last executing test programs: 11m5.325176085s ago: executing program 32 (id=42): shmctl$IPC_SET(0x0, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ptrace(0x10, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x800) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x148401) ioctl$LOOP_CLR_FD(r2, 0x4c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m43.301332471s ago: executing program 1 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 10m42.332765042s ago: executing program 1 (id=84): socket$key(0xf, 0x3, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) unshare(0x26020480) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10m38.021659126s ago: executing program 1 (id=88): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) syz_emit_ethernet(0x16, &(0x7f0000002240)=ANY=[], 0x0) 10m35.195496331s ago: executing program 1 (id=92): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000100)={0x1, @pix={0x4000, 0x1000, 0x34565348, 0x2, 0x0, 0x8, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x0, 0x5}}) 10m33.979704352s ago: executing program 1 (id=94): syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a090000000000000000000200000073797a32000000001400000011000100"/67], 0x54}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) unshare(0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x0, 0x7}}, './file0\x00'}) socket(0x1d, 0x2, 0x6) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10m28.993633257s ago: executing program 1 (id=98): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) syz_usb_connect(0x2, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m19.052814063s ago: executing program 3 (id=115): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000100)={0x1, @pix={0x4000, 0x1000, 0x34565348, 0x2, 0x0, 0x8, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x0, 0x5}}) 10m18.214275669s ago: executing program 3 (id=117): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x3, 0x3, 0x4, 0x5, 0xf6e, 0x0, 0x2, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a447, 0x13, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) 10m17.631996284s ago: executing program 3 (id=119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x67e6e5b48b01fc6a, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000980)={0x5}) 10m16.643855427s ago: executing program 3 (id=121): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f00000000c0)=0xd293) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110025bd7000000000002500000008000300", @ANYRES32, @ANYBLOB="0aff0f0002020202020200000a000600080211000001000008003500030000000800090005ac0f002f54561a95f2eaf30001000011000700bac904fc3c65f1a259e8f0dea50000000800260000000000"], 0x6c}}, 0x0) 10m14.680920028s ago: executing program 3 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x178, 0x0, &(0x7f0000000400)="9d1d9d9e0fd2f4ce3fcb9b580341dbf2083878b159e9feecadead78a2cf1a3cc9615c627e7f5b3d905c8506ca4f61b"}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1c37600e, 0x0}, {0x2, 0x0, 0x8001, 0x0}, {0x1, 0x0, 0x81, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x7a, 0x0}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 10m13.356407426s ago: executing program 33 (id=98): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) syz_usb_connect(0x2, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m13.237387792s ago: executing program 3 (id=128): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) 9m57.764284182s ago: executing program 34 (id=128): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) 5m55.273658038s ago: executing program 7 (id=142): prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) msgget$private(0x0, 0x101) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) 5m51.818819089s ago: executing program 7 (id=424): mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 5m49.190036177s ago: executing program 7 (id=426): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fc000/0x2000)=nil, 0x2000, 0x802}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000100), 0x0, 0x7a}) 5m47.916702265s ago: executing program 7 (id=428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0, 0x0, 0x10}, 0x18) signalfd4(r3, &(0x7f0000000500)={[0x6]}, 0x8, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f00000001c0)=0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) mknod$loop(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m42.958231969s ago: executing program 35 (id=428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0, 0x0, 0x10}, 0x18) signalfd4(r3, &(0x7f0000000500)={[0x6]}, 0x8, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f00000001c0)=0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) mknod$loop(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m40.383523329s ago: executing program 0 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x2040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'bond_slave_0\x00', 0x1000}) 4m39.585279458s ago: executing program 0 (id=511): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4m37.641981148s ago: executing program 0 (id=513): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 4m36.074989027s ago: executing program 0 (id=515): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x20, 0x16}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b01, 0x0) 4m35.321936638s ago: executing program 8 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@deltclass={0x24, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {0x0, 0x10}, {0xc, 0x6}}}, 0x24}}, 0x20000004) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, 0x0) syz_open_dev$dri(0x0, 0x3, 0x90700) bind$can_raw(r3, &(0x7f00000000c0), 0x10) 4m33.36229055s ago: executing program 8 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x8c4) 4m31.77396022s ago: executing program 0 (id=523): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r6 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) socket$inet_sctp(0x2, 0x5, 0x84) ftruncate(r6, 0x0) 4m31.569784103s ago: executing program 8 (id=524): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 4m30.326710772s ago: executing program 8 (id=527): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x9, 0x7, 0x56595559, 0x3, 0xfffffff8, 0x9, 0x9, 0x10, 0x1, 0xa, 0x2, 0x2}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xae91, 0x55f, 0x1a0000, 0x4, 0xffffffffffffffff, 0x4, 0x9, 0xb, 0x4, 0x80, 0x100000000006, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m27.630359524s ago: executing program 0 (id=533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x4854}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_IOCTL(r6, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r9, 0x4068aea3, &(0x7f00000023c0)={0xa3, 0x0, 0x0}) 4m25.903060235s ago: executing program 8 (id=534): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) 4m24.413244057s ago: executing program 8 (id=536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 4m11.925036486s ago: executing program 36 (id=533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x4854}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_IOCTL(r6, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r9, 0x4068aea3, &(0x7f00000023c0)={0xa3, 0x0, 0x0}) 4m9.044298529s ago: executing program 37 (id=536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 8.603372139s ago: executing program 6 (id=968): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 7.673890267s ago: executing program 6 (id=972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x1}, @free_buffer], 0x0, 0x0, 0x0}) 6.807908976s ago: executing program 6 (id=975): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40004, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 5.766126504s ago: executing program 6 (id=980): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff", 0x2ac}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c1", 0x24}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c", 0xd5}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.564233349s ago: executing program 5 (id=981): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 5.262231176s ago: executing program 4 (id=983): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x4}, 0xfd}], 0x20) 4.842692096s ago: executing program 5 (id=984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x1}, @free_buffer], 0x0, 0x0, 0x0}) 4.804102432s ago: executing program 6 (id=985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x2}, 0x94) 4.614450964s ago: executing program 4 (id=986): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) 4.46968533s ago: executing program 2 (id=987): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) munlock(&(0x7f00006cc000/0x2000)=nil, 0x2000) 4.002673752s ago: executing program 4 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x9}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.986909757s ago: executing program 5 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 3.963357091s ago: executing program 6 (id=990): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 3.806455668s ago: executing program 2 (id=991): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) truncate(&(0x7f0000004540)='./file1\x00', 0xfff) 3.147264543s ago: executing program 4 (id=992): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.6668647s ago: executing program 2 (id=993): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40004, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 2.612027749s ago: executing program 5 (id=994): r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1.989347933s ago: executing program 4 (id=995): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.691382997s ago: executing program 2 (id=996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xfffffffffffffe5f, 0x1000000, 0x0}) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) 1.382920511s ago: executing program 5 (id=997): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="200000000000000084000000020000005e0c0400010000000b248c16ea"], 0x20, 0xc005}], 0x1, 0x10) 1.153401109s ago: executing program 4 (id=998): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCNXCL(r0, 0x540d) socket(0x1e, 0x6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) 712.204385ms ago: executing program 2 (id=999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x2}, 0x94) 534.500385ms ago: executing program 5 (id=1000): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x1, 0x0, [{0x4000, 0xbd, &(0x7f00000002c0)=""/189}]}) 0s ago: executing program 2 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$phonet_pipe(0x23, 0x5, 0x2) userfaultfd(0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000089080012400000ffff11000300686173683a69702c706f727400000000e0f35b88975f9fb1b3254a1f10fafac118"], 0x60}}, 0x22040000) kernel console output (not intermixed with test programs): evsim0: renamed from eth0 [ 506.964314][ T7157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 507.567057][ T7359] 9pnet_fd: Insufficient options for proto=fd [ 509.205567][ T7157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 509.311518][ T7157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 510.645271][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.114076][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.347677][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.355261][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.470522][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.594742][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.602444][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.851107][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.216709][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.399737][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.407474][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.664969][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.672705][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.496919][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.094665][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.726698][ T7103] veth0_vlan: entered promiscuous mode [ 516.770724][ T7403] loop0: detected capacity change from 0 to 256 [ 516.861225][ T7103] veth1_vlan: entered promiscuous mode [ 517.013658][ T7403] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 517.316616][ T7103] veth0_macvtap: entered promiscuous mode [ 517.390756][ T7103] veth1_macvtap: entered promiscuous mode [ 518.481568][ T7171] veth0_vlan: entered promiscuous mode [ 518.660667][ T7171] veth1_vlan: entered promiscuous mode [ 519.224853][ T7171] veth0_macvtap: entered promiscuous mode [ 519.429400][ T7171] veth1_macvtap: entered promiscuous mode [ 519.488367][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.518050][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.546211][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.618467][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.647071][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.728788][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.821350][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.847966][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.881760][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.897991][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.960655][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.966389][ T7143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.987078][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.116657][ T7143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.249831][ T7143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.501275][ T7143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.061711][ T7157] veth0_vlan: entered promiscuous mode [ 521.345080][ T7157] veth1_vlan: entered promiscuous mode [ 522.076294][ T5816] Bluetooth: hci0: command tx timeout [ 522.214005][ T7157] veth0_macvtap: entered promiscuous mode [ 522.701715][ T7157] veth1_macvtap: entered promiscuous mode [ 523.509607][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.794701][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.027382][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 524.156539][ T5816] Bluetooth: hci0: command tx timeout [ 524.503521][ T3727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.045226][ T3727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.201798][ T3727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.291591][ T3727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.583679][ T7454] binder_alloc: 7452: binder_alloc_buf, no vma [ 526.236965][ T5816] Bluetooth: hci0: command tx timeout [ 527.090174][ T7464] loop0: detected capacity change from 0 to 256 [ 527.507417][ T7464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 528.286885][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.294497][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.302699][ T7428] bridge_slave_0: entered allmulticast mode [ 528.312613][ T7428] bridge_slave_0: entered promiscuous mode [ 528.336040][ T5816] Bluetooth: hci0: command tx timeout [ 528.363052][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.371074][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.379131][ T7428] bridge_slave_1: entered allmulticast mode [ 528.389184][ T7428] bridge_slave_1: entered promiscuous mode [ 528.817825][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.203187][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.677416][ T7143] bridge_slave_1: left allmulticast mode [ 529.683294][ T7143] bridge_slave_1: left promiscuous mode [ 529.690060][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.790198][ T7143] bridge_slave_0: left allmulticast mode [ 529.796411][ T7143] bridge_slave_0: left promiscuous mode [ 529.803100][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.580870][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 530.597743][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 530.642282][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.658076][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.722070][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 530.738616][ T7143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.908326][ T7143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.992531][ T7143] bond0 (unregistering): Released all slaves [ 531.300424][ T7428] team0: Port device team_slave_0 added [ 531.520142][ T7143] hsr_slave_0: left promiscuous mode [ 531.558119][ T7143] hsr_slave_1: left promiscuous mode [ 531.566605][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.660705][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.847590][ T7143] veth1_macvtap: left promiscuous mode [ 531.853493][ T7143] veth0_macvtap: left promiscuous mode [ 531.859845][ T7143] veth1_vlan: left promiscuous mode [ 531.865445][ T7143] veth0_vlan: left promiscuous mode [ 532.877244][ T5109] Bluetooth: hci3: command tx timeout [ 532.988107][ T30] audit: type=1326 audit(1754137565.360:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.010834][ T30] audit: type=1326 audit(1754137565.360:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.621485][ T30] audit: type=1326 audit(1754137565.