last executing test programs: 12m12.127721912s ago: executing program 0 (id=542): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0xc0002009}) epoll_pwait(r3, 0x0, 0x0, 0x4000a, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 12m11.185544431s ago: executing program 0 (id=543): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x88}}, 0x0) write(r0, &(0x7f0000000000)="05000000010001", 0x7) socket(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x8000000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 12m10.200945512s ago: executing program 0 (id=550): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x10011, r5, 0x78e17000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r7, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x50, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4008014) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d41400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m6.102726178s ago: executing program 0 (id=561): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000740)={0x4, 0x0, 0xffff, 0x5, 0x7, "0bc026d262ca0eec"}) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x6}}, 0x20) r3 = epoll_create1(0x80000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r5) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0), 0x0, 0x40000042, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r7 = dup2(r4, r3) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f00000000c0)={0x7, "56ef0807141e59fa6ea73ed1fa847c1ec008964be9a8518f3ff07536e25c4587", 0x3}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, 0x0, 0x0) 12m4.086089121s ago: executing program 0 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x3, 0x80000, 0xfffffffc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0xfc, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xa00, 0x99f7, 0x9}}}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xa32e, 0xfffffffc, 0x8, 0x10001}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7c, '\x00', 0xd2d5, 0x66, 0x7, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x9c71, 0x2, 0x8, 0x1ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x60, '\x00', 0x9, 0x2, 0xffffffff, 0x8000}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf9, '\x00', 0x3, 0x81, 0x1ff, 0x6}}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x0, 0x7}}}}]}, 0xfc}}, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x4, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x4, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r6, @ANYBLOB="33c5386175a8f467e49f71fcb19c3af198df245ba3dbe4efa854e47f81c8b11a4f689b059bf36542dbb068cd907c9e3d24377b88891699fde9f5cbb77818365be896d81b8b19171d22ba59cb0c18732828bb4d316288"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 11m48.773661645s ago: executing program 32 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x3, 0x80000, 0xfffffffc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0xfc, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xa00, 0x99f7, 0x9}}}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xa32e, 0xfffffffc, 0x8, 0x10001}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7c, '\x00', 0xd2d5, 0x66, 0x7, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x9c71, 0x2, 0x8, 0x1ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x60, '\x00', 0x9, 0x2, 0xffffffff, 0x8000}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf9, '\x00', 0x3, 0x81, 0x1ff, 0x6}}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x0, 0x7}}}}]}, 0xfc}}, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x4, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x4, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r6, @ANYBLOB="33c5386175a8f467e49f71fcb19c3af198df245ba3dbe4efa854e47f81c8b11a4f689b059bf36542dbb068cd907c9e3d24377b88891699fde9f5cbb77818365be896d81b8b19171d22ba59cb0c18732828bb4d316288"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 10m17.158430619s ago: executing program 4 (id=746): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x1) 10m13.873176677s ago: executing program 4 (id=753): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902600003010048f30904000000010100000a240106000a0002010209040100000102000009040101010102000009050109080000037f0725010c0002000904020101010200000905"], 0x0) 10m9.789776114s ago: executing program 4 (id=760): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000005ac0)={0x200, 0x7, {}, {0xee00}, 0x2, 0x7}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005b00)={{{@in=@loopback, @in=@remote}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000008ec0)=0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) io_setup(0x3, &(0x7f00000004c0)=0x0) io_getevents(r4, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) 10m6.319845167s ago: executing program 4 (id=765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000680)="e87402720892e3e63fa8764354bcad90c979a9ab77c8f186ab2b81b31f8db7f085681ab1877ec2ef0e1c1e9c32cb2fbd7cd54d5a6da3bae27a974221ffb954aca969a698949e69d64348295ea97eccaa5e83fdd4bbb1bedc594d097f8fb018c9", 0x60}, {&(0x7f0000000700)="ef3977c0585e6989e498deca6dcbb1d05921c2f84a60a92927972b5576ede8646cfe1cc61e0ebc934e9bb2ab3acf5685269f0cbffc535d4af2c41e", 