last executing test programs: 9m31.0415514s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a07"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) 9m27.048292329s ago: executing program 0 (id=10): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) 9m26.347336719s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 9m26.034195097s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f00000000c0)={[{@init_itable_val}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x80, 0x640, &(0x7f0000000400)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafC29lUKb254XssuS3T3sLtEyo1GsyJKt2JalzXw+IOnNm5He+2r09N7MaDQBlNZ0dpdGHIuIa0nEVNu8yWjOnC6We/HBo+vZLYlG42fvJ5EUea3lXxaPh7O7pPmc/1yM+Eplc7nLD1dvztUbTY8jTq/cunt6+eHqqaVbczcWbizcnj3zg7PnZn44+68eFX/8ZnEeLh4vXf7pN//wm199f/G/9VNJnI+r1V/PR0cce2W6+e5GFmJ7/lhEnMsSXd4X2E+V4vNYjYivxVRU8qmmqVj6/VArBwxUo9LsnxrjDaB0khh2DYDhaI0DWtv2g9gOHmXPL2T3D7rEP1ZsvR/Mt40OvUjatoyy3Igje1D+WkR89uj4X7Jb9NgPMbYH5fQs/0lEfL3b+k/y+I/kkWbxp5G2PS9LzxT7NrL6/XgXdUja0v19/t5w588W3iT+9vWQxX++eMzyL/Z4/e128Ux3TJet/QEwHOsXio48G4jERv+XjQxb45/oHP80/pEfG+rsu3aid/+X7sGrby8f/4116/9b/f3BvA9PO8ZhSax9dKX7S1Y7M9753aU/9Sp/um38l92y8ltjwT7semj4/EnE8Y74f5u/9cmr9Z90Gf9mi1zrs4yf/O+9S73m7TL+XWs8jTjRdftnY1SapTqOTybROj55dvb04lJ9YaZ537WMf/77l3/rVf6w48/W/6HX4l/9RnPO1us/y7vbZxl/v/L0VjN1YNO8yW3jT98dT67mqfH8fqN5jSeXi0WaDw/mVlbundm6Lq1l8sfZZvwnv9O9/feIP9/4mGh9Zfbh7s9vvmh9j3ba5fp/2ehzwV6y+Od7fP63W/9/7LOMj39x/1tdZ7Tektfi39gnMbHDmAAAAAAAAKCs0vwYbJLWXqXTtFYcePtqHErrd5ZXvrt45/7t+YiT+e8hq2nrSPdUczrJpmeL38O2ps90TH8vIo5GxJ8rE/l07Xq1Pj/s4AEAAAAAAAAAAAAAAAAAAGBEHC7O/39ZXA/sw0qa1mrDrhWwbwZ5gTlgtGn/UF55+9+f660BI0b/D+XVtf37UoBS0NShvLR/KC/tH8pL+4fy0v6hvHq3/01zngy6LgAAAADAnjn67fVnYxGx9qOJ/JYZL+ZVh1ozYNA62rgjgVAilWFXABiaVx2+0/+hdPraxv+k+HPAwVcHGIKkW2Y+OGhs3fjXuz4TAAAAAAAAAAAAABiAE8fWnyXO/4dSctoflNfOzv+v7PypwMjo9oc//gQIysE2PpRcHzsBDvaa4fx/AAAAAAAAAAAAANg3k/ktSWvFz4AnI01rtYgvRcSRqCaLS/WFmYj4ckT8v1I9kE3PDrvSAAAAAAAAAAAAAAAAAAAA8JZZfrh6c65eX7jXnvh0U87bnWhd8XRU6tOeiGTgRaTRkTMREaMQ+2ASY205ScRatub34pWT3X9+YhTen3vLPS/2BwAAAAAAAAAAAAAAAAAADFLbucfdHf/rPtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbfxvX/B5cYdowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfT5wEAAP//x6g4cg==") r0 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x8, 0xff, 0xffffffffffffffff, 0x2, 0x0, 0x8}, {0xa, 0x3, 0x6, 0x7, 0x4, 0x2}]}) 9m23.640454814s ago: executing program 1 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x50, 0xfffffffffffffffd) setpgid(r1, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000280)={{}, 0x7}) unshare(0x2c020400) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000000000000f9ffffff0000020500010007000000471479721c817d2e862784248fee91fb9372ac7e5efce7fb5ca85d3f0daae3a1872145d582b07b4ccda83f2d27c2ed44926294b5e38527464c1b70d5beb9fb53f28ca0635c1e1dd44e9bee3241e283e084824bf26793aabc020879ea9aefef2212c3d865c12cd6ce3726554d1b"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 9m22.870555889s ago: executing program 0 (id=17): syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x2, 0x0, [0x80000000, 0x9, 0x8, 0x3, 0x5, 0xb, 0xfffffe01, 0x7]}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x200}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x1f3, @time={0x6, 0x3}, 0xf, {0x0, 0x6}, 0x8, 0x0, 0x1}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) 9m17.697600903s ago: executing program 1 (id=18): r0 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x400) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010100}, 0x1, 0x1, 0x3, 0x1}}, 0x26) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 9m16.61018624s ago: executing program 1 (id=22): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 9m6.484191046s ago: executing program 32 (id=17): syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x2, 0x0, [0x80000000, 0x9, 0x8, 0x3, 0x5, 0xb, 0xfffffe01, 0x7]}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x200}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x1f3, @time={0x6, 0x3}, 0xf, {0x0, 0x6}, 0x8, 0x0, 0x1}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) 9m0.534865224s ago: executing program 33 (id=22): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 5m50.024404353s ago: executing program 2 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xeadf, 0x800, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd700000dcdf250900000030000380140002"], 0x44}}, 0x48040) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(r2, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) listen(r7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 5m43.351738248s ago: executing program 2 (id=218): capset(&(0x7f0000000340)={0x19980330}, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x9, 0x4, 0x3}) fstat(0xffffffffffffffff, 0x0) setgroups(0x0, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x629d, 0x7, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x7c, {0x1, "f2460f1bacba000000000f01c8430f01c8430fc7bdce000000440f0199fe5f0000f22636440f20c166400ff29aa5a50000410f232ac74424002d000000c744240200580000ff1c24c74424000f000000c7442402b0921954c7442406000000000f011424"}}], 0xbc}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000480)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000440)=0x40}) modify_ldt$write(0x1, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m40.445295625s ago: executing program 2 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x444040) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000180)) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r6 = io_uring_setup(0x344f, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 5m30.453018121s ago: executing program 2 (id=227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 5m26.918187535s ago: executing program 2 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m24.148582167s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x444040) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000180)) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r6 = io_uring_setup(0x344f, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 5m6.752932736s ago: executing program 34 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x444040) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000180)) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r6 = io_uring_setup(0x344f, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 4m21.613470454s ago: executing program 3 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 4m13.284106048s ago: executing program 3 (id=283): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x400, 0xffffffffffffffff, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/181, 0x47}], 0x1, 0xfffffffd, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xb, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 4m11.153756125s ago: executing program 3 (id=285): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) openat$vsock(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80d08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) 4m8.918774129s ago: executing program 3 (id=286): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000980)={0x1, 0x0, [{0x40000108, 0x0, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0xa00, 0x0, 0x24008000}, 0x4000) 4m8.372789189s ago: executing program 3 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m7.06886879s ago: executing program 3 (id=291): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000006506030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3m51.523695906s ago: executing program 35 (id=291): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000006506030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 12.545371037s ago: executing program 4 (id=472): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x400, r0, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/181, 0x47}], 0x1, 0xfffffffd, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xb, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 10.265072019s ago: executing program 4 (id=475): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x39, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsetxattr(r3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xb07, 0xd, 0x2, 0x18c}, 0x3, 0x1, 0x1, 0x1, 0x8, 0x16, 0x1a, 0x8, 0x8, 0x5, {0x5, 0x4, 0x2, 0x9cac, 0x9, 0xc}}}}]}, 0x78}}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.908811929s ago: executing program 5 (id=476): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x2d, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x100000000) 9.409280356s ago: executing program 5 (id=477): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80d08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) 8.633262359s ago: executing program 4 (id=478): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.894143452s ago: executing program 5 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpriority(0x0, r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4000000) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x9d, 0xd, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x7, 0x8000, 0x62, 0x7fffffff}}) 7.019265276s ago: executing program 4 (id=480): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) 5.094664195s ago: executing program 5 (id=481): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.437938198s ago: executing program 4 (id=482): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/181, 0x47}], 0x1, 0xfffffffd, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xb, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 480.851552ms ago: executing program 5 (id=483): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x5c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r1, 0x0, 0xfffffffffffffffc}) 477.320635ms ago: executing program 4 (id=484): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x3, &(0x7f0000000040)={0xc, "810556c721393f4084c89ea7f77d040b00"}}) 0s ago: executing program 5 (id=485): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x39, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsetxattr(r3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xb07, 0xd, 0x2, 0x18c}, 0x3, 0x1, 0x1, 0x1, 0x8, 0x16, 0x1a, 0x8, 0x8, 0x5, {0x5, 0x4, 0x2, 0x9cac, 0x9, 0xc}}}}]}, 0x78}}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000300) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): ond_slave_0): Enslaving as an active interface with an up link [ 394.151029][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.783065][ T6719] syz.2.183 (6719): drop_caches: 2 [ 395.945365][ T6484] team0: Port device team_slave_0 added [ 395.974557][ T5860] bridge_slave_1: left allmulticast mode [ 396.003145][ T5860] bridge_slave_1: left promiscuous mode [ 396.042950][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.077510][ T5860] bridge_slave_0: left allmulticast mode [ 396.108051][ T5860] bridge_slave_0: left promiscuous mode [ 396.132982][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.339249][ T6730] binder: 6724:6730 ioctl c058671e 2000000008c0 returned -22 [ 397.417526][ T6739] netlink: 68 bytes leftover after parsing attributes in process `syz.2.187'. [ 398.476593][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.627008][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.712659][ T5860] bond0 (unregistering): Released all slaves [ 398.853129][ T6484] team0: Port device team_slave_1 added [ 399.885490][ T6746] loop2: detected capacity change from 0 to 1024 [ 401.227971][ T5232] 8021q: adding VLAN 0 to HW filter on device eth5 [ 401.529807][ T6746] overlay: filesystem on ./file0 not supported [ 402.327487][ T5860] hsr_slave_0: left promiscuous mode [ 402.399181][ T5860] hsr_slave_1: left promiscuous mode [ 402.426347][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.548188][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.866844][ T6758] syz.4.192 (6758): drop_caches: 2 [ 404.985110][ T5860] team0 (unregistering): Port device team_slave_1 removed [ 405.056680][ T6769] binder: 6766:6769 ioctl c058671e 2000000008c0 returned -22 [ 405.721527][ T5860] team0 (unregistering): Port device team_slave_0 removed [ 407.055398][ T6779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.198'. [ 407.102493][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.109948][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.144760][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.357250][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.391584][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.411287][ T6526] bridge_slave_0: entered allmulticast mode [ 407.518207][ T6526] bridge_slave_0: entered promiscuous mode [ 408.188437][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.263689][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.317008][ T6783] loop2: detected capacity change from 0 to 2048 [ 408.411289][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.467524][ T6783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.031734][ T5583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.190962][ T6484] hsr_slave_0: entered promiscuous mode [ 409.200741][ T6484] hsr_slave_1: entered promiscuous mode [ 409.209091][ T6484] debugfs: 'hsr0' already exists in 'hsr' [ 409.215245][ T6484] Cannot create hsr debugfs directory [ 409.235311][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.281630][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.361131][ T6526] bridge_slave_1: entered allmulticast mode [ 409.388633][ T6526] bridge_slave_1: entered promiscuous mode [ 410.807052][ T6798] syz.4.203 (6798): drop_caches: 2 [ 413.794762][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.337256][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.732878][ T6807] binder: 6805:6807 ioctl c058671e 2000000008c0 returned -22 [ 419.099775][ T6814] capability: warning: `syz.4.207' uses 32-bit capabilities (legacy support in use) [ 419.113941][ T6526] team0: Port device team_slave_0 added [ 419.192403][ T6526] team0: Port device team_slave_1 added [ 419.469694][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.495109][ T6820] netlink: 68 bytes leftover after parsing attributes in process `syz.3.209'. [ 419.516862][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.608133][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.687195][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.742024][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.900449][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.034560][ T6825] loop4: detected capacity change from 0 to 2048 [ 421.220393][ T5584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.238786][ T5584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.250851][ T5584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.277504][ T5584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.291182][ T5584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.485870][ T6825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.454824][ T5584] Bluetooth: hci5: command tx timeout [ 425.470262][ T5584] Bluetooth: hci5: command tx timeout [ 427.550304][ T5584] Bluetooth: hci5: command tx timeout [ 427.956076][ T5586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.640360][ T5584] Bluetooth: hci5: command tx timeout [ 430.310624][ T6859] syz.2.215 (6859): drop_caches: 2 [ 430.681839][ T5587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.728040][ T5587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.789062][ T5587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.926110][ T5587] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 431.124187][ T5587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.683830][ T6871] binder: 6864:6871 ioctl c058671e 2000000008c0 returned -22 [ 433.470722][ T5587] Bluetooth: hci6: command tx timeout [ 433.657878][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.220'. [ 434.718713][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 435.438668][ T5907] bridge_slave_1: left allmulticast mode [ 435.444744][ T5907] bridge_slave_1: left promiscuous mode [ 435.451465][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.511678][ T5907] bridge_slave_0: left allmulticast mode [ 435.590745][ T5587] Bluetooth: hci6: command tx timeout [ 435.867178][ T5907] bridge_slave_0: left promiscuous mode [ 435.905227][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.631171][ T5587] Bluetooth: hci6: command tx timeout [ 439.639722][ T6907] loop4: detected capacity change from 0 to 2048 [ 439.723687][ T5587] Bluetooth: hci6: command tx timeout [ 440.428234][ T6907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.854590][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.204937][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.237857][ T5586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.359592][ T5907] bond0 (unregistering): Released all slaves [ 445.538168][ T6926] syz.4.226 (6926): drop_caches: 2 [ 446.100647][ T5907] hsr_slave_0: left promiscuous mode [ 446.155454][ T5907] hsr_slave_1: left promiscuous mode [ 446.208911][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.308021][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.417379][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.229'. [ 447.816947][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 447.869667][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 448.376549][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.385516][ T6935] batadv_slave_1: entered promiscuous mode [ 449.820481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.827857][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.757659][ T5907] bridge_slave_1: left allmulticast mode [ 451.822659][ T5907] bridge_slave_1: left promiscuous mode [ 451.888799][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.585470][ T5907] bridge_slave_0: left allmulticast mode [ 453.599549][ T5907] bridge_slave_0: left promiscuous mode [ 453.628167][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.780729][ T5680] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 457.323209][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.362751][ T5680] usb 4-1: device descriptor read/64, error -71 [ 457.388419][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.406592][ T5907] bond0 (unregistering): Released all slaves [ 457.444523][ T5232] 8021q: adding VLAN 0 to HW filter on device eth7 [ 457.641310][ T5680] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 457.768431][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.806788][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.820571][ T5680] usb 4-1: device descriptor read/64, error -71 [ 457.956943][ T5680] usb usb4-port1: attempt power cycle [ 458.104883][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 458.444911][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 459.077298][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.239'. [ 470.240887][ T7029] netlink: 68 bytes leftover after parsing attributes in process `syz.4.249'. [ 471.036535][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.047520][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.057999][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.079420][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.092229][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.160329][ T5584] Bluetooth: hci0: command tx timeout [ 474.650427][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.658539][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.672318][ T6833] bridge_slave_0: entered allmulticast mode [ 474.997637][ T6833] bridge_slave_0: entered promiscuous mode [ 475.012115][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.019567][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.027304][ T6833] bridge_slave_1: entered allmulticast mode [ 475.635567][ T5584] Bluetooth: hci0: command tx timeout [ 475.732852][ T6833] bridge_slave_1: entered promiscuous mode [ 477.712163][ T5584] Bluetooth: hci0: command tx timeout [ 479.333810][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.392476][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.436821][ T6860] bridge_slave_0: entered allmulticast mode [ 479.484829][ T6860] bridge_slave_0: entered promiscuous mode [ 479.803027][ T5584] Bluetooth: hci0: command tx timeout [ 480.280536][ T5680] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 480.462883][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.470472][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.477977][ T6860] bridge_slave_1: entered allmulticast mode [ 480.696994][ T6860] bridge_slave_1: entered promiscuous mode [ 480.745744][ T5680] usb 5-1: not running at top speed; connect to a high speed hub [ 480.767962][ T5680] usb 5-1: config 7 has an invalid interface number: 83 but max is 0 [ 480.807595][ T5680] usb 5-1: config 7 has no interface number 0 [ 480.850477][ T5680] usb 5-1: config 7 interface 83 altsetting 193 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 480.896911][ T5680] usb 5-1: config 7 interface 83 altsetting 193 endpoint 0x4 has invalid wMaxPacketSize 0 [ 480.951736][ T5680] usb 5-1: config 7 interface 83 has no altsetting 0 [ 481.019103][ T5680] usb 5-1: New USB device found, idVendor=2357, idProduct=0201, bcdDevice=ae.e5 [ 481.078425][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.122515][ T5680] usb 5-1: Product: syz [ 481.143353][ T5680] usb 5-1: Manufacturer: syz [ 481.173580][ T5680] usb 5-1: SerialNumber: syz [ 481.244576][ T7077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.283018][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.409887][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.566239][ T5680] option 5-1:7.83: GSM modem (1-port) converter detected [ 481.675820][ T7086] netlink: 68 bytes leftover after parsing attributes in process `syz.3.258'. [ 481.691217][ T5680] usb 5-1: USB disconnect, device number 8 [ 481.802533][ T5680] option 5-1:7.83: device disconnected [ 481.840183][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.853794][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.863453][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.882552][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.897252][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.926711][ T6860] team0: Port device team_slave_0 added [ 481.942996][ T6860] team0: Port device team_slave_1 added [ 482.189253][ T5232] 8021q: adding VLAN 0 to HW filter on device eth8 [ 482.259630][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.308947][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.455524][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.950878][ T5584] Bluetooth: hci4: command tx timeout [ 486.031551][ T5584] Bluetooth: hci4: command tx timeout [ 488.243273][ T5584] Bluetooth: hci4: command tx timeout [ 489.528228][ T5907] bridge_slave_1: left allmulticast mode [ 489.627657][ T5907] bridge_slave_1: left promiscuous mode [ 489.686019][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.993083][ T5907] bridge_slave_0: left allmulticast mode [ 490.270272][ T5584] Bluetooth: hci4: command tx timeout [ 490.333183][ T5907] bridge_slave_0: left promiscuous mode [ 491.212958][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.222244][ T5587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 491.232669][ T5587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 491.238039][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.272958][ T5587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 491.286661][ T5587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.319206][ T5907] bond0 (unregistering): Released all slaves [ 493.325566][ T5584] Bluetooth: hci5: command tx timeout [ 494.640959][ T5584] Bluetooth: hci3: unexpected event 0x35 length: 7 > 6 [ 495.400767][ T5584] Bluetooth: hci5: command tx timeout [ 497.470645][ T5584] Bluetooth: hci5: command tx timeout [ 498.093084][ T5907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.175302][ T5907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.479728][ T5907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.590384][ T5584] Bluetooth: hci5: command tx timeout [ 499.764945][ T5907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.516354][ T5232] 8021q: adding VLAN 0 to HW filter on device eth9 [ 501.177696][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.202719][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.228078][ T7038] bridge_slave_0: entered allmulticast mode [ 501.260973][ T7038] bridge_slave_0: entered promiscuous mode [ 501.459616][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.486897][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.506134][ T7038] bridge_slave_1: entered allmulticast mode [ 501.520786][ T7038] bridge_slave_1: entered promiscuous mode [ 501.717339][ T5907] bridge_slave_1: left allmulticast mode [ 501.727113][ T5907] bridge_slave_1: left promiscuous mode [ 501.749105][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.776973][ T5907] bridge_slave_0: left allmulticast mode [ 501.800719][ T5907] bridge_slave_0: left promiscuous mode [ 501.823697][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.864366][ T5907] bridge_slave_1: left allmulticast mode [ 501.882511][ T5907] bridge_slave_1: left promiscuous mode [ 501.893938][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.934334][ T5907] bridge_slave_0: left allmulticast mode [ 501.956902][ T5907] bridge_slave_0: left promiscuous mode [ 501.981151][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.843204][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.881347][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.930214][ T5907] bond0 (unregistering): Released all slaves [ 503.488636][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.546903][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.585440][ T5907] bond0 (unregistering): Released all slaves [ 504.229650][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.247583][ T7185] Zero length message leads to an empty skb [ 504.459431][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.112129][ T7038] team0: Port device team_slave_0 added [ 506.453164][ T5584] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 508.692908][ T7038] team0: Port device team_slave_1 added [ 508.940449][ T5684] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 509.019884][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.122720][ T5907] hsr_slave_0: left promiscuous mode [ 509.131802][ T5907] hsr_slave_1: left promiscuous mode [ 509.139629][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.165375][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.179508][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.214299][ T5907] veth1_macvtap: left promiscuous mode [ 509.221519][ T5907] veth0_macvtap: left promiscuous mode [ 509.227435][ T5907] veth1_vlan: left promiscuous mode [ 509.236213][ T5907] veth0_vlan: left promiscuous mode [ 511.563739][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.571235][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.897026][ T5684] usb 5-1: device descriptor read/all, error -71 [ 512.097899][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 512.152484][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 513.248934][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 513.283115][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 513.679743][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.687936][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.742446][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.782782][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.791144][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.799372][ T7088] bridge_slave_0: entered allmulticast mode [ 513.808646][ T7088] bridge_slave_0: entered promiscuous mode [ 513.859195][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.883289][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.992275][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.781250][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.807417][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.844453][ T7088] bridge_slave_1: entered allmulticast mode [ 514.877567][ T7088] bridge_slave_1: entered promiscuous mode [ 515.220909][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.283850][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.518221][ T7038] hsr_slave_0: entered promiscuous mode [ 515.567954][ T7038] hsr_slave_1: entered promiscuous mode [ 515.593426][ T7038] debugfs: 'hsr0' already exists in 'hsr' [ 515.599333][ T7038] Cannot create hsr debugfs directory [ 515.734298][ T7088] team0: Port device team_slave_0 added [ 516.096189][ T7088] team0: Port device team_slave_1 added [ 518.489574][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.518269][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.609656][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.654137][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.686255][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.785453][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.505631][ T7088] hsr_slave_0: entered promiscuous mode [ 519.544151][ T7088] hsr_slave_1: entered promiscuous mode [ 519.595549][ T7088] debugfs: 'hsr0' already exists in 'hsr' [ 519.611048][ T7088] Cannot create hsr debugfs directory [ 519.630641][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.690628][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.699906][ T7125] bridge_slave_0: entered allmulticast mode [ 519.734116][ T7125] bridge_slave_0: entered promiscuous mode [ 519.833701][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.870567][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.878392][ T7125] bridge_slave_1: entered allmulticast mode [ 519.887678][ T7125] bridge_slave_1: entered promiscuous mode [ 520.763273][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.013306][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.299230][ T7125] team0: Port device team_slave_0 added [ 521.422804][ T7125] team0: Port device team_slave_1 added [ 521.777768][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.804190][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.873078][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.043117][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.068942][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.132978][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.902454][ T5232] 8021q: adding VLAN 0 to HW filter on device eth10 [ 524.286757][ T7125] hsr_slave_0: entered promiscuous mode [ 524.418914][ T7125] hsr_slave_1: entered promiscuous mode [ 524.471795][ T7125] debugfs: 'hsr0' already exists in 'hsr' [ 524.477714][ T7125] Cannot create hsr debugfs directory [ 524.532065][ T7038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 524.648995][ T7038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.605253][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.617155][ T7262] batadv_slave_1: entered promiscuous mode [ 526.863902][ T7038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 526.917690][ T7038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.062972][ T7038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 527.111710][ T7038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.125780][ T7038] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 527.424629][ T7038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.923965][ T7088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.065161][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.418566][ T7088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.584069][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.725603][ T7088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.850919][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.025730][ T7088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.174163][ T7088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.518143][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 532.529540][ T5587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 532.540646][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 532.574902][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 532.586338][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.270091][ C0] sched: DL replenish lagged too much [ 534.010394][ T7125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.085483][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.193611][ T7125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.278805][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.288791][ T7125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.308951][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.378796][ T7125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 534.437621][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.683367][ T5587] Bluetooth: hci1: command tx timeout [ 534.898630][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.224586][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.423614][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.431199][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.787658][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.795234][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.587212][ T34] bridge_slave_1: left allmulticast mode [ 536.608750][ T34] bridge_slave_1: left promiscuous mode [ 536.624407][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.663901][ T34] bridge_slave_0: left allmulticast mode [ 536.669738][ T34] bridge_slave_0: left promiscuous mode [ 536.676514][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.751994][ T5587] Bluetooth: hci1: command tx timeout [ 537.258537][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.352441][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.393760][ T34] bond0 (unregistering): Released all slaves [ 537.782623][ T34] hsr_slave_0: left promiscuous mode [ 537.799893][ T34] hsr_slave_1: left promiscuous mode [ 537.819754][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.856311][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.831749][ T5587] Bluetooth: hci1: command tx timeout [ 538.867563][ T34] team0 (unregistering): Port device team_slave_1 removed [ 538.955407][ T34] team0 (unregistering): Port device team_slave_0 removed [ 539.514909][ T5232] 8021q: adding VLAN 0 to HW filter on device eth17 [ 539.914306][ T7125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.078881][ T7125] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.920596][ T5587] Bluetooth: hci1: command tx timeout [ 541.365428][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.373020][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.394101][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.401655][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.649377][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.660867][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 541.671087][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.702408][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.718456][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 543.791978][ T5587] Bluetooth: hci0: command tx timeout [ 544.820587][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.858578][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.932406][ T7293] bridge_slave_0: entered allmulticast mode [ 544.983914][ T7293] bridge_slave_0: entered promiscuous mode [ 545.039607][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.077062][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.119515][ T7293] bridge_slave_1: entered allmulticast mode [ 545.156650][ T5587] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 545.168002][ T7293] bridge_slave_1: entered promiscuous mode [ 545.881788][ T5587] Bluetooth: hci0: command tx timeout [ 547.692172][ T11] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 547.952548][ T5587] Bluetooth: hci0: command tx timeout [ 548.001084][ T5584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 548.013101][ T5584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 548.022530][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 548.037625][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 548.117345][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.300415][ T11] usb 5-1: device not accepting address 11, error -71 [ 548.413056][ T5584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.429163][ T5584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.449597][ T5584] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.474106][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.499810][ T5584] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 548.523147][ T5584] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 548.643218][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.217745][ T7293] team0: Port device team_slave_0 added [ 549.290944][ T7293] team0: Port device team_slave_1 added [ 550.030826][ T5587] Bluetooth: hci0: command tx timeout [ 550.191416][ T5587] Bluetooth: hci4: command tx timeout [ 550.252583][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.284686][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.330824][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.417940][ T5232] 8021q: adding VLAN 0 to HW filter on device eth18 [ 550.540950][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.570791][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.598860][ T5587] Bluetooth: hci6: command tx timeout [ 550.659098][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.286682][ T7293] hsr_slave_0: entered promiscuous mode [ 551.327912][ T7293] hsr_slave_1: entered promiscuous mode [ 551.363842][ T7293] debugfs: 'hsr0' already exists in 'hsr' [ 551.369812][ T7293] Cannot create hsr debugfs directory [ 552.036667][ T5907] bridge_slave_1: left allmulticast mode [ 552.047829][ T5907] bridge_slave_1: left promiscuous mode [ 552.066777][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.090989][ T5907] bridge_slave_0: left allmulticast mode [ 552.097383][ T5907] bridge_slave_0: left promiscuous mode [ 552.109852][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.270309][ T5587] Bluetooth: hci4: command tx timeout [ 552.672695][ T5587] Bluetooth: hci6: command tx timeout [ 552.841005][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.897655][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.936409][ T5907] bond0 (unregistering): Released all slaves [ 553.706037][ T5907] hsr_slave_0: left promiscuous mode [ 553.729933][ T5907] hsr_slave_1: left promiscuous mode [ 553.768674][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.804747][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.351893][ T5587] Bluetooth: hci4: command tx timeout [ 554.603174][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 554.638960][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 554.758417][ T5587] Bluetooth: hci6: command tx timeout [ 555.127274][ T5232] 8021q: adding VLAN 0 to HW filter on device eth19 [ 556.303715][ T7418] loop4: detected capacity change from 0 to 32768 [ 556.398100][ T7418] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 556.430606][ T5587] Bluetooth: hci4: command tx timeout [ 556.434127][ T29] audit: type=1800 audit(1780693571.505:4): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 556.724652][ T5586] ocfs2: Unmounting device (7,4) on (node local) [ 556.832108][ T5587] Bluetooth: hci6: command tx timeout [ 557.685193][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.706492][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.745873][ T7329] bridge_slave_0: entered allmulticast mode [ 557.775016][ T7329] bridge_slave_0: entered promiscuous mode [ 558.070851][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.082669][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.102370][ T7329] bridge_slave_1: entered allmulticast mode [ 558.123249][ T7329] bridge_slave_1: entered promiscuous mode [ 558.617858][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.758455][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.229050][ T7329] team0: Port device team_slave_0 added [ 559.488455][ T7329] team0: Port device team_slave_1 added [ 560.061721][ T5232] 8021q: adding VLAN 0 to HW filter on device eth20 [ 560.133956][ T1321] bridge_slave_1: left allmulticast mode [ 560.153062][ T1321] bridge_slave_1: left promiscuous mode [ 560.173221][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.217941][ T1321] bridge_slave_0: left allmulticast mode [ 560.242464][ T1321] bridge_slave_0: left promiscuous mode [ 560.248997][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.873616][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.915017][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.947530][ T1321] bond0 (unregistering): Released all slaves [ 560.985071][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.022250][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.078059][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.117930][ T7293] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 561.191664][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.237249][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.253924][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.323505][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.374890][ T1321] hsr_slave_0: left promiscuous mode [ 561.404619][ T1321] hsr_slave_1: left promiscuous mode [ 561.432769][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.474042][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.222111][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 562.275667][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 562.762560][ T7293] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.853562][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.075279][ T7293] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.115912][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.220570][ T40] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 563.242498][ T7293] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 563.266102][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.342686][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.354195][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.368147][ T7370] bridge_slave_0: entered allmulticast mode [ 563.378629][ T7370] bridge_slave_0: entered promiscuous mode [ 563.384839][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 563.400894][ T40] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.412528][ T40] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.427400][ T40] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 563.437521][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.454096][ T40] usb 5-1: config 0 descriptor?? [ 563.522492][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.530713][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.538432][ T7370] bridge_slave_1: entered allmulticast mode [ 563.548127][ T7370] bridge_slave_1: entered promiscuous mode [ 563.564589][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.575811][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.584185][ T7365] bridge_slave_0: entered allmulticast mode [ 563.595493][ T7365] bridge_slave_0: entered promiscuous mode [ 563.627276][ T7329] hsr_slave_0: entered promiscuous mode [ 563.639042][ T7329] hsr_slave_1: entered promiscuous mode [ 563.649050][ T7329] debugfs: 'hsr0' already exists in 'hsr' [ 563.655229][ T7329] Cannot create hsr debugfs directory [ 563.738466][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.748834][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.757081][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.765150][ T7365] bridge_slave_1: entered allmulticast mode [ 563.775329][ T7365] bridge_slave_1: entered promiscuous mode [ 563.812484][ T1321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.847805][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.088788][ T1321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.159954][ T7370] team0: Port device