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.644084][ T30] audit: type=1326 audit(1754137565.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.666906][ T30] audit: type=1326 audit(1754137565.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.693386][ T30] audit: type=1326 audit(1754137565.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.717476][ T30] audit: type=1326 audit(1754137565.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.739990][ T30] audit: type=1326 audit(1754137565.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.762508][ T30] audit: type=1326 audit(1754137565.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 533.785033][ T30] audit: type=1326 audit(1754137565.540:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae538eb69 code=0x7ffc0000 [ 534.077590][ T7513] overlayfs: missing 'lowerdir' [ 534.903223][ T7143] team0 (unregistering): Port device team_slave_1 removed [ 534.949709][ T7143] team0 (unregistering): Port device team_slave_0 removed [ 534.959450][ T5109] Bluetooth: hci3: command tx timeout [ 535.704846][ T7428] team0: Port device team_slave_1 added [ 536.875219][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.884127][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.911023][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.962936][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.970355][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.036299][ T5109] Bluetooth: hci3: command tx timeout [ 537.319433][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.326918][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.353478][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.472126][ T7143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.818458][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 537.835360][ T7143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.862820][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 537.889237][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 537.913836][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 537.948406][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.196454][ T7143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.031866][ T7143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.144357][ T5109] Bluetooth: hci3: command tx timeout [ 539.172466][ T7428] hsr_slave_0: entered promiscuous mode [ 539.183195][ T7428] hsr_slave_1: entered promiscuous mode [ 539.192526][ T7428] debugfs: 'hsr0' already exists in 'hsr' [ 539.198779][ T7428] Cannot create hsr debugfs directory [ 539.353716][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 540.081742][ T5109] Bluetooth: hci2: command tx timeout [ 540.558317][ T7143] bridge_slave_1: left allmulticast mode [ 540.564388][ T7143] bridge_slave_1: left promiscuous mode [ 540.571388][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.739512][ T7143] bridge_slave_0: left allmulticast mode [ 540.745410][ T7143] bridge_slave_0: left promiscuous mode [ 540.752446][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.790502][ T7143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.986328][ T7143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.004398][ T7143] bond0 (unregistering): Released all slaves [ 542.160977][ T5816] Bluetooth: hci2: command tx timeout [ 542.548578][ T7143] hsr_slave_0: left promiscuous mode [ 542.566529][ T7143] hsr_slave_1: left promiscuous mode [ 542.574999][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.582922][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.659078][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.667761][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.768355][ T7143] veth1_macvtap: left promiscuous mode [ 542.774153][ T7143] veth0_macvtap: left promiscuous mode [ 542.780377][ T7143] veth1_vlan: left promiscuous mode [ 542.786634][ T7143] veth0_vlan: left promiscuous mode [ 543.578686][ T7569] Bluetooth: (null): Invalid header checksum [ 544.151106][ T7143] team0 (unregistering): Port device team_slave_1 removed [ 544.200728][ T7143] team0 (unregistering): Port device team_slave_0 removed [ 544.236125][ T5816] Bluetooth: hci2: command tx timeout [ 545.461747][ T7583] netlink: 76 bytes leftover after parsing attributes in process `syz.0.354'. [ 546.087190][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.094943][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.103253][ T7495] bridge_slave_0: entered allmulticast mode [ 546.113340][ T7495] bridge_slave_0: entered promiscuous mode [ 546.316091][ T5816] Bluetooth: hci2: command tx timeout [ 546.600561][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.608382][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.616344][ T7495] bridge_slave_1: entered allmulticast mode [ 546.626518][ T7495] bridge_slave_1: entered promiscuous mode [ 548.320588][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.604171][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.782203][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.927941][ T7523] chnl_net:caif_netlink_parms(): no params data found [ 548.964802][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.052012][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.630818][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.794694][ T7495] team0: Port device team_slave_0 added [ 549.943764][ T7495] team0: Port device team_slave_1 added [ 550.537217][ T7428] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 550.610885][ T57] bridge_slave_1: left allmulticast mode [ 550.617055][ T57] bridge_slave_1: left promiscuous mode [ 550.623744][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.738515][ T57] bridge_slave_0: left allmulticast mode [ 550.744400][ T57] bridge_slave_0: left promiscuous mode [ 550.751511][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.479209][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.542923][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.612068][ T57] bond0 (unregistering): Released all slaves [ 551.756010][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.763177][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.790125][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.842118][ T7428] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 551.940754][ T7428] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 552.019511][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.027397][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.053947][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.073500][ T7428] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 552.311149][ T57] hsr_slave_0: left promiscuous mode [ 552.401371][ T57] hsr_slave_1: left promiscuous mode [ 552.410025][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.418042][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.607185][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.614900][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.979528][ T57] veth1_macvtap: left promiscuous mode [ 552.985316][ T57] veth0_macvtap: left promiscuous mode [ 552.991678][ T57] veth1_vlan: left promiscuous mode [ 552.999431][ T57] veth0_vlan: left promiscuous mode [ 554.562862][ T57] team0 (unregistering): Port device team_slave_1 removed [ 554.614393][ T57] team0 (unregistering): Port device team_slave_0 removed [ 555.456251][ T5860] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 555.653642][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.656030][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.663345][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.671273][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 555.671496][ T5860] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 555.679205][ T7523] bridge_slave_0: entered allmulticast mode [ 555.688239][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.701650][ T7523] bridge_slave_0: entered promiscuous mode [ 555.779986][ T7495] hsr_slave_0: entered promiscuous mode [ 555.791997][ T7495] hsr_slave_1: entered promiscuous mode [ 555.801423][ T7495] debugfs: 'hsr0' already exists in 'hsr' [ 555.807680][ T7495] Cannot create hsr debugfs directory [ 555.898588][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.957045][ T5860] usb 1-1: config 0 descriptor?? [ 556.025989][ T5860] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 556.032973][ T5860] dvb-usb: bulk message failed: -22 (3/0) [ 556.079399][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.087540][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.095380][ T7523] bridge_slave_1: entered allmulticast mode [ 556.099587][ T5860] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 556.108164][ T7523] bridge_slave_1: entered promiscuous mode [ 556.234601][ T5860] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 556.242305][ T5860] usb 1-1: media controller created [ 556.314858][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.446920][ T5860] dvb-usb: bulk message failed: -22 (6/0) [ 556.453209][ T5860] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 556.525159][ T5860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 556.557524][ T5860] dvb-usb: schedule remote query interval to 150 msecs. [ 556.564948][ T5860] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 556.716448][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 556.722895][ T5897] dvb-usb: error while querying for an remote control event. [ 557.260347][ T5860] usb 1-1: USB disconnect, device number 6 [ 557.300267][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.352356][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.380314][ T5860] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 557.903889][ T7523] team0: Port device team_slave_0 added [ 558.025412][ T7523] team0: Port device team_slave_1 added [ 558.697563][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.704724][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.731397][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.809861][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.883388][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.890806][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.919626][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.093453][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.540645][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.548453][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.683635][ T7523] hsr_slave_0: entered promiscuous mode [ 559.694663][ T7523] hsr_slave_1: entered promiscuous mode [ 559.703975][ T7523] debugfs: 'hsr0' already exists in 'hsr' [ 559.710030][ T7523] Cannot create hsr debugfs directory [ 559.848568][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.856223][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.963216][ T7495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.097254][ T7495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.293154][ T7495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 561.472580][ T7495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.504424][ T7523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.535037][ T7523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.564077][ T7523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 562.586374][ T7523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 563.432023][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.729005][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.872311][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.880149][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.024303][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.032245][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.065196][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.348608][ T7701] fuse: Bad value for 'fd' [ 564.534200][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.792150][ T7523] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.954040][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.961904][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.091497][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.099234][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.939661][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.974790][ T7428] veth0_vlan: entered promiscuous mode [ 569.146943][ T7428] veth1_vlan: entered promiscuous mode [ 569.338696][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.712990][ T7752] fuse: Bad value for 'fd' [ 569.748599][ T7428] veth0_macvtap: entered promiscuous mode [ 569.813886][ T7428] veth1_macvtap: entered promiscuous mode [ 570.032037][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.183951][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.298397][ T7143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.432484][ T7143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.487963][ T7143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.553771][ T3727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.178553][ T7495] veth0_vlan: entered promiscuous mode [ 572.324748][ T7495] veth1_vlan: entered promiscuous mode [ 572.688472][ T7495] veth0_macvtap: entered promiscuous mode [ 572.833826][ T7495] veth1_macvtap: entered promiscuous mode [ 573.124303][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.241996][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.298765][ T7523] veth0_vlan: entered promiscuous mode [ 573.447002][ T3630] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.495065][ T7523] veth1_vlan: entered promiscuous mode [ 573.528328][ T3630] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.575374][ T3630] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.611756][ T7143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.207344][ T7523] veth0_macvtap: entered promiscuous mode [ 574.400108][ T7523] veth1_macvtap: entered promiscuous mode [ 574.719029][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.863543][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.993657][ T3775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.105092][ T3775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.198353][ T3775] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.261373][ T3775] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.746572][ T5109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.758964][ T5109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.772388][ T5109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 580.993721][ T5109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 581.027851][ T5109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.261373][ T5816] Bluetooth: hci5: command tx timeout [ 585.276796][ T5816] Bluetooth: hci5: command tx timeout [ 586.049045][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 586.455870][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.634986][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.983910][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.202060][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.357291][ T5816] Bluetooth: hci5: command tx timeout [ 587.547189][ T3775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.555267][ T3775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.028983][ T3951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.037443][ T3951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.221461][ T57] bridge_slave_1: left allmulticast mode [ 588.227893][ T57] bridge_slave_1: left promiscuous mode [ 588.234586][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.377555][ T57] bridge_slave_0: left allmulticast mode [ 588.383463][ T57] bridge_slave_0: left promiscuous mode [ 588.390454][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.130053][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.158983][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.237486][ T57] bond0 (unregistering): Released all slaves [ 589.443590][ T5816] Bluetooth: hci5: command tx timeout [ 589.497850][ T7912] tipc: Failed to obtain node identity [ 589.503698][ T7912] tipc: Enabling of bearer rejected, failed to enable media [ 589.566854][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.575087][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.643853][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.651897][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.659923][ T7864] bridge_slave_0: entered allmulticast mode [ 589.670164][ T7864] bridge_slave_0: entered promiscuous mode [ 589.736520][ T57] hsr_slave_0: left promiscuous mode [ 589.761065][ T57] hsr_slave_1: left promiscuous mode [ 589.771301][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.779190][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.838817][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.848428][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.956557][ T57] veth1_macvtap: left promiscuous mode [ 589.962483][ T57] veth0_macvtap: left promiscuous mode [ 589.969011][ T57] veth1_vlan: left promiscuous mode [ 589.974592][ T57] veth0_vlan: left promiscuous mode [ 591.376946][ T57] team0 (unregistering): Port device team_slave_1 removed [ 591.438217][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.463939][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.475334][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.493608][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.498355][ T57] team0 (unregistering): Port device team_slave_0 removed [ 591.667008][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.052495][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.060417][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.068398][ T7864] bridge_slave_1: entered allmulticast mode [ 592.078469][ T7864] bridge_slave_1: entered promiscuous mode [ 592.454657][ T4027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.463097][ T4027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.808225][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.989505][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.939812][ T5109] Bluetooth: hci0: command tx timeout [ 594.004306][ T7864] team0: Port device team_slave_0 added [ 595.043188][ T7864] team0: Port device team_slave_1 added [ 595.996232][ T5109] Bluetooth: hci0: command tx timeout [ 596.593186][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.604278][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.631908][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.734330][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.742224][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.769755][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.424904][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.970696][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.076537][ T5109] Bluetooth: hci0: command tx timeout [ 598.176533][ T7864] hsr_slave_0: entered promiscuous mode [ 598.201807][ T7864] hsr_slave_1: entered promiscuous mode [ 598.211731][ T7864] debugfs: 'hsr0' already exists in 'hsr' [ 598.218245][ T7864] Cannot create hsr debugfs directory [ 598.358619][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.365465][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.459370][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.952558][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.312510][ T7919] chnl_net:caif_netlink_parms(): no params data found [ 600.157077][ T5109] Bluetooth: hci0: command tx timeout [ 600.555451][ T57] bridge_slave_1: left allmulticast mode [ 600.561752][ T57] bridge_slave_1: left promiscuous mode [ 600.570399][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.730010][ T57] bridge_slave_0: left allmulticast mode [ 600.736165][ T57] bridge_slave_0: left promiscuous mode [ 600.743274][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.817888][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.850895][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.868555][ T57] bond0 (unregistering): Released all slaves [ 603.812510][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.820463][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.828636][ T7919] bridge_slave_0: entered allmulticast mode [ 603.839154][ T7919] bridge_slave_0: entered promiscuous mode [ 603.973228][ T57] hsr_slave_0: left promiscuous mode [ 604.002775][ T57] hsr_slave_1: left promiscuous mode [ 604.011465][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.019815][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.046327][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.053929][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.088749][ T57] veth1_macvtap: left promiscuous mode [ 604.094512][ T57] veth0_macvtap: left promiscuous mode [ 604.101261][ T57] veth1_vlan: left promiscuous mode [ 604.107030][ T57] veth0_vlan: left promiscuous mode [ 604.971885][ T57] team0 (unregistering): Port device team_slave_1 removed [ 605.003950][ T57] team0 (unregistering): Port device team_slave_0 removed [ 605.616621][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.624336][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.632472][ T7919] bridge_slave_1: entered allmulticast mode [ 605.642309][ T7919] bridge_slave_1: entered promiscuous mode [ 606.548094][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.800305][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.127137][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 607.152859][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 607.169847][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 607.197601][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 607.220895][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 607.584102][ T3951] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.723997][ T7966] fuse: Unknown parameter '0x0000000000000003' [ 607.978753][ T3951] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.083713][ T7919] team0: Port device team_slave_0 added [ 608.274311][ T3951] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.389129][ T7919] team0: Port device team_slave_1 added [ 608.840752][ T3951] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.876379][ T7864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 609.098217][ T7864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 609.275955][ T5109] Bluetooth: hci2: command tx timeout [ 609.389717][ T7864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 609.449172][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.458372][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.485230][ T7919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.559340][ T7864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.977835][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.985251][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.012504][ T7919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.554517][ T3951] bridge_slave_1: left allmulticast mode [ 610.560734][ T3951] bridge_slave_1: left promiscuous mode [ 610.567695][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.585961][ T3951] bridge_slave_0: left allmulticast mode [ 610.591854][ T3951] bridge_slave_0: left promiscuous mode [ 610.598953][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.106001][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.130893][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.196217][ T3951] bond0 (unregistering): Released all slaves [ 611.382257][ T5109] Bluetooth: hci2: command tx timeout [ 611.736887][ T7919] hsr_slave_0: entered promiscuous mode [ 611.747758][ T7919] hsr_slave_1: entered promiscuous mode [ 611.760235][ T7919] debugfs: 'hsr0' already exists in 'hsr' [ 611.766438][ T7919] Cannot create hsr debugfs directory [ 612.683594][ T3951] hsr_slave_0: left promiscuous mode [ 612.705228][ T3951] hsr_slave_1: left promiscuous mode [ 612.714588][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.722932][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.752772][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.761356][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.875724][ T3951] veth1_macvtap: left promiscuous mode [ 612.882155][ T3951] veth0_macvtap: left promiscuous mode [ 612.888410][ T3951] veth1_vlan: left promiscuous mode [ 612.894171][ T3951] veth0_vlan: left promiscuous mode [ 613.445411][ T5109] Bluetooth: hci2: command tx timeout [ 613.893790][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 613.938666][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 614.500416][ T5897] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 614.538048][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 615.104194][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 615.170077][ T5897] usb 1-1: config 2 has an invalid interface number: 157 but max is 0 [ 615.178758][ T5897] usb 1-1: config 2 has no interface number 0 [ 615.282435][ T5897] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 615.292614][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.301390][ T5897] usb 1-1: Product: syz [ 615.306151][ T5897] usb 1-1: Manufacturer: syz [ 615.311071][ T5897] usb 1-1: SerialNumber: syz [ 615.516144][ T5109] Bluetooth: hci2: command tx timeout [ 615.619513][ T5897] imon 1-1:2.157: unable to register, err -19 [ 615.811090][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.849909][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.908155][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.269178][ T24] usb 1-1: USB disconnect, device number 7 [ 616.571799][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.791301][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.799013][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.016030][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.024236][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.630375][ T7919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.689295][ T7919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.939004][ T7919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.119309][ T7919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.149944][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.161215][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.169317][ T7963] bridge_slave_0: entered allmulticast mode [ 618.180403][ T7963] bridge_slave_0: entered promiscuous mode [ 618.729309][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.738108][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.746258][ T7963] bridge_slave_1: entered allmulticast mode [ 618.760446][ T7963] bridge_slave_1: entered promiscuous mode [ 619.738223][ T8001] fuse: Unknown parameter 'fd0x0000000000000003' [ 619.745317][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.922562][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.445365][ T7963] team0: Port device team_slave_0 added [ 620.561798][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.588991][ T7963] team0: Port device team_slave_1 added [ 620.729266][ T7919] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.805473][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.813276][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.978182][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.985356][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.013999][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.046589][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.054164][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.264800][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.272206][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.299364][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.373843][ T7963] hsr_slave_0: entered promiscuous mode [ 622.386888][ T7963] hsr_slave_1: entered promiscuous mode [ 622.396720][ T7963] debugfs: 'hsr0' already exists in 'hsr' [ 622.402664][ T7963] Cannot create hsr debugfs directory [ 622.564990][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.814492][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.232320][ T7963] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 625.348637][ T7963] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 625.458978][ T7963] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 625.557381][ T7963] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 626.313313][ T8054] fuse: Unknown parameter 'fd0x0000000000000003' [ 626.628673][ T7864] veth0_vlan: entered promiscuous mode [ 626.811594][ T7864] veth1_vlan: entered promiscuous mode [ 627.295251][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.323799][ T7864] veth0_macvtap: entered promiscuous mode [ 627.450658][ T7864] veth1_macvtap: entered promiscuous mode [ 627.499309][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'. [ 627.509024][ T8064] bond0: option resend_igmp: invalid value (18446744072065384451) [ 627.517478][ T8064] bond0: option resend_igmp: allowed values 0 - 255 [ 627.606527][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.688051][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.695822][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.768468][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.857219][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.864824][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.894356][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.063367][ T3508] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.148359][ T3630] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.211280][ T3630] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.267407][ T3630] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.962744][ T7919] veth0_vlan: entered promiscuous mode [ 629.096946][ T7919] veth1_vlan: entered promiscuous mode [ 629.603631][ T7919] veth0_macvtap: entered promiscuous mode [ 629.729642][ T7919] veth1_macvtap: entered promiscuous mode [ 630.064016][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.184393][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.386940][ T1335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.409339][ T1335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.496217][ T1335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.551841][ T1335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.120669][ T8100] fuse: Unknown parameter 'fd0x0000000000000003' [ 631.408229][ T7963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.220843][ T8116] overlayfs: conflicting options: userxattr,redirect_dir=on [ 632.521603][ T8119] warning: `syz.0.459' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 634.196423][ T1614] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 638.011399][ T1614] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 638.020319][ T1614] usb 1-1: can't read configurations, error -71 [ 638.885193][ T7963] veth0_vlan: entered promiscuous mode [ 639.144020][ T7963] veth1_vlan: entered promiscuous mode [ 639.567523][ T7963] veth0_macvtap: entered promiscuous mode [ 639.654956][ T7963] veth1_macvtap: entered promiscuous mode [ 639.851254][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.963881][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.086211][ T3461] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.098294][ T3727] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.136943][ T3727] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.222422][ T3727] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.679410][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 641.689558][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 641.706981][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 641.763146][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 641.778363][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 643.189789][ T8208] loop6: detected capacity change from 0 to 63 [ 643.277015][ T8214] Buffer I/O error on dev loop6, logical block 3, async page read [ 643.285263][ T8214] Buffer I/O error on dev loop6, logical block 3, async page read [ 643.325357][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.918399][ T5816] Bluetooth: hci3: command tx timeout [ 644.337022][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.356447][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.365871][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.658311][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.753143][ T8188] chnl_net:caif_netlink_parms(): no params data found [ 645.996504][ T5816] Bluetooth: hci3: command tx timeout [ 646.261623][ T3951] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.394675][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.403593][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.534986][ T3951] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.799623][ T3951] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.943450][ T3775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.952133][ T3775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.065923][ T3951] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.531375][ T1614] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 647.700140][ T1614] usb 1-1: device descriptor read/64, error -71 [ 648.017664][ T1614] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 648.077331][ T5816] Bluetooth: hci3: command tx timeout [ 648.101435][ T3951] bridge_slave_1: left allmulticast mode [ 648.110454][ T3951] bridge_slave_1: left promiscuous mode [ 648.118556][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.186369][ T1614] usb 1-1: device descriptor read/64, error -71 [ 648.219582][ T3951] bridge_slave_0: left allmulticast mode [ 648.226089][ T3951] bridge_slave_0: left promiscuous mode [ 648.232812][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.306655][ T1614] usb usb1-port1: attempt power cycle [ 648.848052][ T1614] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 648.895238][ T1614] usb 1-1: device descriptor read/8, error -71 [ 649.169155][ T1614] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 649.187945][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.260699][ T1614] usb 1-1: device descriptor read/8, error -71 [ 649.288189][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.340536][ T3951] bond0 (unregistering): Released all slaves [ 649.392667][ T1614] usb usb1-port1: unable to enumerate USB device [ 649.429697][ T8260] loop6: detected capacity change from 0 to 63 [ 649.438362][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.449179][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.457136][ T8188] bridge_slave_0: entered allmulticast mode [ 649.467242][ T8188] bridge_slave_0: entered promiscuous mode [ 649.601495][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.641195][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.653740][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.662151][ T8188] bridge_slave_1: entered allmulticast mode [ 649.673076][ T8188] bridge_slave_1: entered promiscuous mode [ 649.724750][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.738074][ T8263] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 649.760211][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.811480][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.904900][ T8194] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.982913][ T3951] hsr_slave_0: left promiscuous mode [ 650.042949][ T3951] hsr_slave_1: left promiscuous mode [ 650.059834][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.067967][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.156971][ T5816] Bluetooth: hci3: command tx timeout [ 650.350986][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.359173][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.706454][ T3951] veth1_macvtap: left promiscuous mode [ 650.712333][ T3951] veth0_macvtap: left promiscuous mode [ 650.719001][ T3951] veth1_vlan: left promiscuous mode [ 650.724834][ T3951] veth0_vlan: left promiscuous mode [ 653.529806][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 653.724797][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 655.050236][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.477'. [ 656.397476][ T8188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.547081][ T8188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.160204][ T8188] team0: Port device team_slave_0 added [ 657.389276][ T8188] team0: Port device team_slave_1 added [ 657.859309][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.867546][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.894123][ T8188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.916357][ T8059] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 657.947281][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.955556][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.115930][ T8059] usb 5-1: device descriptor read/64, error -71 [ 658.158103][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.165280][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.191868][ T8188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.339796][ T3775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.350600][ T3775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.416203][ T8059] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 658.600835][ T8059] usb 5-1: device descriptor read/64, error -71 [ 658.727547][ T8059] usb usb5-port1: attempt power cycle [ 658.908183][ T8188] hsr_slave_0: entered promiscuous mode [ 658.919065][ T8188] hsr_slave_1: entered promiscuous mode [ 658.931100][ T8188] debugfs: 'hsr0' already exists in 'hsr' [ 658.937552][ T8188] Cannot create hsr debugfs directory [ 659.176181][ T8059] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 659.236972][ T8059] usb 5-1: device descriptor read/8, error -71 [ 659.536637][ T8059] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 659.597850][ T8059] usb 5-1: device descriptor read/8, error -71 [ 659.787742][ T8059] usb usb5-port1: unable to enumerate USB device [ 659.806938][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.813893][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.052010][ T8351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 662.436899][ T8188] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.594768][ T8188] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 662.717343][ T8188] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 662.817399][ T8188] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 664.796835][ T8059] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 665.043048][ T8059] usb 9-1: device descriptor read/64, error -71 [ 665.684446][ T8059] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 667.215480][ T8059] usb 9-1: device descriptor read/64, error -71 [ 667.341174][ T8059] usb usb9-port1: attempt power cycle [ 668.318122][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.210957][ T7239] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 669.642996][ T8188] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.786098][ T7239] usb 5-1: device descriptor read/64, error -71 [ 670.096399][ T7239] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 670.139577][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.147248][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.164107][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.171920][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.345262][ T7239] usb 5-1: device descriptor read/64, error -71 [ 670.513033][ T7239] usb usb5-port1: attempt power cycle [ 671.016423][ T7239] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 671.123425][ T8188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 671.134569][ T8188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 671.981943][ T8396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 672.228632][ T7239] usb 5-1: device descriptor read/8, error -71 [ 672.997587][ T6962] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 673.206479][ T6962] usb 1-1: device descriptor read/64, error -71 [ 673.475953][ T6962] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 673.926457][ T6962] usb 1-1: device descriptor read/64, error -71 [ 674.111807][ T6962] usb usb1-port1: attempt power cycle [ 674.586158][ T6962] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 674.708941][ T6962] usb 1-1: device descriptor read/8, error -71 [ 675.055170][ T6962] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 675.134120][ T8188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.165183][ T6962] usb 1-1: device descriptor read/8, error -71 [ 676.162022][ T6962] usb usb1-port1: unable to enumerate USB device [ 681.436386][ T6962] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 681.736780][ T6962] usb 6-1: device descriptor read/64, error -71 [ 681.986271][ T6962] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 682.228304][ T6962] usb 6-1: device descriptor read/64, error -71 [ 682.249486][ T8188] veth0_vlan: entered promiscuous mode [ 682.369466][ T6962] usb usb6-port1: attempt power cycle [ 682.762090][ T8486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.533'. [ 682.859505][ T6962] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 682.883193][ T8188] veth1_vlan: entered promiscuous mode [ 682.978401][ T6962] usb 6-1: device descriptor read/8, error -71 [ 683.237368][ T6962] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 683.306480][ T6962] usb 6-1: device descriptor read/8, error -71 [ 683.412230][ T8188] veth0_macvtap: entered promiscuous mode [ 683.438639][ T6962] usb usb6-port1: unable to enumerate USB device [ 683.517193][ T8188] veth1_macvtap: entered promiscuous mode [ 683.812885][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 683.942294][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.122840][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.419430][ T3630] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.483681][ T3630] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.589135][ T4027] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.633206][ T4027] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.210077][ T8522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 696.226205][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 696.446745][ T24] usb 6-1: device descriptor read/64, error -71 [ 696.706135][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 696.917193][ T24] usb 6-1: device descriptor read/64, error -71 [ 697.046871][ T24] usb usb6-port1: attempt power cycle [ 697.540931][ T24] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 697.648149][ T24] usb 6-1: device descriptor read/8, error -71 [ 697.936023][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 698.014218][ T24] usb 6-1: device