0x3b}, {&(0x7f0000000840)="939a80baf886fe19d0eaef59a774373ca1deafd713507864ecee17abe72c65139c7e16f5b112d04ed2bcd3f59a294d30c5ddedd0b7d224080235d8c6bfcb542a16bf1e99c94fd5c1b82f900bb4ecf894cb4d394b699629f952af6b1ef8c732f867dcb1163eae21fe2c5ecf80ed94ef16922ef44c25f1b2345f44c18be584b04770dac660eceae3cae2846918d1861e5afe15f2988c86c237633c30fa8188f340b4b32e6233cf407f2012670ef7d7cfad22de4ed75254098203a3488bdfda9a4978b071910b3a1f7d99727b5d61461d", 0xcf}, {&(0x7f0000000940)="bc105c126c31b265cd12f8d289f6f76f80b5a475b2445c6dd0dbbc04a6413a971a29294a9c84f67289f996705d726b8b31df9e52e14547b373dedb96f3def9d21a5402a7d499c1ac85ca206e90334e8be50184f110e0fbbf3e725f89daf3fdf657a280cc066340defc43b2defa15176217d3fdcf0a538b4ee22c1e2d5da94a5b59fab8457595580c21800ad07babc91e8bb650527b6fb39a7e91a39da6aedf20205df61de92964110f9da25f", 0xac}, {&(0x7f0000000a00)="c15201ce48174582a6e74500940b786edd674ba0efddd23bf0c57244c50a2b3b748a2142813808288e2ef136d6c94558bf43af94e6e1bb3993b1f946f8053970a413f224283a8392e5", 0x49}, {&(0x7f0000000a80)="91081551cc85c81e1d7605d6b7e9a2ad97e1e96558810a6bc9b527132dfd1033f78bdea2a0d8264d39131c1b9fb6fa3a668273eb991b17fee4fb5b604fc093782620753c7a366ccfd8c9a29e", 0x4c}, {&(0x7f0000002240)="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", 0xbc8}], 0x7, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x10000) 10m4.634474439s ago: executing program 4 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 10m2.385407966s ago: executing program 4 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) getpriority(0x2, 0x0) 9m45.431164421s ago: executing program 33 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) getpriority(0x2, 0x0) 5m18.569796488s ago: executing program 1 (id=1311): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x5, [0x4, 0x7], 0xfffe}, 0x10) 5m15.96606107s ago: executing program 1 (id=1314): socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair(0x2a, 0x2, 0x1, 0x0) 5m13.158935436s ago: executing program 1 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r5, 0x0, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0x0, 0x20000800) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) 5m11.017402568s ago: executing program 1 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}]}, 0x48}}, 0x0) 5m10.115177621s ago: executing program 1 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r6 = fsopen(&(0x7f0000000700)='bpf\x00', 0x1) r7 = fcntl$dupfd(r6, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000480)='mode\x00E5\xf6\xc5\xce\xce\xf7\xcd\x94;\xa4\xcb\xc1\a\xccx\xdc\x00\xb6', &(0x7f0000000140)='7', 0x0) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x34, 0xfffc, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) socket(0x9, 0x6, 0x26) 5m8.521959224s ago: executing program 1 (id=1328): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000005ac0)={0x200, 0x7, {}, {0xee00}, 0x2, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) io_setup(0x3, &(0x7f00000004c0)=0x0) io_getevents(r3, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) 4m52.751245799s ago: executing program 34 (id=1328): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000005ac0)={0x200, 0x7, {}, {0xee00}, 0x2, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) io_setup(0x3, &(0x7f00000004c0)=0x0) io_getevents(r3, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) 4m41.50142195s ago: executing program 5 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r5, 0x0, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0x0, 0x20000800) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) 4m33.970913252s ago: executing program 5 (id=1365): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}, {&(0x7f00000000c0)="ce2e45c58bc7ffff653d7dc5afd2e8d6fd54c74f5e1b91030cc53143dace1a6e00dd946d2ae80fdc78dfdc672173ad170f52723232d115b5e33424d7bb", 0x3d}, {&(0x7f0000000140)="bf890b79561f4208a72f3f3200f96b5ff7f24c29ff94c12b233967dc261856acbcf9547be56eeae514efb341f114f35520ebf4814a5435ca235c3222dd918c970d114e714d9e22784a5ae8ae49e090be8467b3053d2dc6b5ae7670a84219473810ecd0fdd146d4dadcc4e4131185b656efa09114d45759c54b47cb035a6648bddd9c0e554a60", 0x86}, {&(0x7f00000002c0)="3f4e055fb5ec639c926fc16442efa605c3f8f1182fd18a3184962184d6ffe850dc295e1e6c86e91f1da935ccea8d6b4dc0a91a944ac7fe774fa6b1f8998bc261118ab514315e12d3494a6e645d979ba963c2441022237862352789bbf00fe791c0bc6224209a9e80373ef62be6d8125c55749118", 0x74}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="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", 0x1e6}], 0x1}}], 0x2, 0x6810) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto(r0, &(0x7f0000000700)="517edd0bffeea9f5f38d068432762ce77ffbb708356eb8de23b82d5bf632952367aa3eda45dd44ada926b1bbae42aeb8390a56912e200996f7d81b6a19bc3321911f8499725bb58d03b6fbd7fd35d1c0269f4655c0522404cd1f00ae91bb3324ca", 0x61, 0x80, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m31.14987134s ago: executing program 5 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) 4m29.07553837s ago: executing program 5 (id=1372): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x30, 0x25, 0x2, 0x7102}, {0x6, 0xe, 0x0, 0xa3a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}}], 0x1, 0x0) 4m26.665437607s ago: executing program 5 (id=1376): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080), &(0x7f0000000100)=0x10) 4m21.958386747s ago: executing program 5 (id=1382): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 4m6.831953261s ago: executing program 35 (id=1382): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 2m17.215833387s ago: executing program 3 (id=1562): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = getpid() unshare(0x10200) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x4000, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) 1m54.525833417s ago: executing program 3 (id=1585): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="080000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m51.822955091s ago: executing program 2 (id=1588): socket$igmp6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m48.745597872s ago: executing program 2 (id=1592): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)="b619c3ed40c8cbe608", 0x9}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, 0x0) 1m39.470296199s ago: executing program 2 (id=1609): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) 1m37.065506613s ago: executing program 36 (id=1585): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="080000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m24.333468251s ago: executing program 37 (id=1609): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') mkdir(0x0, 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) 11.152422374s ago: executing program 8 (id=1791): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESDEC], 0x0, 0x1da, &(0x7f0000000600)="$eJzsmD+r01AYxp9zkpt7bxHBRdBFwYIV2jRJVVwc6icQWv9tFhtLNW2lzdAWHIqLix/Dr+DQycHNzVUHFQQHO4mTw5GTnCbHtkZTEYr3/UFPnvPvPXnfhKcQEARxZPn44dv7Z9euNMsAjqGIfTX+2UjXcG39uwMl3j5/1T/+eP5TMCP/+SaAl3UDoeoLIYQ+X1TXJniib4DjgtK3wGArfRccN5X2wXBH6QeaHhwqEfj2vUHQvt8NfEc2rmw82dRW728xY2gDkKmLlRxHk+nDVhD4w1WxJ5bnrE3lFb+pn7moc1zV6ief1+2nT2ayv6yNo9XPBYerdA0MjWVNsA/bttOSaPmfNtP4xp/kvwviRCVrTTl7+/etTz/1VT36bbZbqrC7UsP/UDBt5FAKBiAZObmYv17f9SnXETBz3djZf5sylGevTb0p/F3kzHc19U9pL+c1fzJhJv5RDXuPqqPJtNLttTp+x+97Xu2yc9FxLnnVyIjiNsP/DiJ/Kmjx936x1mIWxq0wHLpjIBy6Sd+LW81xGy8GX6I9PPI/jtK5OIZ8VazYKjfC1I9HV6lKW/wrEgRBEARBEARBEARBEARBbOIMWPQVVAjB1AfRTXjXo9U/AgAA///YUVl2") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 9.481952948s ago: executing program 8 (id=1794): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0500", 0xc, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1a, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) 9.19498851s ago: executing program 8 (id=1796): syz_open_dev$sg(0x0, 0x7ff, 0x4c0dc3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x2, 0x4, 0x3, 0x8000}, 0x1ff, 0x10, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x5, 0x8000, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="58d8e764d9487be91c14b3489aaf78c3e8b191ea9bb17d23cde598c4b97ebfa415164f99a216f9baa1cb04ffa0ddaaf6a8a5ca01dfbb96de2771ce5b4c59e5dc796627", 0x43}, {&(0x7f0000000280)="8a4c20fde6b17d2e137e87ab0ab3941529888fb2653b93412d7437a565d8d709c6bec15b7017c964eb7630230d24489c9d0fc7b1e48c1337d4557f670bf0157ed86cb92e08ee6a00bda8c13b17716dd24a08f043e7c6b972402c1ffa054831958a982d1a7743306e632eb214ce24305f5dd7749e537a2650e9d7ad55538194c62b968d0ce682a51de7b872e1858486c6943405c36c0d9598f51bca8ce2c09530c90a35afca36b53d3864a2d3319a63", 0xaf}, {&(0x7f0000000340)="ef3a011786849eb33d6f97d60a54a48c4cbea855b8b663a3db4d0f884a7b347f5e843d46c6d2725e5b50976d4134ccaf6816b79c84c727e807ac2289310df99cb0d71985b8409832f4a88129dfbda80c7a93c9e53ccc83eaee9228089fb0f859915b655864cf1f46e0c280dee1d38c2156e7c5c87b331e3d6847de2d29c2f0b7908745f9935506d8bb80a84254432bfaf9c47f71c85581f65ce2c6ffefe170f3de8502dcf5d9", 0xa6}], 0x3}}], 0x1, 0x4c144) 8.589188644s ago: executing program 8 (id=1799): syz_usb_connect$uac3(0x0, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040b51921004000010203010902ca0003017f0004080b0002012730230904010000010130000a24011045000900000006002005201d11240903010300000001000000020000000d240703010a0000ff010000000b240d0cbc0600000007000c240b08010900000005070009040100000102300009040101010102300009240201030d1007090d240201000405019d167d31b50b24020102010807ca7dbe0905"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 8.376290995s ago: executing program 9 (id=1800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {0x0, 0x1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) 7.954127564s ago: executing program 6 (id=1802): unshare(0x6020400) r0 = syz_clone3(&(0x7f00000003c0)={0xac020080, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0xffffffffffffffff, 0x0) 7.139789167s ago: executing program 9 (id=1803): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.61738336s ago: executing program 9 (id=1805): io_uring_setup(0x30df, &(0x7f00000000c0)={0x0, 0xaefa, 0x100, 0x3, 0xffffffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) 5.589051144s ago: executing program 9 (id=1806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x4040, 0x0, 0x0) preadv(r2, &(0x7f00000000c0), 0x0, 0xfffffff9, 0xffffffff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) timerfd_create(0x9, 0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) 5.358128054s ago: executing program 6 (id=1807): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.033968325s ago: executing program 8 (id=1808): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000040)) 2.910884414s ago: executing program 6 