: syz [ 615.672446][ T5879] usb 4-1: Manufacturer: syz [ 615.677439][ T5879] usb 4-1: SerialNumber: syz [ 615.714252][ T8141] netlink: 44 bytes leftover after parsing attributes in process `syz.9.401'. [ 615.723873][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.401'. [ 615.733124][ T8141] netlink: 44 bytes leftover after parsing attributes in process `syz.9.401'. [ 615.882547][ T5879] usb 4-1: config 0 descriptor?? [ 616.113917][ T5879] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 616.124146][ T5879] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 616.386473][ T5879] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -32 [ 616.589590][ T5879] usb 4-1: USB disconnect, device number 6 [ 617.320986][ T8152] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 618.100081][ T5810] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 618.108885][ T5810] Bluetooth: hci4: Injecting HCI hardware error event [ 618.116328][ T5810] Bluetooth: hci4: hardware error 0x00 [ 619.483322][ T8159] overlayfs: missing 'lowerdir' [ 620.208201][ T5810] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 620.262585][ T5857] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 623.122136][ T5857] usb 10-1: unable to read config index 0 descriptor/all [ 623.129765][ T5857] usb 10-1: can't read configurations, error -71 [ 625.070685][ T8191] netlink: 44 bytes leftover after parsing attributes in process `syz.8.414'. [ 625.080005][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.8.414'. [ 625.089203][ T8191] netlink: 44 bytes leftover after parsing attributes in process `syz.8.414'. [ 625.152763][ T8192] netlink: 240 bytes leftover after parsing attributes in process `syz.1.413'. [ 625.255695][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.269979][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.279450][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.331320][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.346876][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.148369][ T8199] Zero length message leads to an empty skb [ 627.007654][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 627.382309][ T5797] Bluetooth: hci5: command tx timeout [ 627.730019][ T5857] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 627.969910][ T5857] usb 10-1: Using ep0 maxpacket: 16 [ 628.066800][ T5857] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 628.076465][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.085701][ T5857] usb 10-1: Product: syz [ 628.090567][ T5857] usb 10-1: Manufacturer: syz [ 628.095963][ T5857] usb 10-1: SerialNumber: syz [ 628.379567][ T5879] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 628.388418][ T5857] r8152-cfgselector 10-1: Unknown version 0x0000 [ 628.395352][ T5857] r8152-cfgselector 10-1: config 0 descriptor?? [ 628.659927][ T5879] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.685562][ T5879] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 628.695576][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.703942][ T5879] usb 4-1: Product: syz [ 628.708273][ T5879] usb 4-1: Manufacturer: syz [ 628.713062][ T5879] usb 4-1: SerialNumber: syz [ 628.877930][ T5857] r8152-cfgselector 10-1: USB disconnect, device number 7 [ 629.282093][ T5879] usb 4-1: config 0 descriptor?? [ 629.489971][ T5797] Bluetooth: hci5: command tx timeout [ 630.130809][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.138354][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.146356][ T8194] bridge_slave_0: entered allmulticast mode [ 630.154841][ T8194] bridge_slave_0: entered promiscuous mode [ 630.389925][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.397398][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.405146][ T8194] bridge_slave_1: entered allmulticast mode [ 630.413602][ T8194] bridge_slave_1: entered promiscuous mode [ 630.965581][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.048318][ T8249] netlink: 36 bytes leftover after parsing attributes in process `syz.9.427'. [ 631.057822][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.9.427'. [ 631.067176][ T8249] netlink: 36 bytes leftover after parsing attributes in process `syz.9.427'. [ 631.207271][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.228798][ T5857] usb 4-1: USB disconnect, device number 7 [ 631.629032][ T5797] Bluetooth: hci5: command tx timeout [ 632.761092][ T5797] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 632.769895][ T5797] Bluetooth: hci2: Injecting HCI hardware error event [ 632.782947][ T5797] Bluetooth: hci2: hardware error 0x00 [ 633.698800][ T5810] Bluetooth: hci5: command tx timeout [ 634.918928][ T5797] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 635.086586][ T3667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.187077][ T8194] team0: Port device team_slave_0 added [ 635.271851][ T8194] team0: Port device team_slave_1 added [ 635.353657][ T3667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.212735][ T3667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.628828][ T3667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.755273][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.762799][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.791923][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.188906][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.196295][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.223376][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.609693][ T5851] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 639.732616][ T3667] bridge_slave_1: left allmulticast mode [ 639.740620][ T3667] bridge_slave_1: left promiscuous mode [ 639.747214][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.799313][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 639.909838][ T5851] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 639.919322][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.927592][ T5851] usb 4-1: Product: syz [ 639.932246][ T5851] usb 4-1: Manufacturer: syz [ 639.937079][ T5851] usb 4-1: SerialNumber: syz [ 639.966878][ T3667] bridge_slave_0: left allmulticast mode [ 639.974381][ T3667] bridge_slave_0: left promiscuous mode [ 639.981271][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.520668][ T5851] r8152-cfgselector 4-1: Unknown version 0x0000 [ 640.527167][ T5851] r8152-cfgselector 4-1: config 0 descriptor?? [ 642.426089][ T5879] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 642.911077][ T8300] netlink: 36 bytes leftover after parsing attributes in process `syz.8.440'. [ 642.920653][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.8.440'. [ 642.929985][ T8300] netlink: 36 bytes leftover after parsing attributes in process `syz.8.440'. [ 643.202983][ T5419] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 643.430811][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.450097][ T5419] usb 10-1: Using ep0 maxpacket: 32 [ 643.525278][ T5419] usb 10-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 643.534964][ T5419] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.546347][ T5419] usb 10-1: Product: syz [ 643.552101][ T5419] usb 10-1: Manufacturer: syz [ 643.557022][ T5419] usb 10-1: SerialNumber: syz [ 643.567044][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.595480][ T3667] bond0 (unregistering): Released all slaves [ 643.681759][ T5419] usb 10-1: config 0 descriptor?? [ 643.849137][ T8194] hsr_slave_0: entered promiscuous mode [ 643.859389][ T8194] hsr_slave_1: entered promiscuous mode [ 643.868007][ T8194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.876096][ T8194] Cannot create hsr debugfs directory [ 643.959711][ T3667] tipc: Left network mode [ 644.502296][ T5419] usb 10-1: USB disconnect, device number 8 [ 645.188977][ T3667] hsr_slave_0: left promiscuous mode [ 645.258765][ T3667] hsr_slave_1: left promiscuous mode [ 645.266854][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.274902][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.402241][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.410233][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.569263][ T3667] veth1_macvtap: left promiscuous mode [ 645.575043][ T3667] veth0_macvtap: left promiscuous mode [ 645.581492][ T3667] veth1_vlan: left promiscuous mode [ 645.587068][ T3667] veth0_vlan: left promiscuous mode [ 646.798861][ T5419] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 649.231699][ T8341] netlink: 56 bytes leftover after parsing attributes in process `syz.8.452'. [ 649.241185][ T8341] netlink: 'syz.8.452': attribute type 3 has an invalid length. [ 649.249364][ T8341] netlink: 40 bytes leftover after parsing attributes in process `syz.8.452'. [ 649.487139][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 649.510621][ T5419] usb 10-1: Using ep0 maxpacket: 16 [ 649.622054][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 649.999595][ T5419] usb 10-1: device descriptor read/all, error -71 [ 650.829326][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.9.454'. [ 650.838775][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.9.454'. [ 650.847891][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.9.454'. [ 652.067655][ T8362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.911798][ T8194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.973825][ T8194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.056256][ T8367] ===================================================== [ 654.063907][ T8367] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 654.071494][ T8367] _copy_to_user+0xcc/0x120 [ 654.076208][ T8367] vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 654.082324][ T8367] __se_sys_ioctl+0x23c/0x400 [ 654.087236][ T8367] __x64_sys_ioctl+0x97/0xe0 [ 654.092130][ T8367] x64_sys_call+0x1ebe/0x3db0 [ 654.097023][ T8367] do_syscall_64+0xd9/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 654.102042][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.108212][ T8367] [ 654.110740][ T8367] Uninit was stored to memory at: [ 654.118990][ T8367] kmemdup_noprof+0xb0/0x100 [ 654.123839][ T8367] vmci_datagram_dispatch+0x4eb/0x1560 [ 654.129832][ T8367] vmci_ctx_put+0x88e/0x15d0 [ 654.136747][ T8367] vmci_ctx_destroy+0x15d/0x250 [ 654.142517][ T8367] vmci_host_unlocked_ioctl+0x4592/0x5200 [ 654.148430][ T8367] __se_sys_ioctl+0x23c/0x400 [ 654.153455][ T8367] __x64_sys_ioctl+0x97/0xe0 [ 654.158287][ T8367] x64_sys_call+0x1ebe/0x3db0 [ 654.163341][ T8367] do_syscall_64+0xd9/0x210 [ 654.168050][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.174293][ T8367] [ 654.176740][ T8367] Local variable ev.i.i created at: [ 654.177399][ T8371] loop6: detected capacity change from 0 to 7 [ 654.182240][ T8367] vmci_ctx_put+0x76b/0x15d0 [ 654.182365][ T8367] vmci_ctx_destroy+0x15d/0x250 [ 654.198970][ T8367] [ 654.201396][ T8367] Bytes 28-31 of 40 are uninitialized [ 654.206885][ T8367] Memory access of size 40 starts at ffff88804de41700 [ 654.213943][ T8367] Data copied to user address 00002000000003c0 [ 654.220440][ T8367] [ 654.222911][ T8367] CPU: 1 UID: 0 PID: 8367 Comm: syz.9.459 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 654.235263][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.247647][ T8367] ===================================================== [ 654.255452][ T8367] Disabling lock debugging due to kernel taint [ 654.261837][ T8367] Kernel panic - not syncing: kmsan.panic set ... [ 654.268430][ T8367] CPU: 1 UID: 0 PID: 8367 Comm: syz.9.459 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 654.282217][ T8367] Tainted: [B]=BAD_PAGE [ 654.286489][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.296707][ T8367] Call Trace: [ 654.300131][ T8367] [ 654.303202][ T8367] __dump_stack+0x26/0x30 [ 654.307737][ T8367] dump_stack_lvl+0x53/0x270 [ 654.312542][ T8367] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.318617][ T8367] dump_stack+0x1e/0x25 [ 654.323013][ T8367] panic+0x4bd/0xd50 [ 654.327162][ T8367] kmsan_report+0x31c/0x320 [ 654.331909][ T8367] ? kmsan_internal_check_memory+0x16c/0x230 [ 654.338134][ T8367] ? kmsan_copy_to_user+0xf1/0x190 [ 654.343508][ T8367] ? _copy_to_user+0xcc/0x120 [ 654.348434][ T8367] ? vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 654.354548][ T8367] ? __se_sys_ioctl+0x23c/0x400 [ 654.359668][ T8367] ? __x64_sys_ioctl+0x97/0xe0 [ 654.364707][ T8367] ? x64_sys_call+0x1ebe/0x3db0 [ 654.369834][ T8367] ? do_syscall_64+0xd9/0x210 [ 654.374733][ T8367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.381020][ T8367] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 654.387313][ T8367] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 654.393357][ T8367] ? stack_depot_save_flags+0x60f/0x7b0 [ 654.399106][ T8367] ? kmsan_get_metadata+0xfb/0x160 [ 654.404441][ T8367] ? kmsan_get_metadata+0xfb/0x160 [ 654.409791][ T8367] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 654.416342][ T8367] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 654.422644][ T8367] ? kmsan_get_metadata+0xfb/0x160 [ 654.428034][ T8367] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.434217][ T8367] kmsan_internal_check_memory+0x16c/0x230 [ 654.440278][ T8367] kmsan_copy_to_user+0xf1/0x190 [ 654.445413][ T8367] _copy_to_user+0xcc/0x120 [ 654.450105][ T8367] vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 654.456028][ T8367] ? kmsan_get_metadata+0xfb/0x160 [ 654.461346][ T8367] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 654.467586][ T8367] __se_sys_ioctl+0x23c/0x400 [ 654.472454][ T8367] __x64_sys_ioctl+0x97/0xe0 [ 654.477245][ T8367] x64_sys_call+0x1ebe/0x3db0 [ 654.482116][ T8367] do_syscall_64+0xd9/0x210 [ 654.486885][ T8367] ? irqentry_exit+0x16/0x60 [ 654.491666][ T8367] ? clear_bhb_loop+0x40/0x90 [ 654.496524][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.502597][ T8367] RIP: 0033:0x7f6e73b8e929 [ 654.507142][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.526929][ T8367] RSP: 002b:00007f6e74910038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.535516][ T8367] RAX: ffffffffffffffda RBX: 00007f6e73db5fa0 RCX: 00007f6e73b8e929 [ 654.543652][ T8367] RDX: 0000200000000200 RSI: 00000000000007ac RDI: 0000000000000008 [ 654.551795][ T8367] RBP: 00007f6e73c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 654.559902][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.568011][ T8367] R13: 0000000000000000 R14: 00007f6e73db5fa0 R15: 00007ffdbdcea1e8 [ 654.576180][ T8367] [ 654.579727][ T8367] Kernel Offset: disabled [ 654.584156][ T8367] Rebooting in 86400 seconds..