team_slave_0 added [ 564.178875][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.234464][ T7370] team0: Port device team_slave_1 added [ 564.252526][ T1321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.278163][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.303445][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 564.312218][ T40] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 564.331714][ T40] usb 5-1: USB disconnect, device number 13 [ 564.483210][ T1321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.555577][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.564883][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.592178][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.617868][ T7365] team0: Port device team_slave_0 added [ 564.634351][ T7365] team0: Port device team_slave_1 added [ 564.682902][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.690823][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.718930][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.143271][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.161784][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.202551][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.356249][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.369837][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.439049][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.595195][ T7370] hsr_slave_0: entered promiscuous mode [ 565.615093][ T7370] hsr_slave_1: entered promiscuous mode [ 565.635161][ T7370] debugfs: 'hsr0' already exists in 'hsr' [ 565.650513][ T7370] Cannot create hsr debugfs directory [ 565.664009][ T5587] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 567.745800][ T11] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 568.567948][ T11] usb 5-1: language id specifier not provided by device, defaulting to English [ 568.849947][ T11] usb 5-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 568.870427][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.887629][ T11] usb 5-1: Product: [ 568.909163][ T11] usb 5-1: can't set config #1, error -71 [ 568.928727][ T11] usb 5-1: USB disconnect, device number 14 [ 569.006197][ T1321] bridge_slave_1: left allmulticast mode [ 569.042091][ T1321] bridge_slave_1: left promiscuous mode [ 569.051057][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.080701][ T1321] bridge_slave_0: left allmulticast mode [ 569.091934][ T1321] bridge_slave_0: left promiscuous mode [ 569.114206][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.476117][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.492853][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.508335][ T1321] bond0 (unregistering): Released all slaves [ 569.535565][ T7365] hsr_slave_0: entered promiscuous mode [ 569.544879][ T7365] hsr_slave_1: entered promiscuous mode [ 569.565782][ T7365] debugfs: 'hsr0' already exists in 'hsr' [ 569.571925][ T7365] Cannot create hsr debugfs directory [ 569.631289][ T5232] 8021q: adding VLAN 0 to HW filter on device eth9 [ 570.285046][ T1321] hsr_slave_0: left promiscuous mode [ 570.293219][ T1321] hsr_slave_1: left promiscuous mode [ 570.301326][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.309038][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.319718][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.328657][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.348298][ T1321] veth1_macvtap: left promiscuous mode [ 570.354419][ T1321] veth0_macvtap: left promiscuous mode [ 570.361160][ T1321] veth1_vlan: left promiscuous mode [ 570.366747][ T1321] veth0_vlan: left promiscuous mode [ 570.942537][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 570.968333][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 571.092147][ T3099] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 571.288753][ T3099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.330181][ T3099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.349893][ T3099] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 571.368500][ T3099] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 571.377701][ T3099] usb 5-1: Manufacturer: syz [ 571.414040][ T3099] usb 5-1: config 0 descriptor?? [ 571.589127][ T7329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 571.611624][ T7329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.685745][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.694460][ T7329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 571.727646][ T7329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.741622][ T7329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 571.768661][ T7329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.784261][ T7329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 571.805166][ T7329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.012346][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.072393][ T7370] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 572.097193][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.174765][ T7370] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 572.216530][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.238694][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.246304][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.295673][ T7370] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 572.304451][ T3099] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 572.319295][ T3099] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 572.351607][ T3099] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 572.364512][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.372412][ T3099] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 572.387011][ T7370] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 572.395678][ T3099] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 572.429668][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.442221][ T3099] usb 5-1: USB disconnect, device number 15 [ 572.544652][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.552255][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.681366][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.688162][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.616841][ T7365] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 573.663969][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.725996][ T7365] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 573.765970][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.793097][ T7365] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 573.813863][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.873847][ T7365] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 573.915300][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.070272][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.369871][ T7329] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.535875][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.543519][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.625329][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.772774][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.780336][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.008469][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.167057][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.174618][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.431969][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.439595][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.955343][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.238981][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.385212][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.392801][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.539330][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.595417][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.602956][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.213337][ T7293] veth0_vlan: entered promiscuous mode [ 579.300408][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.416533][ T7293] veth1_vlan: entered promiscuous mode [ 579.926083][ T7293] veth0_macvtap: entered promiscuous mode [ 579.994258][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.065912][ T7293] veth1_macvtap: entered promiscuous mode [ 580.282042][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.466583][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.576307][ T5860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.616421][ T5860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.649129][ T5860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.685019][ T5860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.246025][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.428400][ T5232] 8021q: adding VLAN 0 to HW filter on device eth16 [ 581.658941][ T7615] loop4: detected capacity change from 0 to 512 [ 581.720480][ T7615] EXT4-fs: Ignoring removed bh option [ 581.813082][ T7615] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 581.868413][ T7615] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 581.937756][ T7615] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 581.992321][ T7615] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 582.082802][ T7615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.164442][ T7329] veth0_vlan: entered promiscuous mode [ 582.283633][ T7329] veth1_vlan: entered promiscuous mode [ 582.468264][ T5586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.708342][ T7329] veth0_macvtap: entered promiscuous mode [ 582.892231][ T7329] veth1_macvtap: entered promiscuous mode [ 583.183629][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.359067][ T5587] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 583.412570][ T7370] veth0_vlan: entered promiscuous mode [ 583.564501][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.107589][ T7370] veth1_vlan: entered promiscuous mode [ 584.214198][ T5909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.297156][ T5909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.469650][ T5909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.531656][ T5909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.003101][ T5684] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 585.845886][ T5684] usb 5-1: language id specifier not provided by device, defaulting to English [ 586.854053][ T5684] usb 5-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 586.904390][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.939060][ T5684] usb 5-1: Product: [ 587.009253][ T5684] usb 5-1: can't set config #1, error -71 [ 587.062361][ T5684] usb 5-1: USB disconnect, device number 16 [ 587.402871][ T7370] veth0_macvtap: entered promiscuous mode [ 587.595515][ T7370] veth1_macvtap: entered promiscuous mode [ 587.686480][ T7365] veth0_vlan: entered promiscuous mode [ 587.837759][ T7365] veth1_vlan: entered promiscuous mode [ 588.067392][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.214318][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.373719][ T144] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.393532][ T144] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.455918][ T144] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.491866][ T144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.912517][ T7365] veth0_macvtap: entered promiscuous mode [ 589.084243][ T7365] veth1_macvtap: entered promiscuous mode [ 589.479000][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.667078][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.830525][ T5677] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 589.848337][ T5860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.885565][ T5860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.945523][ T5860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.995602][ T5860] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.046344][ T5677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.086990][ T5677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.117633][ T5677] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 590.147578][ T5677] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 590.178003][ T5677] usb 5-1: Manufacturer: syz [ 590.221190][ T5677] usb 5-1: config 0 descriptor?? [ 590.330876][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.394463][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.694196][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.744646][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.133536][ T5677] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 591.169941][ T5677] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 591.214600][ T5677] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 591.279186][ T5677] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 591.328059][ T5677] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 591.455955][ T5677] usb 5-1: USB disconnect, device number 17 [ 593.007058][ T5584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.031543][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.046802][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.068183][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.085979][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.598946][ T6465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.646210][ T6465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.962290][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.002584][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.151649][ T5584] Bluetooth: hci3: command tx timeout [ 595.664632][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23'. [ 596.952577][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.235180][ T5584] Bluetooth: hci3: command tx timeout [ 597.245801][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.577892][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.841204][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.288575][ T5584] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 598.628533][ T7778] loop5: detected capacity change from 0 to 256 [ 599.398506][ T5584] Bluetooth: hci3: command tx timeout [ 600.590550][ T7778] FAT-fs (loop5): Directory bread(block 64) failed [ 600.603400][ T7778] FAT-fs (loop5): Directory bread(block 65) failed [ 600.618348][ T7778] FAT-fs (loop5): Directory bread(block 66) failed [ 600.635349][ T7778] FAT-fs (loop5): Directory bread(block 67) failed [ 600.645302][ T7778] FAT-fs (loop5): Directory bread(block 68) failed [ 600.655838][ T7778] FAT-fs (loop5): Directory bread(block 69) failed [ 600.664707][ T7778] FAT-fs (loop5): Directory bread(block 70) failed [ 