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.643019514s ago: executing program 7 (id=1815): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x150}}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=@v2={0x5, 0x1, 0x4, 0x7, 0x1e, "0402fa691a4bb3bae74af0f94404bb5b17848c3e7f87fd21cd859adf1a7b"}, 0x27, 0x1) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1.113782595s ago: executing program 7 (id=1816): io_uring_setup(0x30df, &(0x7f00000000c0)={0x0, 0xaefa, 0x100, 0x3, 0xffffffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) 866.352641ms ago: executing program 6 (id=1817): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 222.197577ms ago: executing program 8 (id=1818): syz_usb_connect$uac3(0x0, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040b51921004000010203010902ca0003017f0004080b0002012730230904010000010130000a24011045000900000006002005201d11240903010300000001000000020000000d240703010a0000ff010000000b240d0cbc0600000007000c240b08010900000005070009040100000102300009040101010102300009240201030d1007090d240201000405019d167d31b50b24020102010807ca7dbe0905"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 158.49504ms ago: executing program 6 (id=1819): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0xb8, 0x18, 0xa, 0xb01, 0x0, 0x0, {0x9}, [@NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8aa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x8, 0xc, "55837956"}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6f7cc431}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1f0}}, 0x40081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 21.458648ms ago: executing program 7 (id=1820): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x99}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x9, 0x0, 0xfffffffb, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x2440, 0x66) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0xc, 0x1ff]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 9 (id=1821): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040), 0x2204803, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}]}}) kernel console output (not intermixed with test programs): 3.347692][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 673.657397][T10458] hsr_slave_0: entered promiscuous mode [ 673.702399][T10458] hsr_slave_1: entered promiscuous mode [ 673.721253][T10458] debugfs: 'hsr0' already exists in 'hsr' [ 673.736281][T10458] Cannot create hsr debugfs directory [ 674.151919][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 674.785953][ T5937] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 675.007090][ T5937] usb 6-1: unable to get BOS descriptor or descriptor too short [ 675.748999][ T5937] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 675.778184][ T5937] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.806004][ T5937] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 675.840891][ T5937] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 675.967486][ T5937] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 676.039297][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.090862][ T5937] usb 6-1: Product: syz [ 676.109069][ T5937] usb 6-1: Manufacturer: syz [ 676.128715][ T5937] usb 6-1: SerialNumber: syz [ 677.712859][ T5937] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 677.722182][ T5937] usb 6-1: unit 2 not found! [ 677.727067][ T5937] usb 6-1: unit 8: unexpected type 0x0c [ 678.882969][ T5937] usb 6-1: USB disconnect, device number 29 [ 679.396497][T10699] SET target dimension over the limit! [ 679.924960][T10573] udevd[10573]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.635922][ T9860] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 680.925227][ T9860] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.962156][ T9860] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 680.995925][ T9860] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 681.034773][ T9860] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 681.054301][ T9860] usb 4-1: config 1 interface 0 has no altsetting 0 [ 681.071773][ T9860] usb 4-1: language id specifier not provided by device, defaulting to English [ 681.101430][ T9860] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.112601][ T9860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.123597][ T9860] usb 4-1: Product: syz [ 681.134778][ T9860] usb 4-1: Manufacturer: syz [ 681.139797][ T9860] usb 4-1: SerialNumber: syz [ 681.180310][T10708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.194402][T10708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.205366][T10708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 683.466229][ T9860] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 683.503963][ T9860] usb 4-1: USB disconnect, device number 31 [ 685.188392][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.973958][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.456645][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 686.506489][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'. [ 686.515862][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'. [ 686.985978][ T5356] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 687.402350][ T30] audit: type=1326 audit(2000000576.819:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10741 