descriptor read/8, error -71 [ 698.155243][ T24] usb usb6-port1: unable to enumerate USB device [ 698.244376][ T5109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 698.273193][ T5109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.283311][ T5109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.304575][ T5109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.317310][ T5109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.357859][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.366179][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.636546][ T4027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.644926][ T4027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.396814][ T5816] Bluetooth: hci5: command tx timeout [ 700.727526][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 703.047768][ T5816] Bluetooth: hci5: command tx timeout [ 703.979934][ T5109] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 704.036203][ T5109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 704.047927][ T5109] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 704.147588][ T5109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 704.171136][ T5109] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 704.854031][ T3727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.126587][ T5816] Bluetooth: hci5: command tx timeout [ 705.132827][ T8059] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 705.265096][ T3727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.306279][ T8059] usb 7-1: device descriptor read/64, error -71 [ 705.498892][ T3727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.605972][ T8059] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 705.826591][ T8059] usb 7-1: device descriptor read/64, error -71 [ 705.945006][ T8059] usb usb7-port1: attempt power cycle [ 706.099505][ T3727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.246424][ T5816] Bluetooth: hci6: command tx timeout [ 706.301273][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.309244][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.317316][ T8563] bridge_slave_0: entered allmulticast mode [ 706.327512][ T8563] bridge_slave_0: entered promiscuous mode [ 706.335908][ T8059] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 706.567600][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.575431][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.584981][ T8563] bridge_slave_1: entered allmulticast mode [ 706.595387][ T8563] bridge_slave_1: entered promiscuous mode [ 707.199431][ T8059] usb 7-1: device descriptor read/8, error -71 [ 707.209735][ T5816] Bluetooth: hci5: command tx timeout [ 707.667564][ T8059] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 708.510748][ T5816] Bluetooth: hci6: command tx timeout [ 708.866104][ T8059] usb 7-1: device descriptor read/8, error -71 [ 709.015326][ T8059] usb usb7-port1: unable to enumerate USB device [ 709.354236][ T8623] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 709.376695][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.518505][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.532597][ T3727] bridge_slave_1: left allmulticast mode [ 710.538846][ T3727] bridge_slave_1: left promiscuous mode [ 710.545499][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.626216][ T5109] Bluetooth: hci6: command tx timeout [ 710.821223][ T3727] bridge_slave_0: left allmulticast mode [ 710.827533][ T3727] bridge_slave_0: left promiscuous mode [ 710.834371][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.939227][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.972861][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.990111][ T3727] bond0 (unregistering): Released all slaves [ 712.075296][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.139191][ T8595] chnl_net:caif_netlink_parms(): no params data found [ 712.639366][ T5109] Bluetooth: hci6: command tx timeout [ 712.667743][ T8563] team0: Port device team_slave_0 added [ 712.890833][ T8563] team0: Port device team_slave_1 added [ 713.742492][ T3727] hsr_slave_0: left promiscuous mode [ 713.866279][ T3727] hsr_slave_1: left promiscuous mode [ 713.874828][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.882805][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.198203][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.207428][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.287641][ T8666] virtiofs: Unknown parameter 'always' [ 714.349394][ T3727] veth1_macvtap: left promiscuous mode [ 714.355266][ T3727] veth0_macvtap: left promiscuous mode [ 714.362935][ T3727] veth1_vlan: left promiscuous mode [ 714.368974][ T3727] veth0_vlan: left promiscuous mode [ 715.221859][ T5860] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 715.588038][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 718.156371][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 718.319713][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 718.448851][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 719.012190][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 719.053282][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 719.062787][ T5860] usb 6-1: can't read configurations, error -71 [ 719.257245][ T8682] fuse: Unknown parameter 'user_id00000000000000000000' [ 719.521409][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.529875][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.556642][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.813641][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.821171][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.847762][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.008199][ T8563] hsr_slave_0: entered promiscuous mode [ 721.027864][ T8563] hsr_slave_1: entered promiscuous mode [ 721.053341][ T8563] debugfs: 'hsr0' already exists in 'hsr' [ 721.059440][ T8563] Cannot create hsr debugfs directory [ 721.216606][ T4027] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.247869][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.483589][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.491951][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.500146][ T8595] bridge_slave_0: entered allmulticast mode [ 721.512174][ T8595] bridge_slave_0: entered promiscuous mode [ 722.118831][ T4027] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.190788][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.199243][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.207875][ T8595] bridge_slave_1: entered allmulticast mode [ 722.219417][ T8595] bridge_slave_1: entered promiscuous mode [ 722.344166][ T4027] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.907388][ T4027] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.601604][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.122270][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.361178][ T8595] team0: Port device team_slave_0 added [ 726.463227][ T8724] fuse: Unknown parameter 'user_id00000000000000000000' [ 726.496690][ T4027] bridge_slave_1: left allmulticast mode [ 726.502571][ T4027] bridge_slave_1: left promiscuous mode [ 726.509472][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.577879][ T4027] bridge_slave_0: left allmulticast mode [ 726.583907][ T4027] bridge_slave_0: left promiscuous mode [ 726.590859][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.832151][ T4027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.909428][ T4027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.969836][ T4027] bond0 (unregistering): Released all slaves [ 728.124956][ T8595] team0: Port device team_slave_1 added [ 728.730615][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.738051][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.764639][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.097540][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.104907][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.137436][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.397796][ T4027] hsr_slave_0: left promiscuous mode [ 729.445877][ T4027] hsr_slave_1: left promiscuous mode [ 729.454218][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.462552][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.571340][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.579202][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.756672][ T4027] veth1_macvtap: left promiscuous mode [ 729.762437][ T4027] veth0_macvtap: left promiscuous mode [ 729.769358][ T4027] veth1_vlan: left promiscuous mode [ 729.774954][ T4027] veth0_vlan: left promiscuous mode [ 729.884841][ T8760] fuse: Bad value for 'fd' [ 731.350252][ T4027] team0 (unregistering): Port device team_slave_1 removed [ 731.454829][ T4027] team0 (unregistering): Port device team_slave_0 removed [ 732.177609][ T7239] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 732.396482][ T7239] usb 5-1: Using ep0 maxpacket: 16 [ 732.411024][ T7239] usb 5-1: no configurations [ 732.416906][ T7239] usb 5-1: can't read configurations, error -22 [ 732.625350][ T8595] hsr_slave_0: entered promiscuous mode [ 732.636458][ T8595] hsr_slave_1: entered promiscuous mode [ 732.645483][ T8595] debugfs: 'hsr0' already exists in 'hsr' [ 732.651774][ T8595] Cannot create hsr debugfs directory [ 732.689165][ T8563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 732.726042][ T7239] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 732.922661][ T7239] usb 5-1: Using ep0 maxpacket: 16 [ 732.933154][ T7239] usb 5-1: no configurations [ 732.938382][ T7239] usb 5-1: can't read configurations, error -22 [ 732.977791][ T7239] usb usb5-port1: attempt power cycle [ 733.034437][ T8563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 733.105410][ T8563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 733.215880][ T8563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 733.353801][ T7239] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 733.447988][ T7239] usb 5-1: Using ep0 maxpacket: 16 [ 733.458734][ T7239] usb 5-1: no configurations [ 733.464341][ T7239] usb 5-1: can't read configurations, error -22 [ 733.768103][ T7239] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 733.857793][ T7239] usb 5-1: Using ep0 maxpacket: 16 [ 733.915245][ T7239] usb 5-1: no configurations [ 733.921391][ T7239] usb 5-1: can't read configurations, error -22 [ 733.989963][ T7239] usb usb5-port1: unable to enumerate USB device [ 734.095457][ T8794] fuse: Bad value for 'fd' [ 736.436441][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.548409][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.688118][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.695866][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.712598][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.720300][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.764962][ T8595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 736.911441][ T8595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 737.012936][ T8595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 737.130933][ T8595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 739.669061][ T5860] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 740.148093][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.169509][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 740.228545][ T5860] usb 5-1: no configurations [ 740.233390][ T5860] usb 5-1: can't read configurations, error -22 [ 740.417364][ T5860] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 740.444653][ T8595] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.550540][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.558444][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.712692][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.720352][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.752862][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.766089][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 740.777510][ T5860] usb 5-1: no configurations [ 740.785211][ T5860] usb 5-1: can't read configurations, error -22 [ 740.849705][ T5860] usb usb5-port1: attempt power cycle [ 741.276424][ T5860] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 741.356629][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 741.414462][ T5860] usb 5-1: no configurations [ 741.419732][ T5860] usb 5-1: can't read configurations, error -22 [ 741.646517][ T5860] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 741.749701][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 741.768789][ T5860] usb 5-1: no configurations [ 741.773659][ T5860] usb 5-1: can't read configurations, error -22 [ 741.856107][ T5860] usb usb5-port1: unable to enumerate USB device [ 744.144042][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.943762][ T8595] veth0_vlan: entered promiscuous mode [ 745.105247][ T8563] veth0_vlan: entered promiscuous mode [ 745.115392][ T8595] veth1_vlan: entered promiscuous mode [ 745.296999][ T8563] veth1_vlan: entered promiscuous mode [ 745.684928][ T8595] veth0_macvtap: entered promiscuous mode [ 745.807932][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.635'. [ 746.255693][ T8595] veth1_macvtap: entered promiscuous mode [ 746.339051][ T8563] veth0_macvtap: entered promiscuous mode [ 746.489586][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.608078][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.655313][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.635'. [ 746.706305][ T8563] veth1_macvtap: entered promiscuous mode [ 746.744352][ T7143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.932887][ T1335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.195450][ T3727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.238801][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.262908][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.420757][ T3727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.504615][ T3727] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.572628][ T3727] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.652512][ T3727] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.714080][ T3727] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.522450][ T7240] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 757.756988][ T7240] usb 7-1: Using ep0 maxpacket: 16 [ 757.791309][ T7240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 757.799515][ T7240] usb 7-1: can't read configurations, error -61 [ 758.007173][ T7240] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 758.248379][ T7240] usb 7-1: Using ep0 maxpacket: 16 [ 758.327247][ T7240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 758.335141][ T7240] usb 7-1: can't read configurations, error -61 [ 758.540313][ T7240] usb usb7-port1: attempt power cycle [ 759.009662][ T7240] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 759.118007][ T7240] usb 7-1: Using ep0 maxpacket: 16 [ 759.215261][ T7240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 759.223767][ T7240] usb 7-1: can't read configurations, error -61 [ 759.327604][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 759.337841][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 759.348232][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 759.382833][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 759.395447][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.666733][ T7240] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 759.710694][ T7240] usb 7-1: Using ep0 maxpacket: 16 [ 759.757555][ T7240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 759.765781][ T7240] usb 7-1: can't read configurations, error -61 [ 759.856111][ T7240] usb usb7-port1: unable to enumerate USB device [ 761.436318][ T5814] Bluetooth: hci2: command tx timeout [ 761.658066][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 761.685229][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 761.708185][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 761.747088][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 761.798744][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 761.907999][ T9011] chnl_net:caif_netlink_parms(): no params data found [ 763.526039][ T5814] Bluetooth: hci2: command tx timeout [ 763.916366][ T5814] Bluetooth: hci4: command tx timeout [ 763.971677][ T1335] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.100212][ T1335] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.321891][ T1335] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.606080][ T5814] Bluetooth: hci2: command tx timeout [ 765.634212][ T1335] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.000913][ T5814] Bluetooth: hci4: command tx timeout [ 766.105129][ T6962] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 766.118112][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.125817][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.133616][ T9011] bridge_slave_0: entered allmulticast mode [ 766.233738][ T9011] bridge_slave_0: entered promiscuous mode [ 766.249825][ T9031] chnl_net:caif_netlink_parms(): no params data found [ 766.332805][ T6962] usb 6-1: Using ep0 maxpacket: 16 [ 766.446008][ T6962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 766.454147][ T6962] usb 6-1: can't read configurations, error -61 [ 766.589542][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.597939][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.606199][ T9011] bridge_slave_1: entered allmulticast mode [ 766.616867][ T9011] bridge_slave_1: entered promiscuous mode [ 766.628500][ T6962] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 766.826361][ T6962] usb 6-1: Using ep0 maxpacket: 16 [ 766.916626][ T6962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 766.924883][ T6962] usb 6-1: can't read configurations, error -61 [ 766.972765][ T6962] usb usb6-port1: attempt power cycle [ 767.151952][ T1335] bridge_slave_1: left allmulticast mode [ 767.158622][ T1335] bridge_slave_1: left promiscuous mode [ 767.165347][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.229704][ T1335] bridge_slave_0: left allmulticast mode [ 767.235868][ T1335] bridge_slave_0: left promiscuous mode [ 767.242589][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.528330][ T6962] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 767.595839][ T6962] usb 6-1: Using ep0 maxpacket: 16 [ 767.653911][ T6962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 767.663059][ T6962] usb 6-1: can't read configurations, error -61 [ 767.696103][ T5814] Bluetooth: hci2: command tx timeout [ 767.873932][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.904646][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.963908][ T1335] bond0 (unregistering): Released all slaves [ 767.987695][ T6962] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 768.020511][ T6962] usb 6-1: Using ep0 maxpacket: 16 [ 768.038634][ T6962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 768.046955][ T6962] usb 6-1: can't read configurations, error -61 [ 768.080925][ T5814] Bluetooth: hci4: command tx timeout [ 768.088375][ T6962] usb usb6-port1: unable to enumerate USB device [ 768.229244][ T1335] hsr_slave_0: left promiscuous mode [ 768.242846][ T1335] hsr_slave_1: left promiscuous mode [ 768.256372][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.263991][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.317693][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.329462][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.414255][ T1335] veth1_macvtap: left promiscuous mode [ 768.421538][ T1335] veth0_macvtap: left promiscuous mode [ 768.431620][ T1335] veth1_vlan: left promiscuous mode [ 768.437377][ T1335] veth0_vlan: left promiscuous mode [ 768.877092][ T7240] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 770.008298][ T7240] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 770.018942][ T7240] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.032542][ T7240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.042676][ T7240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.205502][ T7240] usbtmc 5-1:16.0: bulk endpoints not found [ 770.205805][ T5814] Bluetooth: hci4: command tx timeout [ 770.753247][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 770.843110][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 771.142264][ T9011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.292355][ T9011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.037589][ T7240] usb 5-1: USB disconnect, device number 24 [ 774.477704][ T9011] team0: Port device team_slave_0 added [ 774.536654][ T9011] team0: Port device team_slave_1 added [ 775.182318][ T1335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.269619][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.277114][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.307162][ T9011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.573471][ T1335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.781990][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.790475][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.798482][ T9031] bridge_slave_0: entered allmulticast mode [ 775.809999][ T9031] bridge_slave_0: entered promiscuous mode [ 775.825489][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.832921][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.860735][ T9011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.975240][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.983182][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.991376][ T9031] bridge_slave_1: entered allmulticast mode [ 776.639214][ T9031] bridge_slave_1: entered promiscuous mode [ 776.689510][ T1335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.651046][ T1335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.861140][ T9031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.977563][ T5897] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 777.992336][ T9031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.277542][ T5897] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 778.288251][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.298449][ T5897] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 778.311878][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 778.321325][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.353239][ T9031] team0: Port device team_slave_0 added [ 778.414692][ T5897] usbtmc 5-1:16.0: bulk endpoints not found [ 778.423579][ T9011] hsr_slave_0: entered promiscuous mode [ 778.434492][ T9011] hsr_slave_1: entered promiscuous mode [ 778.443863][ T9011] debugfs: 'hsr0' already exists in 'hsr' [ 778.450078][ T9011] Cannot create hsr debugfs directory [ 778.643678][ T9031] team0: Port device team_slave_1 added [ 779.324054][ T1335] bridge_slave_1: left allmulticast mode [ 779.331935][ T1335] bridge_slave_1: left promiscuous mode [ 779.339285][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.424805][ T1335] bridge_slave_0: left allmulticast mode [ 779.431043][ T1335] bridge_slave_0: left promiscuous mode [ 779.438370][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.301142][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.390481][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.448837][ T1335] bond0 (unregistering): Released all slaves [ 781.100431][ T7240] usb 5-1: USB disconnect, device number 25 [ 781.189983][ T1335] hsr_slave_0: left promiscuous mode [ 781.277457][ T1335] hsr_slave_1: left promiscuous mode [ 781.287929][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.295645][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.324555][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.335960][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.571253][ T1335] veth1_macvtap: left promiscuous mode [ 781.577333][ T1335] veth0_macvtap: left promiscuous mode [ 781.583281][ T1335] veth1_vlan: left promiscuous mode [ 781.589111][ T1335] veth0_vlan: left promiscuous mode [ 782.681717][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.258522][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 783.354535][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 783.801075][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.808748][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.835632][ T9031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.179120][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.186706][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.216706][ T9031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.319689][ T9031] hsr_slave_0: entered promiscuous mode [ 785.332473][ T9031] hsr_slave_1: entered promiscuous mode [ 785.341822][ T9031] debugfs: 'hsr0' already exists in 'hsr' [ 785.348260][ T9031] Cannot create hsr debugfs directory [ 785.550853][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.709'. [ 787.260990][ T9011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 787.457292][ T9011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 787.635137][ T9011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 787.754975][ T9011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 788.903013][ T9031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 789.082254][ T9031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 789.241220][ T9031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 789.341804][ T9031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 789.858710][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.296596][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.408841][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.416538][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.553012][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 791.031460][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.039486][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.971285][ T9031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.309069][ T9031] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.522215][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.529917][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.672501][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.680204][ T4027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.459664][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 795.697923][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.607074][ T9031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.441654][ T9031] veth0_vlan: entered promiscuous mode [ 800.653229][ T9031] veth1_vlan: entered promiscuous mode [ 801.114649][ T9031] veth0_macvtap: entered promiscuous mode [ 801.263073][ T9031] veth1_macvtap: entered promiscuous mode [ 801.498162][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.668565][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.816095][ T4382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.831840][ T3951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.928255][ T4382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.008958][ T4382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.571096][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.743'. [ 802.870249][ T9011] veth0_vlan: entered promiscuous mode [ 803.379867][ T9011] veth1_vlan: entered promiscuous mode [ 804.286118][ T9011] veth0_macvtap: entered promiscuous mode [ 804.571792][ T9011] veth1_macvtap: entered promiscuous mode [ 805.338505][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.482970][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.637817][ T7143] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.703625][ T7143] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.750887][ T7143] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.835452][ T7143] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.868353][ T9376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 807.879939][ T9376] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 810.689136][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 815.438657][ T5109] Bluetooth: hci3: command 0x0406 tx timeout [ 817.323619][ T3951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.333057][ T3951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.489638][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.765'. [ 818.723566][ T4027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.732248][ T4027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.090927][ T5109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 821.104256][ T5109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 821.115794][ T5109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 821.159871][ T5109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 821.211578][ T5109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 821.420839][ T9474] binder: BINDER_SET_CONTEXT_MGR already set [ 821.427481][ T9474] binder: 9471:9474 ioctl 4018620d 2000000002c0 returned -16 [ 823.288574][ T5109] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 823.294158][ T5816] Bluetooth: hci5: command tx timeout [ 823.304140][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 823.318239][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 823.337601][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 823.350487][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 823.841439][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 823.847889][ T9497] binder: 9496:9497 ioctl 4018620d 2000000002c0 returned -16 [ 823.858590][ T9497] binder: 9496:9497 ioctl c0306201 200000000240 returned -11 [ 825.388148][ T5816] Bluetooth: hci5: command tx timeout [ 825.516491][ T5816] Bluetooth: hci6: command tx timeout [ 826.179033][ T9469] chnl_net:caif_netlink_parms(): no params data found [ 827.437627][ T5816] Bluetooth: hci5: command tx timeout [ 827.596939][ T5816] Bluetooth: hci6: command tx timeout [ 827.751428][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 