600.672271][ T7778] FAT-fs (loop5): Directory bread(block 71) failed [ 600.685636][ T7778] FAT-fs (loop5): Directory bread(block 72) failed [ 600.700501][ T7778] FAT-fs (loop5): Directory bread(block 73) failed [ 601.731358][ T5584] Bluetooth: hci3: command tx timeout [ 602.155122][ T29] audit: type=1800 audit(1780693616.945:5): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.317" name="file1" dev="loop5" ino=1048641 res=0 errno=0 [ 603.514239][ T7775] syz.5.317: attempt to access beyond end of device [ 603.514239][ T7775] loop5: rw=2049, sector=1224, nr_sectors = 128 limit=256 [ 603.736798][ T7782] kvm: MONITOR instruction emulated as NOP! [ 603.859899][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.899419][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.808991][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.845074][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.923823][ T34] bridge_slave_1: left allmulticast mode [ 604.960720][ T34] bridge_slave_1: left promiscuous mode [ 604.992438][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.074786][ T34] bridge_slave_0: left allmulticast mode [ 605.141246][ T34] bridge_slave_0: left promiscuous mode [ 605.176937][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.881479][ T7517] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 606.073185][ T7517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.126762][ T7517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.195934][ T7517] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 606.227441][ T7517] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 606.270314][ T7517] usb 5-1: Manufacturer: syz [ 606.679561][ T7810] loop5: detected capacity change from 0 to 256 [ 607.967874][ T7517] usb 5-1: config 0 descriptor?? [ 608.426514][ T7810] FAT-fs (loop5): Directory bread(block 64) failed [ 608.434805][ T7810] FAT-fs (loop5): Directory bread(block 65) failed [ 608.443494][ T7810] FAT-fs (loop5): Directory bread(block 66) failed [ 608.450617][ T7810] FAT-fs (loop5): Directory bread(block 67) failed [ 608.459373][ T7810] FAT-fs (loop5): Directory bread(block 68) failed [ 608.466546][ T7810] FAT-fs (loop5): Directory bread(block 69) failed [ 608.474897][ T7810] FAT-fs (loop5): Directory bread(block 70) failed [ 608.482521][ T7810] FAT-fs (loop5): Directory bread(block 71) failed [ 608.492787][ T7810] FAT-fs (loop5): Directory bread(block 72) failed [ 608.500725][ T7810] FAT-fs (loop5): Directory bread(block 73) failed [ 610.458530][ T7517] usb 5-1: can't set config #0, error -71 [ 610.472732][ T7517] usb 5-1: USB disconnect, device number 18 [ 610.622258][ T7815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.677391][ T7815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.698992][ T29] audit: type=1800 audit(1780693625.775:6): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.322" name="file1" dev="loop5" ino=1048643 res=0 errno=0 [ 610.699179][ T7815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.758860][ T7815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.778286][ T7815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.868493][ T5584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 610.891558][ T5584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 610.902873][ T5584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 610.929139][ T5584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 610.941962][ T5584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 610.964613][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.147760][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.250455][ T34] bond0 (unregistering): Released all slaves [ 612.830367][ T5584] Bluetooth: hci1: command tx timeout [ 612.991458][ T5584] Bluetooth: hci5: command tx timeout [ 613.057443][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 613.517697][ T34] hsr_slave_0: left promiscuous mode [ 613.581202][ T34] hsr_slave_1: left promiscuous mode [ 613.613994][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.656704][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.721464][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.765361][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.883695][ T34] veth1_macvtap: left promiscuous mode [ 613.911870][ T34] veth0_macvtap: left promiscuous mode [ 613.935521][ T34] veth1_vlan: left promiscuous mode [ 613.966833][ T34] veth0_vlan: left promiscuous mode [ 614.912867][ T7815] Bluetooth: hci1: command tx timeout [ 615.074675][ T7815] Bluetooth: hci5: command tx timeout [ 615.651571][ T7846] fuse: Bad value for 'fd' [ 617.080573][ T7815] Bluetooth: hci1: command tx timeout [ 617.150414][ T7815] Bluetooth: hci5: command tx timeout [ 619.173954][ T7815] Bluetooth: hci1: command tx timeout [ 619.242125][ T7815] Bluetooth: hci5: command tx timeout [ 619.489765][ T34] team0 (unregistering): Port device team_slave_1 removed [ 619.569675][ T34] team0 (unregistering): Port device team_slave_0 removed [ 620.068595][ T5232] 8021q: adding VLAN 0 to HW filter on device eth21 [ 620.210583][ T7517] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 620.459247][ T7517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.520872][ T7517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.569724][ T7517] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 620.629179][ T7517] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 620.681903][ T7517] usb 6-1: Manufacturer: syz [ 620.736321][ T7517] usb 6-1: config 0 descriptor?? [ 621.089672][ T34] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.612353][ T34] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.657481][ T7517] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 621.675649][ T7517] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 621.729187][ T7517] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 621.748427][ T7517] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 621.781448][ T7517] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 621.825180][ T7517] usb 6-1: USB disconnect, device number 2 [ 621.864330][ T34] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.386854][ T34] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.512374][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.543442][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.562436][ T7733] bridge_slave_0: entered allmulticast mode [ 623.625721][ T7733] bridge_slave_0: entered promiscuous mode [ 626.320793][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.356822][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.379424][ T7733] bridge_slave_1: entered allmulticast mode [ 626.406595][ T7733] bridge_slave_1: entered promiscuous mode [ 626.509002][ T5232] 8021q: adding VLAN 0 to HW filter on device eth22 [ 626.727301][ T7913] fuse: Bad value for 'fd' [ 627.406848][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.984287][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.071387][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.145779][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.611774][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.805051][ T7733] team0: Port device team_slave_0 added [ 629.076572][ T7733] team0: Port device team_slave_1 added [ 629.233695][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.428519][ T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 629.437491][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.464510][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.556044][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.620846][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.654972][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.707498][ T11] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 629.717503][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.717573][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.717723][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.803429][ T11] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 629.812382][ T11] usb 6-1: Manufacturer: syz [ 629.862603][ T11] usb 6-1: config 0 descriptor?? [ 629.974115][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.982633][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.992520][ T7816] bridge_slave_0: entered allmulticast mode [ 630.007512][ T7816] bridge_slave_0: entered promiscuous mode [ 630.722800][ T11] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 630.766340][ T11] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 630.801525][ T11] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 630.849037][ T11] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 631.142235][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.156294][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.165334][ T7816] bridge_slave_1: entered allmulticast mode [ 631.176067][ T7816] bridge_slave_1: entered promiscuous mode [ 631.561066][ T7816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.647151][ T7733] hsr_slave_0: entered promiscuous mode [ 631.684040][ T7733] hsr_slave_1: entered promiscuous mode [ 631.709152][ T7733] debugfs: 'hsr0' already exists in 'hsr' [ 631.737721][ T7733] Cannot create hsr debugfs directory [ 631.787847][ T7816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.822540][ T34] bridge_slave_1: left allmulticast mode [ 631.828291][ T11] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 631.859718][ T11] usb 6-1: USB disconnect, device number 3 [ 631.913969][ T34] bridge_slave_1: left promiscuous mode [ 631.957031][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.042240][ T34] bridge_slave_0: left allmulticast mode [ 632.085078][ T34] bridge_slave_0: left promiscuous mode [ 632.123739][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.271773][ T34] bridge_slave_1: left allmulticast mode [ 632.318085][ T34] bridge_slave_1: left promiscuous mode [ 632.366229][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.430778][ T34] bridge_slave_0: left allmulticast mode [ 632.458231][ T34] bridge_slave_0: left promiscuous mode [ 632.493723][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.375672][ T7968] fuse: Bad value for 'fd' [ 633.859453][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.893298][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.922907][ T34] bond0 (unregistering): Released all slaves [ 634.154270][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.167295][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.017997][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.063492][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.106936][ T34] bond0 (unregistering): Released all slaves [ 635.984416][ T7816] team0: Port device team_slave_0 added [ 636.310376][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 636.516188][ T7816] team0: Port device team_slave_1 added [ 637.298040][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.322895][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.409608][ T7816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.455611][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.491368][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.539154][ T7811] bridge_slave_0: entered allmulticast mode [ 637.577291][ T7811] bridge_slave_0: entered promiscuous mode [ 637.788999][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.800961][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.864117][ T7816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.884298][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.894070][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.918680][ T7811] bridge_slave_1: entered allmulticast mode [ 637.929865][ T7811] bridge_slave_1: entered promiscuous mode [ 638.339192][ T34] hsr_slave_0: left promiscuous mode [ 638.385706][ T34] hsr_slave_1: left promiscuous mode [ 638.411530][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.436443][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.478188][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.516378][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.606661][ T34] hsr_slave_0: left promiscuous mode [ 638.648672][ T34] hsr_slave_1: left promiscuous mode [ 638.662791][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.674932][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.773113][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.790477][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.861470][ T11] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 638.904376][ T34] veth1_macvtap: left promiscuous mode [ 638.911757][ T34] veth0_macvtap: left promiscuous mode [ 638.918169][ T34] veth1_vlan: left promiscuous mode [ 638.923781][ T34] veth0_vlan: left promiscuous mode [ 638.933372][ T34] veth1_macvtap: left promiscuous mode [ 638.939132][ T34] veth0_macvtap: left promiscuous mode [ 638.956688][ T34] veth1_vlan: left promiscuous mode [ 638.985827][ T34] veth0_vlan: left promiscuous mode [ 639.051700][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.116653][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.155517][ T11] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 639.196833][ T11] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 639.229879][ T11] usb 5-1: Manufacturer: syz [ 639.308710][ T11] usb 5-1: config 0 descriptor?? [ 641.527734][ T11] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 641.551989][ T11] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 641.561288][ T11] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 641.581241][ T11] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 641.677118][ T11] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 641.868391][ T34] team0 (unregistering): Port device team_slave_1 removed [ 641.924529][ T34] team0 (unregistering): Port device team_slave_0 removed [ 642.189198][ T11] usb 5-1: USB disconnect, device number 19 [ 644.259846][ T34] team0 (unregistering): Port device team_slave_1 removed [ 644.328311][ T34] team0 (unregistering): Port device team_slave_0 removed [ 644.958074][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.210626][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.975272][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 646.145512][ T7816] hsr_slave_0: entered promiscuous mode [ 646.193808][ T7816] hsr_slave_1: entered promiscuous mode [ 646.246960][ T7816] debugfs: 'hsr0' already exists in 'hsr' [ 646.276244][ T7816] Cannot create hsr debugfs directory [ 646.343019][ T7811] team0: Port device team_slave_0 added [ 646.495336][ T7811] team0: Port device team_slave_1 added [ 