comm="syz.3.1229" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d3839ce59 code=0x0 [ 687.957635][ T57] hsr_slave_0: left promiscuous mode [ 687.971693][ T5356] usb 6-1: unable to get BOS descriptor or descriptor too short [ 688.043285][ T57] hsr_slave_1: left promiscuous mode [ 688.052121][ T5356] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 688.064078][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.084854][ T5356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.095527][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.109538][ T5356] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 688.121429][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.135936][ T5356] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 688.151543][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.577032][ T5356] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 688.591958][ T5356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.607488][ T57] veth1_macvtap: left promiscuous mode [ 688.618314][ T5356] usb 6-1: Product: syz [ 688.623540][ T57] veth0_macvtap: left promiscuous mode [ 688.631088][ T5356] usb 6-1: Manufacturer: syz [ 688.640488][ T57] veth1_vlan: left promiscuous mode [ 688.649444][ T5356] usb 6-1: SerialNumber: syz [ 689.403259][ T57] veth0_vlan: left promiscuous mode [ 690.225982][ T5356] usb 6-1: can't set config #1, error -71 [ 690.264088][ T5356] usb 6-1: USB disconnect, device number 30 [ 696.830100][ T57] team0 (unregistering): Port device team_slave_1 removed [ 697.122583][ T57] team0 (unregistering): Port device team_slave_0 removed [ 699.389994][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 699.770630][T10840] overlayfs: missing 'workdir' [ 701.507910][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 706.714557][T10901] overlayfs: missing 'workdir' [ 709.244129][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 711.572580][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 711.600532][ T5641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 711.625339][ T5641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 711.636147][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 711.644949][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 713.765949][ T5646] Bluetooth: hci6: command tx timeout [ 715.888302][ T5646] Bluetooth: hci6: command tx timeout [ 716.680069][T10978] overlayfs: missing 'workdir' [ 717.640848][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 718.025983][ T5646] Bluetooth: hci6: command tx timeout [ 719.215626][T10930] virt_wifi0 speed is unknown, defaulting to 1000 [ 720.057474][ T5646] Bluetooth: hci6: command tx timeout [ 721.429613][ T957] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 725.930244][ T957] usb 4-1: device descriptor read/all, error -71 [ 729.359742][ T1113] bridge_slave_1: left allmulticast mode [ 729.375863][ T1113] bridge_slave_1: left promiscuous mode [ 729.379290][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 729.434689][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.600684][ T1113] bridge_slave_0: left allmulticast mode [ 729.654062][ T1113] bridge_slave_0: left promiscuous mode [ 729.688629][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.915994][ T802] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 730.113925][ T802] usb 4-1: unable to get BOS descriptor or descriptor too short [ 730.186886][ T802] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 731.281155][ T802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.467450][ T802] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 731.708745][ T802] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 731.836165][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.093279][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.219446][ T1113] bond0 (unregistering): Released all slaves [ 732.488495][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.523733][T10930] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.559128][T10930] bridge_slave_0: entered allmulticast mode [ 732.609581][T10930] bridge_slave_0: entered promiscuous mode [ 732.815212][ T1113] hsr_slave_0: left promiscuous mode [ 732.872251][ T1113] hsr_slave_1: left promiscuous mode [ 732.914741][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.988949][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.085578][ T802] usb 4-1: string descriptor 0 read error: -71 [ 733.086589][ T957] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 733.161485][ T802] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 733.223478][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.323221][ T802] usb 4-1: can't set config #1, error -71 [ 733.349787][ T957] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 733.389409][ T802] usb 4-1: USB disconnect, device number 34 [ 733.417279][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.548987][ T957] usb 3-1: config 0 descriptor?? [ 733.613116][ T957] cp210x 3-1:0.0: cp210x converter detected [ 734.105809][ T802] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 734.616387][ T802] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 734.648975][ T957] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 734.687471][ T802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 734.722054][ T957] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 734.769249][ T802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 734.839764][ T957] usb 3-1: cp210x converter now attached to ttyUSB0 [ 734.863422][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 734.883776][ T802] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 734.933531][ T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.935092][ T957] usb 3-1: USB disconnect, device number 25 [ 735.020201][ T802] usb 7-1: Product: syz [ 735.040026][ T802] usb 7-1: Manufacturer: syz [ 735.069035][ T802] usb 7-1: SerialNumber: syz [ 735.110870][ T957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 735.121160][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 735.139413][ T802] usb 7-1: config 0 descriptor?? [ 735.180929][ T957] cp210x 3-1:0.0: device disconnected [ 739.522973][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.565389][T10930] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.617297][T10930] bridge_slave_1: entered allmulticast mode [ 739.701898][T10930] bridge_slave_1: entered promiscuous mode [ 740.151678][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 740.356742][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.476331][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.937098][T10930] team0: Port device team_slave_0 added [ 741.772184][T10930] team0: Port device team_slave_1 added [ 742.087425][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.116788][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.208474][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.289856][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.404802][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.551937][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.138496][T10930] hsr_slave_0: entered promiscuous mode [ 743.181434][T10930] hsr_slave_1: entered promiscuous mode [ 743.209706][T10930] debugfs: 'hsr0' already exists in 'hsr' [ 743.259564][T10930] Cannot create hsr debugfs directory [ 744.130107][T11166] fuse: fd is not a fuse device [ 745.987725][ T802] iguanair 7-1:0.0: failed to get version [ 746.080168][ T802] iguanair 7-1:0.0: probe with driver iguanair failed with error -110 [ 746.211910][ T802] usb 7-1: USB disconnect, device number 6 [ 746.619822][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.628218][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.455524][T10930] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 752.561290][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.610686][T10930] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 752.762934][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.815354][T10930] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.928608][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.989320][T10930] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 753.090594][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 754.031606][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.331900][T10930] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.444116][T11230] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 754.453265][T11230] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 754.465398][T11230] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 755.173812][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.180989][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.383052][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.390276][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.982819][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1340'. [ 759.077841][T11239] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 759.405871][ T957] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 761.857843][ T957] usb 7-1: device descriptor read/all, error -71 [ 765.193117][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 765.218389][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 765.228285][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 765.248009][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 765.263928][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 765.624482][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.157699][T11323] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 767.166743][T11323] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 767.179061][T11323] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 767.815844][ T5646] Bluetooth: hci3: command tx timeout [ 768.389678][ T5770] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 769.244727][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 769.376088][ T5770] usb 4-1: device descriptor read/64, error -32 [ 769.639388][ T5770] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 769.925847][ T5646] Bluetooth: hci3: command tx timeout [ 771.809267][T11292] virt_wifi0 speed is unknown, defaulting to 1000 [ 771.975973][ T5646] Bluetooth: hci3: command tx timeout [ 773.797430][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.809211][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.824409][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 773.833303][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 