828.313379][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 829.516290][ T5816] Bluetooth: hci5: command tx timeout [ 829.675880][ T5816] Bluetooth: hci6: command tx timeout [ 831.416544][ T3727] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.756771][ T5816] Bluetooth: hci6: command tx timeout [ 832.351537][ T3727] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.906978][ T3727] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.766372][ T3727] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.837652][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.846707][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.854610][ T9469] bridge_slave_0: entered allmulticast mode [ 834.864568][ T9469] bridge_slave_0: entered promiscuous mode [ 835.236706][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.244498][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.252700][ T9469] bridge_slave_1: entered allmulticast mode [ 835.263087][ T9469] bridge_slave_1: entered promiscuous mode [ 835.319377][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.327242][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.335184][ T9490] bridge_slave_0: entered allmulticast mode [ 835.345468][ T9490] bridge_slave_0: entered promiscuous mode [ 836.282457][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.290324][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.298472][ T9490] bridge_slave_1: entered allmulticast mode [ 836.308637][ T9490] bridge_slave_1: entered promiscuous mode [ 836.807540][ T9469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.113310][ T9469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.256767][ T3727] bridge_slave_1: left allmulticast mode [ 837.262664][ T3727] bridge_slave_1: left promiscuous mode [ 837.270541][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.414475][ T3727] bridge_slave_0: left allmulticast mode [ 837.420787][ T3727] bridge_slave_0: left promiscuous mode [ 837.427819][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.106612][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 840.065146][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.398393][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.514917][ T3727] bond0 (unregistering): Released all slaves [ 842.072373][ T9587] netlink: 144 bytes leftover after parsing attributes in process `syz.6.791'. [ 842.326172][ T3727] hsr_slave_0: left promiscuous mode [ 842.365314][ T3727] hsr_slave_1: left promiscuous mode [ 842.373864][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.382455][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.489528][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.497457][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.508748][ T9583] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 842.682562][ T3727] veth1_macvtap: left promiscuous mode [ 842.690463][ T3727] veth0_macvtap: left promiscuous mode [ 842.696904][ T3727] veth1_vlan: left promiscuous mode [ 842.702495][ T3727] veth0_vlan: left promiscuous mode [ 842.710600][ T9583] usb 7-1: device descriptor read/64, error -71 [ 842.966465][ T9583] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 843.156109][ T9583] usb 7-1: device descriptor read/64, error -71 [ 843.287865][ T9583] usb usb7-port1: attempt power cycle [ 843.681431][ T9583] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 843.714833][ T9583] usb 7-1: device descriptor read/8, error -71 [ 843.968241][ T9583] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 844.039532][ T9583] usb 7-1: device descriptor read/8, error -71 [ 844.163610][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.240016][ T9583] usb usb7-port1: unable to enumerate USB device [ 844.265382][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 844.361518][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 844.769237][ T9469] team0: Port device team_slave_0 added [ 844.790478][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.918970][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.960930][ T9469] team0: Port device team_slave_1 added [ 845.671577][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.679561][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.706186][ T9469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.750803][ T9490] team0: Port device team_slave_0 added [ 845.803725][ T9490] team0: Port device team_slave_1 added [ 846.132610][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.140242][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.168942][ T9469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.566929][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.574094][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.600644][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.081068][ T3727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.775244][ T3727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.003406][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.010752][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.037260][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.307890][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.800'. [ 848.827990][ T3727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.002858][ T9469] hsr_slave_0: entered promiscuous mode [ 849.139456][ T9469] hsr_slave_1: entered promiscuous mode [ 849.147855][ T9469] debugfs: 'hsr0' already exists in 'hsr' [ 849.153721][ T9469] Cannot create hsr debugfs directory [ 849.284628][ T3727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.221163][ T9490] hsr_slave_0: entered promiscuous mode [ 850.231631][ T9490] hsr_slave_1: entered promiscuous mode [ 850.239426][ T9490] debugfs: 'hsr0' already exists in 'hsr' [ 850.248926][ T9490] Cannot create hsr debugfs directory [ 851.118973][ T3727] bridge_slave_1: left allmulticast mode [ 851.124879][ T3727] bridge_slave_1: left promiscuous mode [ 851.135436][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.284816][ T3727] bridge_slave_0: left allmulticast mode [ 851.291063][ T3727] bridge_slave_0: left promiscuous mode [ 851.298063][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.887439][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.136353][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.287288][ T3727] bond0 (unregistering): Released all slaves [ 854.287934][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 856.569852][ T9657] syzkaller1: entered promiscuous mode [ 856.575872][ T9657] syzkaller1: entered allmulticast mode [ 857.691393][ T3727] hsr_slave_0: left promiscuous mode [ 857.735283][ T3727] hsr_slave_1: left promiscuous mode [ 857.743672][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.751916][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.891520][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.900788][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.026342][ T3727] veth1_macvtap: left promiscuous mode [ 858.035419][ T3727] veth0_macvtap: left promiscuous mode [ 858.041654][ T3727] veth1_vlan: left promiscuous mode [ 858.047275][ T3727] veth0_vlan: left promiscuous mode [ 861.690180][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 861.898125][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 862.005341][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 864.207283][ T9469] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 864.320037][ T9469] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 864.399245][ T9469] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 864.619122][ T9469] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 865.799619][ T9490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 866.132920][ T9490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 866.259738][ T9490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 866.361134][ T9490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 867.128079][ T9760] loop4: detected capacity change from 0 to 512 [ 867.246505][ T9760] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 868.592184][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.881427][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.836'. [ 869.104388][ T9469] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.622720][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.368444][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.376879][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.916875][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.924501][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.026643][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.254258][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.261894][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.497432][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.505082][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.633062][ T9469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.721409][ T9469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.290119][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.972018][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.847'. [ 876.412438][ T9490] veth0_vlan: entered promiscuous mode [ 876.646151][ T9490] veth1_vlan: entered promiscuous mode [ 877.670735][ T9490] veth0_macvtap: entered promiscuous mode [ 877.749006][ T9490] veth1_macvtap: entered promiscuous mode [ 877.921494][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.077351][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.235004][ T9287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.351357][ T9286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.390295][ T1009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.453867][ T1009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.477796][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 880.494072][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 880.505410][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 880.527499][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 880.540042][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.742353][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.857'. [ 882.643987][ T5814] Bluetooth: hci2: command tx timeout [ 883.113290][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 883.903336][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 883.927426][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.952390][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.974582][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.992265][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 884.717967][ T5816] Bluetooth: hci2: command tx timeout [ 885.636739][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.644312][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.654753][ T9870] bridge_slave_0: entered allmulticast mode [ 885.669719][ T9870] bridge_slave_0: entered promiscuous mode [ 885.829656][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.838366][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.848910][ T9870] bridge_slave_1: entered allmulticast mode [ 885.861176][ T9870] bridge_slave_1: entered promiscuous mode [ 886.076106][ T5816] Bluetooth: hci4: command tx timeout [ 886.797475][ T5816] Bluetooth: hci2: command tx timeout [ 886.999004][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.246741][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.869'. [ 887.319594][ T3727] bridge_slave_1: left allmulticast mode [ 887.327478][ T3727] bridge_slave_1: left promiscuous mode [ 887.335306][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.383317][ T3727] bridge_slave_0: left allmulticast mode [ 887.389560][ T3727] bridge_slave_0: left promiscuous mode [ 887.398003][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.156822][ T5816] Bluetooth: hci4: command tx timeout [ 888.356066][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.406243][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.432409][ T3727] bond0 (unregistering): Released all slaves [ 888.468186][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.877751][ T5816] Bluetooth: hci2: command tx timeout [ 888.973199][ T3727] hsr_slave_0: left promiscuous mode [ 889.014392][ T3727] hsr_slave_1: left promiscuous mode [ 889.022845][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.078453][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.298193][ T5816] Bluetooth: hci4: command tx timeout [ 890.342363][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 890.384236][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 891.129123][ T9870] team0: Port device team_slave_0 added [ 891.243557][ T9903] chnl_net:caif_netlink_parms(): no params data found [ 891.272547][ T9870] team0: Port device team_slave_1 added [ 891.799489][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.807867][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.837215][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.092116][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.099543][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.129864][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.322139][ T5816] Bluetooth: hci4: command tx timeout [ 892.509249][ T3727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.690780][ T3727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.990795][ T3727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.382745][ T3727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.508970][ T9870] hsr_slave_0: entered promiscuous mode [ 893.519622][ T9870] hsr_slave_1: entered promiscuous mode [ 893.670893][ T9870] debugfs: 'hsr0' already exists in 'hsr' [ 893.676994][ T9870] Cannot create hsr debugfs directory [ 894.805674][ T9903] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.813248][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.821141][ T9903] bridge_slave_0: entered allmulticast mode [ 894.881829][ T9903] bridge_slave_0: entered promiscuous mode [ 894.935305][ T3727] bridge_slave_1: left allmulticast mode [ 894.941410][ T3727] bridge_slave_1: left promiscuous mode [ 894.950427][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.008166][ T3727] bridge_slave_0: left allmulticast mode [ 895.014089][ T3727] bridge_slave_0: left promiscuous mode [ 895.021353][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.213056][T10033] binder: 10031:10033 ioctl 4018620d 0 returned -22 [ 896.011902][ T9583] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 896.370748][ T3727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.401527][ T9583] usb 6-1: Using ep0 maxpacket: 8 [ 896.424591][ T9583] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 896.434421][ T9583] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.444941][ T9583] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.455152][ T9583] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.465318][ T9583] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.478726][ T9583] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.488577][ T9583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.597009][ T3727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.623563][ T3727] bond0 (unregistering): Released all slaves [ 896.774576][ T9903] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.782951][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.790967][ T9903] bridge_slave_1: entered allmulticast mode [ 896.802151][ T9903] bridge_slave_1: entered promiscuous mode [ 896.988410][ T9583] usb 6-1: GET_CAPABILITIES returned 0 [ 896.994443][ T9583] usbtmc 6-1:16.0: can't read capabilities [ 897.048639][ T3727] hsr_slave_0: left promiscuous mode [ 897.107432][ T3727] hsr_slave_1: left promiscuous mode [ 897.115749][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.123335][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.218763][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.226520][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.231990][ T9583] usb 6-1: USB disconnect, device number 16 [ 897.346395][ T3727] veth1_macvtap: left promiscuous mode [ 897.355339][ T3727] veth0_macvtap: left promiscuous mode [ 897.361526][ T3727] veth1_vlan: left promiscuous mode [ 897.367169][ T3727] veth0_vlan: left promiscuous mode [ 898.001259][T10061] loop6: detected capacity change from 0 to 16 [ 898.107423][T10061] erofs (device loop6): mounted with root inode @ nid 36. [ 898.207390][T10061] erofs (device loop6): read error -117 @ 8200 of nid 36 [ 898.290839][T10064] loop5: detected capacity change from 0 to 512 [ 898.324374][T10064] EXT4-fs: Ignoring removed mblk_io_submit option [ 898.356939][T10064] EXT4-fs (loop5): Test dummy encryption mode enabled [ 898.364055][T10064] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 898.380598][T10064] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 898.512916][T10064] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 899.028786][T10064] Bluetooth: MGMT ver 1.23 [ 899.746075][T10072] erofs (device loop6): read error -117 @ 8200 of nid 36 [ 900.776612][T10071] syz.6.898 (10071): drop_caches: 2 [ 902.441709][ T3727] team0 (unregistering): Port device team_slave_1 removed [ 902.549137][ T3727] team0 (unregistering): Port device team_slave_0 removed [ 903.480949][ T9903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.585042][ T9903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.032339][ T9903] team0: Port device team_slave_0 added [ 904.157238][ T9903] team0: Port device team_slave_1 added [ 904.844372][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.851714][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.878876][ T9903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.951270][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.958724][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.985353][ T9903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.046912][ T9870] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 905.135203][ T9870] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 905.237495][ T9870] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 905.240521][T10110] loop5: detected capacity change from 0 to 16 [ 905.306262][T10110] erofs (device loop5): mounted with root inode @ nid 36. [ 905.327059][ T9870] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 905.387812][T10110] erofs (device loop5): read error -117 @ 8200 of nid 36 [ 905.652404][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.118291][ T9903] hsr_slave_0: entered promiscuous mode [ 906.128489][ T9903] hsr_slave_1: entered promiscuous mode [ 906.137239][ T9903] debugfs: 'hsr0' already exists in 'hsr' [ 906.143127][ T9903] Cannot create hsr debugfs directory [ 907.155728][T10120] syz.5.910 (10120): drop_caches: 2 [ 909.728813][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.072285][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.234474][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.242222][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.472241][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.479877][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.942643][ T9903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 911.098129][ T9903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 911.197898][ T9903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 911.282024][ T9903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 912.861508][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.059170][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.233986][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.263026][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.270601][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.371777][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.379581][ T9287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.701646][ T9903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.254038][ T9903] veth0_vlan: entered promiscuous mode [ 920.363744][ T9903] veth1_vlan: entered promiscuous mode [ 920.549099][ T9870] veth0_vlan: entered promiscuous mode [ 920.607286][T10231] binder: 10230:10231 ioctl c0306201 0 returned -14 [ 920.738090][ T9870] veth1_vlan: entered promiscuous mode [ 920.793825][ T9903] veth0_macvtap: entered promiscuous mode [ 920.930093][ T9903] veth1_macvtap: entered promiscuous mode [ 921.197992][ T9870] veth0_macvtap: entered promiscuous mode [ 921.261370][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.317144][ T9870] veth1_macvtap: entered promiscuous mode [ 921.449192][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.594555][ T4027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.651250][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.670478][ T3508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.727715][ T3508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.767714][ T7143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.783225][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.210861][ T3951] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.378514][ T1009] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.553708][ T3951] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.893413][ T3951] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.989303][T10284] binder: 10281:10284 ioctl c0306201 0 returned -14 [ 930.209620][T10320] loop6: detected capacity change from 0 to 1024 [ 930.246855][T10323] loop5: detected capacity change from 0 to 256 [ 936.120842][T10344] binder: 10343:10344 ioctl c0306201 0 returned -14 [ 938.146245][ T3461] hfsplus: b-tree write err: -5, ino 4 [ 939.268246][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.276761][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.367622][T10367] loop4: detected capacity change from 0 to 4096 [ 939.534406][ T3951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.546024][ T3951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.184680][T10381] binder: 10380:10381 ioctl c0306201 0 returned -14 [ 940.269085][T10381] binder: 10380:10381 ioctl c0306201 200000000040 returned -22 [ 941.472676][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 941.482941][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 941.518234][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 941.532234][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 941.547561][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.293442][T10420] binder: 10419:10420 ioctl c0306201 0 returned -14 [ 943.371733][T10425] binder: 10419:10425 ioctl c0306201 200000000040 returned -22 [ 943.596334][ T5814] Bluetooth: hci5: command tx timeout [ 943.864679][T10396] chnl_net:caif_netlink_parms(): no params data found [ 944.590866][ T7143] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.976776][ T7143] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.472341][ T7143] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.680615][ T5814] Bluetooth: hci5: command tx timeout [ 945.736408][T10453] binder: BINDER_SET_CONTEXT_MGR already set [ 945.742734][T10453] binder: 10452:10453 ioctl 4018620d 2000000002c0 returned -16 [ 945.758273][ T7143] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.872465][T10453] binder: 10452:10453 ioctl c0306201 200000000240 returned -11 [ 946.769173][ T7143] bridge_slave_1: left allmulticast mode [ 946.775037][ T7143] bridge_slave_1: left promiscuous mode [ 946.781951][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.877849][ T7143] bridge_slave_0: left allmulticast mode [ 946.883800][ T7143] bridge_slave_0: left promiscuous mode [ 946.890692][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.078422][T10469] binder: 10468:10469 ioctl c0306201 0 returned -14 [ 947.130754][T10469] binder: 10468:10469 ioctl c0306201 200000000040 returned -22 [ 947.662920][T10474] loop4: detected capacity change from 0 to 1024 [ 947.760233][ T5814] Bluetooth: hci5: command tx timeout [ 948.351325][T10474] ===================================================== [ 948.358826][T10474] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x7cb/0x990 [ 948.367306][T10474] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 948.373244][T10474] hfsplus_file_truncate+0x7a3/0xfc0 [ 948.379056][T10474] hfsplus_file_release+0x146/0x760 [ 948.384434][T10474] __fput+0x60b/0x1040 [ 948.388775][T10474] ____fput+0x25/0x30 [ 948.392897][T10474] task_work_run+0x209/0x2b0 [ 948.400251][T10474] get_signal+0x139/0x2a20 [ 948.408793][T10474] arch_do_signal_or_restart+0x53/0xbf0 [ 948.414594][T10474] exit_to_user_mode_loop+0xec/0x330 [ 948.420264][T10474] do_syscall_64+0x1e3/0x210 [ 948.425090][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.431368][T10474] [ 948.433754][T10474] Uninit was created at: [ 948.438705][T10474] __kmalloc_noprof+0x95f/0x1310 [ 948.443760][T10474] hfsplus_find_init+0x90/0x1d0 [ 948.451987][T10474] hfsplus_file_truncate+0x513/0xfc0 [ 948.459403][T10474] hfsplus_file_release+0x146/0x760 [ 948.464725][T10474] __fput+0x60b/0x1040 [ 948.469370][T10474] ____fput+0x25/0x30 [ 948.473449][T10474] task_work_run+0x209/0x2b0 [ 948.478267][T10474] get_signal+0x139/0x2a20 [ 948.482760][T10474] arch_do_signal_or_restart+0x53/0xbf0 [ 948.488492][T10474] exit_to_user_mode_loop+0xec/0x330 [ 948.493879][T10474] do_syscall_64+0x1e3/0x210 [ 948.498939][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.504936][T10474] [ 948.507414][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.4.998 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 948.520805][T10474] Tainted: [W]=WARN [ 948.524652][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.534955][T10474] ===================================================== [ 948.542021][T10474] Disabling lock debugging due to kernel taint [ 948.548311][T10474] Kernel panic - not syncing: kmsan.panic set ... [ 948.554825][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.4.998 Tainted: G B W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 948.568143][T10474] Tainted: [B]=BAD_PAGE, [W]=WARN [ 948.573228][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.583363][T10474] Call Trace: [ 948.586711][T10474] [ 948.589701][T10474] __dump_stack+0x26/0x30 [ 948.594162][T10474] dump_stack_lvl+0x53/0x270 [ 948.598925][T10474] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 948.604863][T10474] dump_stack+0x1e/0x25 [ 948.609130][T10474] vpanic+0x361/0xbc0 [ 948.613258][T10474] panic+0x15d/0x160 [ 948.617316][T10474] kmsan_report+0x31c/0x320 [ 948.621935][T10474] ? __msan_warning+0x1b/0x30 [ 948.626706][T10474] ? __hfsplus_ext_cache_extent+0x7cb/0x990 [ 948.632724][T10474] ? hfsplus_file_truncate+0x7a3/0xfc0 [ 948.638288][T10474] ? hfsplus_file_release+0x146/0x760 [ 948.643763][T10474] ? __fput+0x60b/0x1040 [ 948.648087][T10474] ? ____fput+0x25/0x30 [ 948.652346][T10474] ? task_work_run+0x209/0x2b0 [ 948.657271][T10474] ? get_signal+0x139/0x2a20 [ 948.661934][T10474] ? arch_do_signal_or_restart+0x53/0xbf0 [ 948.667789][T10474] ? exit_to_user_mode_loop+0xec/0x330 [ 948.673368][T10474] ? do_syscall_64+0x1e3/0x210 [ 948.678276][T10474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.684441][T10474] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 948.690362][T10474] ? stack_depot_save_flags+0x60f/0x7b0 [ 948.696013][T10474] ? kmsan_get_metadata+0xfb/0x160 [ 948.701228][T10474] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 948.707705][T10474] ? kmsan_get_metadata+0xfb/0x160 [ 948.712937][T10474] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 948.718933][T10474] ? hfsplus_brec_find+0x216/0x9f0 [ 948.724212][T10474] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 948.730016][T10474] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 948.735964][T10474] ? kmsan_get_metadata+0xfb/0x160 [ 948.741204][T10474] ? kmsan_get_metadata+0xfb/0x160 [ 948.746461][T10474] __msan_warning+0x1b/0x30 [ 948.751090][T10474] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 948.756972][T10474] hfsplus_file_truncate+0x7a3/0xfc0 [ 948.762410][T10474] ? ima_file_free+0x436/0x730 [ 948.767307][T10474] ? kmsan_get_metadata+0xfb/0x160 [ 948.772559][T10474] hfsplus_file_release+0x146/0x760 [ 948.777911][T10474] ? __pfx_hfsplus_file_release+0x10/0x10 [ 948.783745][T10474] ? __pfx_hfsplus_file_release+0x10/0x10 [ 948.789568][T10474] __fput+0x60b/0x1040 [ 948.793752][T10474] ? __pfx_____fput+0x10/0x10 [ 948.798532][T10474] ____fput+0x25/0x30 [ 948.802611][T10474] task_work_run+0x209/0x2b0 [ 948.807317][T10474] get_signal+0x139/0x2a20 [ 948.811834][T10474] ? filter_irq_stacks+0x49/0x190 [ 948.817028][T10474] ? stack_depot_save_flags+0x35/0x7b0 [ 948.822840][T10474] ? kmsan_get_metadata+0xfb/0x160 [ 948.828045][T10474] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 948.834525][T10474] ? arch_do_signal_or_restart+0x43/0xbf0 [ 948.840424][T10474] ? exit_to_user_mode_loop+0xec/0x330 [ 948.846013][T10474] arch_do_signal_or_restart+0x53/0xbf0 [ 948.851688][T10474] ? fput+0x151/0x160 [ 948.855757][T10474] ? __x64_sys_write+0x3f1/0x4d0 [ 948.860837][T10474] exit_to_user_mode_loop+0xec/0x330 [ 948.866261][T10474] do_syscall_64+0x1e3/0x210 [ 948.871015][T10474] ? irqentry_exit+0x16/0x60 [ 948.876177][T10474] ? clear_bhb_loop+0x40/0x90 [ 948.880974][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.887056][T10474] RIP: 0033:0x7f7ae538eb69 [ 948.891560][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.911322][T10474] RSP: 002b:00007f7ae31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.919861][T10474] RAX: 000000000000fea7 RBX: 00007f7ae55b5fa0 RCX: 00007f7ae538eb69 [ 948.927919][T10474] RDX: 000000000000fea7 RSI: 0000200000000180 RDI: 0000000000000007 [ 948.935968][T10474] RBP: 00007f7ae5411df1 R08: 0000000000000000 R09: 0000000000000000 [ 948.944008][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.952052][T10474] R13: 0000000000000000 R14: 00007f7ae55b5fa0 R15: 00007ffc3204d348 [ 948.960123][T10474] [ 948.963636][T10474] Kernel Offset: disabled [ 948.968023][T10474] Rebooting in 86400 seconds..