647.200625][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.242387][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.350488][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.615222][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.658755][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.771037][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.600544][ T7811] hsr_slave_0: entered promiscuous mode [ 648.626043][ T7811] hsr_slave_1: entered promiscuous mode [ 648.638044][ T7811] debugfs: 'hsr0' already exists in 'hsr' [ 648.660249][ T7811] Cannot create hsr debugfs directory [ 650.165766][ T7733] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 650.180280][ T5674] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 650.356465][ T5674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.378435][ T5674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.407515][ T5674] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 650.418664][ T5674] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 650.435994][ T5674] usb 6-1: Manufacturer: syz [ 650.454755][ T5674] usb 6-1: config 0 descriptor?? [ 650.528745][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.627268][ T7733] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 650.675011][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.709579][ T7733] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 650.739893][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.759489][ T7733] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 650.790970][ T7733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.394835][ T5674] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 651.488657][ T5674] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 651.552550][ T5674] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 651.619847][ T5674] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 651.706667][ T5674] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 651.780890][ T5674] usb 6-1: USB disconnect, device number 4 [ 652.394105][ T7811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 652.448713][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.719359][ T7811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 652.803948][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.833984][ T7811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 652.924659][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.804026][ T7811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 653.972892][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.521924][ T5584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.534964][ T5584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.546718][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.565193][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.577705][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.383394][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'. [ 655.643145][ T7816] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 655.809460][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.954236][ T7816] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 656.138482][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.211233][ T7816] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 656.340422][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.381993][ T7816] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 656.671155][ T7815] Bluetooth: hci4: command tx timeout [ 657.384156][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.761813][ T7815] Bluetooth: hci4: command tx timeout [ 660.403096][ T5907] bridge_slave_1: left allmulticast mode [ 660.468761][ T5907] bridge_slave_1: left promiscuous mode [ 660.507148][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.579363][ T5907] bridge_slave_0: left allmulticast mode [ 660.604797][ T5907] bridge_slave_0: left promiscuous mode [ 660.642026][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.860615][ T7815] Bluetooth: hci4: command tx timeout [ 661.328790][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.348465][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.377793][ T5907] bond0 (unregistering): Released all slaves [ 661.415740][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.509484][ T5232] 8021q: adding VLAN 0 to HW filter on device eth23 [ 661.521681][ T7517] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 661.626430][ T5907] hsr_slave_0: left promiscuous mode [ 661.639701][ T5907] hsr_slave_1: left promiscuous mode [ 661.651540][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.663550][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.711623][ T7517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.747735][ T7517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.768460][ T7517] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 661.789306][ T7517] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 661.799114][ T7517] usb 5-1: Manufacturer: syz [ 661.816973][ T7517] usb 5-1: config 0 descriptor?? [ 662.136980][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 662.177477][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 662.695425][ T7517] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 662.720319][ T7517] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 662.751956][ T7517] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 662.761734][ T7517] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 662.776654][ T7517] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 662.841235][ T7517] usb 5-1: USB disconnect, device number 20 [ 662.910313][ T7815] Bluetooth: hci4: command tx timeout [ 663.061380][ T7811] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.336648][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.415051][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.422588][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.517464][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.525060][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.086963][ T7816] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.564421][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.571805][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.812726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.820333][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.910959][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 667.963378][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 668.728067][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.739056][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.751046][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.785658][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.799620][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 669.160143][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.194333][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.259496][ T8087] bridge_slave_0: entered allmulticast mode [ 669.364861][ T8087] bridge_slave_0: entered promiscuous mode [ 671.358819][ T5587] Bluetooth: hci3: command tx timeout [ 671.541264][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.511800][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.522626][ T8087] bridge_slave_1: entered allmulticast mode [ 672.531885][ T8087] bridge_slave_1: entered promiscuous mode [ 673.420386][ T5587] Bluetooth: hci3: command tx timeout [ 674.458978][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.762159][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.474017][ T5587] Bluetooth: hci3: command tx timeout [ 675.864356][ T7815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 675.875411][ T7815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 675.894352][ T7815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 675.913466][ T7815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 675.926324][ T7815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 676.074889][ T8087] team0: Port device team_slave_0 added [ 676.204056][ T8087] team0: Port device team_slave_1 added [ 676.587879][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.626929][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.715765][ T8087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.822455][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.863888][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.949260][ T8087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.550545][ T7815] Bluetooth: hci3: command tx timeout [ 677.743096][ T8087] hsr_slave_0: entered promiscuous mode [ 677.797058][ T8087] hsr_slave_1: entered promiscuous mode [ 677.861631][ T8087] debugfs: 'hsr0' already exists in 'hsr' [ 678.000398][ T8087] Cannot create hsr debugfs directory [ 678.031077][ T7815] Bluetooth: hci1: command tx timeout [ 679.854390][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 679.900992][ T1321] bridge_slave_1: left allmulticast mode [ 679.909075][ T1321] bridge_slave_1: left promiscuous mode [ 679.920524][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.938970][ T1321] bridge_slave_0: left allmulticast mode [ 679.949920][ T1321] bridge_slave_0: left promiscuous mode [ 679.961244][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.122275][ T7815] Bluetooth: hci1: command tx timeout [ 680.749766][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.768042][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.793599][ T1321] bond0 (unregistering): Released all slaves [ 681.401065][ T1321] hsr_slave_0: left promiscuous mode [ 681.616321][ T1321] hsr_slave_1: left promiscuous mode [ 682.590606][ T7815] Bluetooth: hci1: command tx timeout [ 682.593806][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.622260][ T7815] Bluetooth: hci2: hcon ffff8881192bd000 sent 1 < count 10 [ 682.632362][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.118203][ T8241] qnx6: unable to read the first superblock [ 684.479093][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 684.571417][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 684.680350][ T7815] Bluetooth: hci1: command tx timeout [ 685.948503][ T8265] loop4: detected capacity change from 0 to 256 [ 686.333600][ T8265] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 686.454445][ T29] audit: type=1800 audit(1780693701.535:7): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.393" name="file1" dev="loop4" ino=1048645 res=0 errno=0 [ 686.505282][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.392'. [ 688.527328][ T7815] Bluetooth: hci2: hcon ffff8881192bd000 sent 0 < count 10 [ 688.564640][ T8282] qnx6: unable to read the first superblock [ 689.191992][ T8087] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 689.319027][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.343418][ T8087] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 689.422452][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.531315][ T8087] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 689.575949][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.012765][ T8087] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 690.233288][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.388601][ T5908] bridge_slave_1: left allmulticast mode [ 690.418093][ T5908] bridge_slave_1: left promiscuous mode [ 690.456296][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.506694][ T5908] bridge_slave_0: left allmulticast mode [ 690.526236][ T5908] bridge_slave_0: left promiscuous mode [ 690.549663][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.259887][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.627771][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.645139][ T5908] bond0 (unregistering): Released all slaves [ 692.023672][ T5908] hsr_slave_0: left promiscuous mode [ 692.047417][ T5908] hsr_slave_1: left promiscuous mode [ 692.068193][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.093932][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.089292][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 695.204140][ T7815] Bluetooth: hci0: hcon ffff88811aa9c000 sent 1 < count 10 [ 695.230945][ T8319] qnx6: unable to read the first superblock [ 695.591915][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.605868][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.937226][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 696.999437][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 700.991271][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.052399][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.066133][ T8184] bridge_slave_0: entered allmulticast mode [ 701.091833][ T8184] bridge_slave_0: entered promiscuous mode [ 701.314088][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.322461][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.332280][ T8184] bridge_slave_1: entered allmulticast mode [ 701.344943][ T8184] bridge_slave_1: entered promiscuous mode [ 701.629950][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.766963][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.792394][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.819729][ T8203] bridge_slave_0: entered allmulticast mode [ 701.856104][ T8203] bridge_slave_0: entered promiscuous mode [ 701.946549][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.982411][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.006091][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.035399][ T8203] bridge_slave_1: entered allmulticast mode [ 702.065220][ T8203] bridge_slave_1: entered promiscuous mode [ 702.282379][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.411'. [ 702.393835][ T8184] team0: Port device team_slave_0 added [ 702.846121][ T8184] team0: Port device team_slave_1 added [ 702.920437][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.021298][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.027560][ T7815] Bluetooth: hci2: hcon ffff8881192bd000 sent 0 < count 10 [ 704.064206][ T8356] qnx6: unable to read the first superblock [ 707.914350][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.921640][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.950334][ T8184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.023511][ T8203] team0: Port device team_slave_0 added [ 708.037281][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.051069][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.080310][ T8184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.175896][ T8203] team0: Port device team_slave_1 added [ 709.096009][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.141368][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.220615][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.390795][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.403106][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.439612][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.601507][ T8184] hsr_slave_0: entered promiscuous mode [ 709.611851][ T8184] hsr_slave_1: entered promiscuous mode [ 709.620764][ T8184] debugfs: 'hsr0' already exists in 'hsr' [ 709.626685][ T8184] Cannot create hsr debugfs directory [ 710.194198][ T8203] hsr_slave_0: entered promiscuous mode [ 710.214056][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 710.236151][ T8203] hsr_slave_1: entered promiscuous mode [ 710.257557][ T8203] debugfs: 'hsr0' already exists in 'hsr' [ 710.273789][ T8203] Cannot create hsr debugfs directory [ 715.761291][ T7815] Bluetooth: hci2: hcon ffff8881192bd000 sent 0 < count 10 [ 715.794252][ T8391] qnx6: unable to read the first superblock [ 717.726788][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.738537][ T5587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.767437][ T5587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.802112][ T5587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.818810][ T5587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.135281][ T5674] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 719.332676][ T5674] usb 5-1: unable to get BOS descriptor or descriptor too short [ 719.355368][ T5674] usb 5-1: not running at top speed; connect to a high speed hub [ 719.395443][ T5674] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 719.445262][ T5674] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 719.487789][ T8184] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.489892][ T5674] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 719.542687][ T5674] usb 5-1: config 14 has no interface number 0 [ 719.570572][ T5674] usb 5-1: config 14 has no interface number 1 [ 719.587022][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.589719][ T5674] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 719.602484][ T8184] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.651399][ T5674] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 719.653476][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.690287][ T5674] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 719.731405][ T5674] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 719.763994][ T5674] usb 5-1: config 14 interface 57 has no altsetting 0 [ 719.780368][ T5674] usb 5-1: config 14 interface 228 has no altsetting 0 [ 719.813443][ T8184] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.826283][ T5674] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 719.871530][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.871978][ T5587] Bluetooth: hci5: command tx timeout [ 719.900829][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.914831][ T5674] usb 5-1: Product: syz [ 719.925715][ T8184] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 719.937357][ T5674] usb 5-1: Manufacturer: syz [ 719.956363][ T5674] usb 5-1: SerialNumber: syz [ 719.973954][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.540900][ T5674] legousbtower 5-1:14.57: interrupt endpoints not found [ 720.725355][ T12] bridge_slave_1: left allmulticast mode [ 720.742889][ T12] bridge_slave_1: left promiscuous mode [ 720.777392][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.825395][ T12] bridge_slave_0: left allmulticast mode [ 720.846703][ T12] bridge_slave_0: left promiscuous mode [ 720.869443][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.923507][ T5674] legousbtower 5-1:14.228: get version request failed: -121 [ 720.957339][ T5674] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 721.960375][ T5587] Bluetooth: hci5: command tx timeout [ 721.978657][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.105599][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.144927][ T12] bond0 (unregistering): Released all slaves [ 722.801928][ T7517] usb 5-1: USB disconnect, device number 21 [ 723.126122][ T12] hsr_slave_0: left promiscuous mode [ 723.162325][ T12] hsr_slave_1: left promiscuous mode [ 723.231455][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.934714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.515549][ T5587] Bluetooth: hci5: command tx timeout [ 726.049744][ T7815] Bluetooth: hci0: hcon ffff88811aa9c000 sent 0 < count 10 [ 726.101121][ T8441] qnx6: unable to read the first superblock [ 726.563337][ T12] team0 (unregistering): Port device team_slave_1 removed [ 726.593187][ T7815] Bluetooth: hci5: command tx timeout [ 726.659522][ T12] team0 (unregistering): Port device team_slave_0 removed [ 728.137698][ T8203] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 728.257170][ T8203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.352574][ T8203] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 728.442167][ T8203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.334679][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 729.351677][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 729.366876][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 729.398211][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 729.420716][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 730.287541][ T7815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 730.298277][ T7815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 730.314076][ T7815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 730.337315][ T7815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 730.349326][ T7815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 730.896662][ T7517] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 731.131848][ T7517] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.204709][ T7517] usb 5-1: not running at top speed; connect to a high speed hub [ 731.268881][ T7517] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 731.339020][ T7517] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 731.416870][ T7517] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 731.471480][ T5587] Bluetooth: hci4: command tx timeout [ 731.513969][ T7517] usb 5-1: config 14 has no interface number 0 [ 731.574017][ T7517] usb 5-1: config 14 has no interface number 1 [ 731.709386][ T7517] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 731.819030][ T7517] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 731.904241][ T7517] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.014504][ T7517] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 732.083901][ T7517] usb 5-1: config 14 interface 57 has no altsetting 0 [ 732.156719][ T7517] usb 5-1: config 14 interface 228 has no altsetting 0 [ 732.227443][ T7517] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 732.310986][ T7517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.361694][ T7517] usb 5-1: Product: syz [ 732.398650][ T7517] usb 5-1: Manufacturer: syz [ 732.429011][ T7517] usb 5-1: SerialNumber: syz [ 732.434505][ T5587] Bluetooth: hci6: command tx timeout [ 733.105380][ T7517] legousbtower 5-1:14.57: interrupt endpoints not found [ 733.506176][ T7517] legousbtower 5-1:14.228: get version request failed: -121 [ 733.544948][ T7517] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 733.561216][ T5587] Bluetooth: hci4: command tx timeout [ 734.516029][ T5587] Bluetooth: hci6: command tx timeout [ 735.373938][ T7517] usb 5-1: USB disconnect, device number 22 [ 735.632129][ T5587] Bluetooth: hci4: command tx timeout [ 736.333760][ T5587] Bluetooth: hci2: hcon ffff8881192bd000 sent 0 < count 10 [ 736.436504][ T8514] qnx6: unable to read the first superblock [ 736.591075][ T5587] Bluetooth: hci6: command tx timeout [ 737.077695][ T6465] bridge_slave_1: left allmulticast mode [ 737.106221][ T6465] bridge_slave_1: left promiscuous mode [ 737.131872][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.181062][ T6465] bridge_slave_0: left allmulticast mode [ 737.202388][ T6465] bridge_slave_0: left promiscuous mode [ 737.228276][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.710483][ T5587] Bluetooth: hci4: command tx timeout [ 738.662558][ T6465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.678854][ T5587] Bluetooth: hci6: command tx timeout [ 738.728179][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.762171][ T6465] bond0 (unregistering): Released all slaves [ 739.671018][ T6465] hsr_slave_0: left promiscuous mode [ 739.744423][ T6465] hsr_slave_1: left promiscuous mode [ 739.773901][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.225676][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.774721][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 740.807489][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 741.102205][ T7517] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 741.278281][ T7517] usb 6-1: unable to get BOS descriptor or descriptor too short [ 741.669564][ T5232] 8021q: adding VLAN 0 to HW filter on device eth9 [ 741.704070][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.747380][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.786156][ T8399] bridge_slave_0: entered allmulticast mode [ 741.853036][ T8399] bridge_slave_0: entered promiscuous mode [ 741.913205][ T7517] usb 6-1: not running at top speed; connect to a high speed hub [ 741.928517][ T7517] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 741.939113][ T7517] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 741.960736][ T7517] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 741.971760][ T7517] usb 6-1: config 14 has no interface number 0 [ 741.978337][ T7517] usb 6-1: config 14 has no interface number 1 [ 741.985386][ T7517] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 741.996857][ T7517] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 742.009251][ T7517] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.021197][ T7517] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 742.032924][ T7517] usb 6-1: config 14 interface 57 has no altsetting 0 [ 742.040237][ T7517] usb 6-1: config 14 interface 228 has no altsetting 0 [ 742.380348][ T7517] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 742.402161][ T7517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.418497][ T7517] usb 6-1: Product: syz [ 742.430764][ T7517] usb 6-1: Manufacturer: syz [ 742.440548][ T7517] usb 6-1: SerialNumber: syz [ 742.972301][ T7517] legousbtower 6-1:14.57: interrupt endpoints not found [ 742.996489][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.025238][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.040948][ T8399] bridge_slave_1: entered allmulticast mode [ 743.345129][ T7517] legousbtower 6-1:14.228: get version request failed: -121 [ 743.368861][ T7517] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 743.886313][ T8399] bridge_slave_1: entered promiscuous mode [ 744.324610][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.437424][ T8571] comedi comedi2: pcl711: I/O port conflict (0x100,16) [ 744.559723][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.901008][ T8399] team0: Port device team_slave_0 added [ 745.005998][ T8399] team0: Port device team_slave_1 added [ 745.131210][ T7923] usb 6-1: USB disconnect, device number 5 [ 745.942217][ T5232] 8021q: adding VLAN 0 to HW filter on device eth10 [ 746.037345][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.047063][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.286981][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.451015][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.467559][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.515765][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.696961][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.726259][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.746422][ T8461] bridge_slave_0: entered allmulticast mode [ 746.783517][ T8461] bridge_slave_0: entered promiscuous mode [ 747.079435][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.101674][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.127442][ T8461] bridge_slave_1: entered allmulticast mode [ 747.159049][ T8461] bridge_slave_1: entered promiscuous mode [ 747.574231][ T8598] fuse: Bad value for 'group_id' [ 747.683273][ T8598] fuse: Bad value for 'group_id' [ 747.798751][ T6465] bridge_slave_1: left allmulticast mode [ 747.814557][ T6465] bridge_slave_1: left promiscuous mode [ 747.847904][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.918505][ T6465] bridge_slave_0: left allmulticast mode [ 747.951803][ T6465] bridge_slave_0: left promiscuous mode [ 747.988176][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.428719][ T6465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.512407][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.568898][ T6465] bond0 (unregistering): Released all slaves [ 749.865295][ T8399] hsr_slave_0: entered promiscuous mode [ 749.889284][ T8399] hsr_slave_1: entered promiscuous mode [ 749.903319][ T8399] debugfs: 'hsr0' already exists in 'hsr' [ 749.917968][ T8399] Cannot create hsr debugfs directory [ 750.000505][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.049498][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.105170][ T6465] hsr_slave_0: left promiscuous mode [ 750.119964][ T6465] hsr_slave_1: left promiscuous mode [ 750.129556][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.149083][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.202391][ T7923] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 750.371022][ T7923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 750.381323][ T7923] usb 5-1: not running at top speed; connect to a high speed hub [ 750.403450][ T7923] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 750.419053][ T7923] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 750.447274][ T7923] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 750.459134][ T7923] usb 5-1: config 14 has no interface number 0 [ 750.467782][ T7923] usb 5-1: config 14 has no interface number 1 [ 750.475399][ T7923] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 750.487695][ T7923] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 750.504654][ T7923] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.519856][ T7923] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 750.548397][ T7923] usb 5-1: config 14 interface 57 has no altsetting 0 [ 750.569961][ T7923] usb 5-1: config 14 interface 228 has no altsetting 0 [ 750.588452][ T7923] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 750.623368][ T7923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.626020][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 750.661902][ T7923] usb 5-1: Product: syz [ 750.668435][ T7923] usb 5-1: Manufacturer: syz [ 750.679313][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 