773.845306][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 774.057551][ T5641] Bluetooth: hci3: command tx timeout [ 775.895890][ T5641] Bluetooth: hci5: command tx timeout [ 777.977389][ T5646] Bluetooth: hci5: command tx timeout [ 779.913216][ T7695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.178125][ T5646] Bluetooth: hci5: command tx timeout [ 780.863142][T11399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 780.872315][T11399] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 780.884395][T11399] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 781.779624][ T7695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.215993][ T5646] Bluetooth: hci5: command tx timeout [ 782.460941][ T7695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.474873][ T957] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 784.311748][ T957] usb 7-1: unable to get BOS descriptor or descriptor too short [ 784.322160][ T957] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 784.356042][ T957] usb 7-1: can't read configurations, error -71 [ 784.585856][ T7695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.671302][T11356] virt_wifi0 speed is unknown, defaulting to 1000 [ 785.991696][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.118234][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.131241][T11292] bridge_slave_0: entered allmulticast mode [ 786.141350][T11292] bridge_slave_0: entered promiscuous mode [ 786.181853][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.214740][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.253236][T11292] bridge_slave_1: entered allmulticast mode [ 786.296758][T11292] bridge_slave_1: entered promiscuous mode [ 787.714316][T11292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.424050][T11292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.523323][T11442] netlink: 4352 bytes leftover after parsing attributes in process `syz.6.1377'. [ 789.849842][T11292] team0: Port device team_slave_0 added [ 789.900918][T11292] team0: Port device team_slave_1 added [ 790.076610][T11450] tmpfs: Unknown parameter 'inoyt' [ 790.175828][ T957] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 791.216306][ T7695] bridge_slave_1: left allmulticast mode [ 791.236712][ T7695] bridge_slave_1: left promiscuous mode [ 791.255931][ T957] usb 7-1: device descriptor read/64, error -71 [ 791.265608][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.381547][ T7695] bridge_slave_0: left allmulticast mode [ 791.400794][ T7695] bridge_slave_0: left promiscuous mode [ 791.421285][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.495903][ T957] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 791.646000][ T957] usb 7-1: device descriptor read/64, error -71 [ 791.792766][ T957] usb usb7-port1: attempt power cycle [ 792.171575][ T957] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 792.286021][ T957] usb 7-1: device descriptor read/8, error -71 [ 792.549410][ T957] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 792.649409][ T957] usb 7-1: device descriptor read/8, error -71 [ 792.832134][ T957] usb usb7-port1: unable to enumerate USB device [ 796.082689][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.161459][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.206154][ T7695] bond0 (unregistering): Released all slaves [ 796.721921][T11292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.767809][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.799211][T11292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.085874][ T957] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 799.005227][T11292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.041404][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.123049][T11292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.567121][T11491] 9p: Bad value for 'wfdno' [ 799.593600][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.967839][ T957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 801.002951][ T957] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 801.031137][ T957] usb 3-1: can't read configurations, error -71 [ 801.421578][T11500] comedi comedi3: dt2817: I/O base address or length out of range [ 803.596383][T11503] syz.3.1389 (11503): drop_caches: 2 [ 807.185185][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 807.200874][ T5641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 807.210347][ T5641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 807.218846][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 807.229559][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 807.276526][ T5770] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 807.428579][ T5770] usb 7-1: device descriptor read/64, error -71 [ 807.716016][ T5770] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 808.045763][ T5770] usb 7-1: device descriptor read/64, error -71 [ 808.059713][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.069863][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.156051][ T5770] usb usb7-port1: attempt power cycle [ 808.536365][ T5770] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 808.600684][ T5770] usb 7-1: device descriptor read/8, error -71 [ 809.355904][ T5770] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 