750.704920][ T7923] usb 5-1: SerialNumber: syz [ 751.188250][ T7923] legousbtower 5-1:14.57: interrupt endpoints not found [ 751.245906][ T5232] 8021q: adding VLAN 0 to HW filter on device eth11 [ 751.263790][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.274214][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.283011][ T8470] bridge_slave_0: entered allmulticast mode [ 751.300833][ T8470] bridge_slave_0: entered promiscuous mode [ 751.324248][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.338679][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.347242][ T8470] bridge_slave_1: entered allmulticast mode [ 751.359262][ T8470] bridge_slave_1: entered promiscuous mode [ 751.426846][ T8461] team0: Port device team_slave_0 added [ 751.575113][ T7923] legousbtower 5-1:14.228: get version request failed: -121 [ 751.583750][ T7923] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 751.630332][ T8461] team0: Port device team_slave_1 added [ 751.995260][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.013542][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.032813][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.091001][ T8461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.165564][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.196215][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.203966][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.251881][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.639006][ T8470] team0: Port device team_slave_0 added [ 752.789805][ T8470] team0: Port device team_slave_1 added [ 753.049356][ T8461] hsr_slave_0: entered promiscuous mode [ 753.059908][ T8461] hsr_slave_1: entered promiscuous mode [ 753.078418][ T8461] debugfs: 'hsr0' already exists in 'hsr' [ 753.085245][ T8461] Cannot create hsr debugfs directory [ 753.152650][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.162489][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.203663][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.275623][ T7923] usb 5-1: USB disconnect, device number 23 [ 753.443502][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.458766][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.526613][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.903798][ T5232] 8021q: adding VLAN 0 to HW filter on device eth12 [ 754.670725][ T8470] hsr_slave_0: entered promiscuous mode [ 754.725927][ T8470] hsr_slave_1: entered promiscuous mode [ 754.776618][ T8470] debugfs: 'hsr0' already exists in 'hsr' [ 754.798295][ T8470] Cannot create hsr debugfs directory [ 756.782064][ T8684] fuse: Bad value for 'group_id' [ 756.812439][ T8684] fuse: Bad value for 'group_id' [ 757.004696][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.013601][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.867675][ T8399] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 758.964943][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.975648][ T8399] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 758.999546][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.013399][ T8399] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 759.037444][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.056039][ T8399] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 759.078282][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.140386][ T5677] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 759.345134][ T5677] usb 6-1: unable to get BOS descriptor or descriptor too short [ 759.393796][ T5677] usb 6-1: not running at top speed; connect to a high speed hub [ 759.437701][ T5677] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 759.487298][ T5677] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 759.525235][ T5677] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 759.567520][ T5677] usb 6-1: config 14 has no interface number 0 [ 759.588932][ T5677] usb 6-1: config 14 has no interface number 1 [ 759.619641][ T5677] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 759.691066][ T5677] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 759.739662][ T5677] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.784969][ T5677] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 759.850769][ T5677] usb 6-1: config 14 interface 57 has no altsetting 0 [ 759.884555][ T5677] usb 6-1: config 14 interface 228 has no altsetting 0 [ 759.926998][ T5677] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 759.975657][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.007511][ T5677] usb 6-1: Product: syz [ 760.022823][ T5677] usb 6-1: Manufacturer: syz [ 760.046661][ T5677] usb 6-1: SerialNumber: syz [ 760.141412][ T8470] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 760.213833][ T8470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.257227][ T8470] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 760.333277][ T8470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.372697][ T8470] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 760.464574][ T8470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.123913][ T5677] legousbtower 6-1:14.57: interrupt endpoints not found [ 761.176616][ T5677] legousbtower 6-1:14.228: get version request failed: -121 [ 761.209387][ T8470] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 761.311697][ T5677] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 761.451767][ T8470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 761.826641][ T8461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 761.892179][ T8461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.975558][ T8461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 762.027907][ T8461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.064300][ T8461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 762.108891][ T8461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.175757][ T8461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.257715][ T8461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.727633][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.212382][ T5684] usb 6-1: USB disconnect, device number 6 [ 763.317824][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.686472][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.694066][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.787500][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.794891][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.436574][ T8755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.458336][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.026304][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.291377][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.298949][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.476232][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.483849][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.464057][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.233525][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.603904][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.611520][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.507954][ T40] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 769.617891][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.625401][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.720754][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 769.759329][ T40] usb 5-1: not running at top speed; connect to a high speed hub [ 769.816071][ T40] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 769.866500][ T40] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 769.897484][ T40] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 769.943688][ T40] usb 5-1: config 14 has no interface number 0 [ 769.990838][ T40] usb 5-1: config 14 has no interface number 1 [ 770.011851][ T40] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 770.044501][ T40] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 770.082300][ T40] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.138819][ T40] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 770.170298][ T40] usb 5-1: config 14 interface 57 has no altsetting 0 [ 770.190252][ T40] usb 5-1: config 14 interface 228 has no altsetting 0 [ 770.229559][ T40] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 770.273556][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.300704][ T40] usb 5-1: Product: syz [ 770.320565][ T40] usb 5-1: Manufacturer: syz [ 770.325415][ T40] usb 5-1: SerialNumber: syz [ 770.863082][ T40] legousbtower 5-1:14.57: interrupt endpoints not found [ 771.263473][ T40] legousbtower 5-1:14.228: get version request failed: -121 [ 771.296761][ T40] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 771.936829][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.081256][ T3099] usb 5-1: USB disconnect, device number 24 [ 773.116416][ T8470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.015266][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.444846][ T8860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.625436][ T11] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 775.840931][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 775.882192][ T11] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 775.923890][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.982294][ T11] usb 5-1: config 0 descriptor?? [ 776.291721][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 776.389255][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.447707][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 776.505938][ T8861] ===================================================== [ 776.513753][ T8861] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 776.521317][ T8861] _copy_to_user+0xcc/0x120 [ 776.526087][ T8861] i2cdev_ioctl_smbus+0x586/0x660 [ 776.531566][ T8861] i2cdev_ioctl+0xa14/0xf40 [ 776.533918][ T8470] veth0_vlan: entered promiscuous mode [ 776.536220][ T8861] __se_sys_ioctl+0x23c/0x400 [ 776.536386][ T8861] __x64_sys_ioctl+0x97/0xe0 [ 776.551628][ T8861] x64_sys_call+0x1975/0x3ea0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 776.557020][ T8861] do_syscall_64+0x15d/0x3c0 [ 776.565141][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.571427][ T8861] [ 776.573943][ T8861] Uninit was stored to memory at: [ 776.579165][ T8861] __i2c_smbus_xfer+0x2618/0x30a0 [ 776.584538][ T8861] i2c_smbus_xfer+0x2d8/0x480 [ 776.589416][ T8861] i2cdev_ioctl_smbus+0x4a1/0x660 [ 776.595894][ T8861] i2cdev_ioctl+0xa14/0xf40 [ 776.601518][ T8861] __se_sys_ioctl+0x23c/0x400 [ 776.606427][ T8861] __x64_sys_ioctl+0x97/0xe0 [ 776.612573][ T8861] x64_sys_call+0x1975/0x3ea0 [ 776.617427][ T8861] do_syscall_64+0x15d/0x3c0 [ 776.622425][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.628470][ T8861] [ 776.631002][ T8861] Local variable msgbuf1.i created at: [ 776.636880][ T8861] __i2c_smbus_xfer+0x97c/0x30a0 [ 776.642461][ T8861] i2c_smbus_xfer+0x2d8/0x480 [ 776.647336][ T8861] [ 776.649723][ T8861] Byte 1 of 2 is uninitialized [ 776.654694][ T8861] Memory access of size 2 starts at ffff88809effbcf6 [ 776.661960][ T8861] Data copied to user address 0000200000000040 [ 776.668198][ T8861] [ 776.673792][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.4.484 Not tainted syzkaller #0 PREEMPT(lazy) [ 776.684323][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.694690][ T8861] ===================================================== [ 776.701869][ T8861] Disabling lock debugging due to kernel taint [ 776.708843][ T11] usb 5-1: media controller created [ 776.797895][ T8861] Kernel panic - not syncing: kmsan.panic set ... [ 776.804472][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.4.484 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 776.815420][ T8861] Tainted: [B]=BAD_PAGE [ 776.819666][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.829854][ T8861] Call Trace: [ 776.833237][ T8861] [ 776.836252][ T8861] __dump_stack+0x26/0x30 [ 776.840751][ T8861] dump_stack_lvl+0x50/0x1c0 [ 776.845499][ T8861] ? dump_stack+0x12/0x25 [ 776.849994][ T8861] dump_stack+0x1e/0x25 [ 776.854299][ T8861] vpanic+0x7b4/0x1430 [ 776.858568][ T8861] panic+0x15d/0x160 [ 776.862685][ T8861] kmsan_report+0x31a/0x320 [ 776.867383][ T8861] ? kmsan_internal_check_memory+0x1e8/0x240 [ 776.873537][ T8861] ? kmsan_copy_to_user+0xef/0x190 [ 776.878812][ T8861] ? _copy_to_user+0xcc/0x120 [ 776.883630][ T8861] ? i2cdev_ioctl_smbus+0x586/0x660 [ 776.888997][ T8861] ? i2cdev_ioctl+0xa14/0xf40 [ 776.893824][ T8861] ? __se_sys_ioctl+0x23c/0x400 [ 776.898846][ T8861] ? __x64_sys_ioctl+0x97/0xe0 [ 776.903778][ T8861] ? x64_sys_call+0x1975/0x3ea0 [ 776.908789][ T8861] ? do_syscall_64+0x15d/0x3c0 [ 776.913817][ T8861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.920058][ T8861] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 776.925585][ T8861] ? __i2c_transfer+0x1189/0x31c0 [ 776.930769][ T8861] ? kmsan_get_metadata+0xf1/0x160 [ 776.936053][ T8861] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 776.942558][ T8861] ? kmsan_get_metadata+0xf1/0x160 [ 776.947858][ T8861] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 776.953863][ T8861] ? __i2c_smbus_xfer+0x201d/0x30a0 [ 776.959198][ T8861] ? kmsan_get_metadata+0xf1/0x160 [ 776.964487][ T8861] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 776.970500][ T8861] kmsan_internal_check_memory+0x1e8/0x240 [ 776.976497][ T8861] kmsan_copy_to_user+0xef/0x190 [ 776.981614][ T8861] _copy_to_user+0xcc/0x120 [ 776.986257][ T8861] i2cdev_ioctl_smbus+0x586/0x660 [ 776.991471][ T8861] i2cdev_ioctl+0xa14/0xf40 [ 776.996134][ T8861] ? kmsan_report+0x2d6/0x320 [ 777.000981][ T8861] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 777.006152][ T8861] __se_sys_ioctl+0x23c/0x400 [ 777.011005][ T8861] __x64_sys_ioctl+0x97/0xe0 [ 777.015768][ T8861] x64_sys_call+0x1975/0x3ea0 [ 777.020603][ T8861] do_syscall_64+0x15d/0x3c0 [ 777.025373][ T8861] ? clear_bhb_loop+0x50/0xa0 [ 777.030189][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.036230][ T8861] RIP: 0033:0x7f306999ce59 [ 777.040759][ T8861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.060510][ T8861] RSP: 002b:00007f306a88e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.069066][ T8861] RAX: ffffffffffffffda RBX: 00007f3069c15fa0 RCX: 00007f306999ce59 [ 777.077153][ T8861] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 777.085221][ T8861] RBP: 00007f3069a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 777.093292][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.101357][ T8861] R13: 00007f3069c16038 R14: 00007f3069c15fa0 R15: 00007fff2609cb88 [ 777.109475][ T8861] [ 777.112859][ T8861] Kernel Offset: disabled [ 777.117233][ T8861] Rebooting in 86400 seconds..