809.422692][ T5641] Bluetooth: hci6: command tx timeout [ 810.586166][ T5770] usb 7-1: device descriptor read/8, error -71 [ 810.756005][ T5770] usb usb7-port1: unable to enumerate USB device [ 811.022907][T11552] loop4: detected capacity change from 0 to 7 [ 811.161530][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.186356][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 811.195808][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 811.370996][T11550] Buffer I/O error on dev loop4, logical block 0, async page read [ 811.402714][T11550] Buffer I/O error on dev loop4, logical block 0, async page read [ 811.443904][T11550] Buffer I/O error on dev loop4, logical block 0, async page read [ 811.495891][ T5646] Bluetooth: hci6: command tx timeout [ 811.542735][T11550] Buffer I/O error on dev loop4, logical block 0, async page read [ 813.580742][ T5646] Bluetooth: hci6: command tx timeout [ 815.665607][ T5646] Bluetooth: hci6: command tx timeout [ 817.016051][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 817.308600][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 817.329705][ T24] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 818.190495][ T24] usb 3-1: config 0 has no interface number 0 [ 818.215998][ T24] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 818.233539][ T24] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 818.376956][ T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 818.403087][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.430630][ T24] usb 3-1: Product: syz [ 818.443504][ T24] usb 3-1: Manufacturer: syz [ 818.463339][ T24] usb 3-1: SerialNumber: syz [ 818.489340][ T24] usb 3-1: config 0 descriptor?? [ 818.508158][T11575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 818.515437][T11575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 818.773677][T11572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 818.781380][T11572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 818.915863][ T5770] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 819.075959][ T5770] usb 7-1: device descriptor read/64, error -71 [ 819.335851][ T5770] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 819.685791][ T5770] usb 7-1: device descriptor read/64, error -71 [ 819.814519][ T5770] usb usb7-port1: attempt power cycle [ 820.535087][ T5770] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 820.567861][ T5770] usb 7-1: device descriptor read/8, error -71 [ 820.825776][ T5770] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 820.889041][ T5770] usb 7-1: device descriptor read/8, error -71 [ 821.027467][ T5770] usb usb7-port1: unable to enumerate USB device [ 821.566900][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 821.579926][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 821.588613][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 821.599731][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 821.607616][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 823.656147][ T5641] Bluetooth: hci4: command tx timeout [ 823.816110][ T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 823.849829][ T24] asix 3-1:0.34: probe with driver asix failed with error -110 [ 825.746011][ T5641] Bluetooth: hci4: command tx timeout [ 825.875318][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1416'. [ 826.158390][T11618] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 826.189368][T11618] /dev/nullb0: Can't open blockdev [ 827.820587][ T5641] Bluetooth: hci4: command tx timeout [ 828.102189][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 828.293522][ T5859] usb 3-1: USB disconnect, device number 28 [ 829.828795][ T7695] hsr_slave_0: left promiscuous mode [ 829.896067][ T5641] Bluetooth: hci4: command tx timeout [ 830.007715][ T7695] hsr_slave_1: left promiscuous mode [ 830.055345][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.099414][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.356791][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.382074][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.649207][ T7695] veth1_macvtap: left promiscuous mode [ 830.706083][T11643] siw: device registration error -23 [ 830.732398][T11643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 831.325609][ T7695] veth0_macvtap: left promiscuous mode [ 831.331400][ T7695] veth1_vlan: left promiscuous mode [ 831.347241][ T7695] veth0_vlan: left promiscuous mode [ 833.376303][ T5937] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 833.545842][ T5937] usb 3-1: device descriptor read/64, error -71 [ 833.701212][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 833.724770][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 833.736343][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 833.761185][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 833.770963][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 833.849689][ T5937] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 833.960803][ T7695] team0 (unregistering): Port device team_slave_1 removed [ 834.016411][ T5937] usb 3-1: device descriptor read/64, error -71 [ 834.077474][ T7695] team0 (unregistering): Port device team_slave_0 removed [ 834.146722][ T5937] usb usb3-port1: attempt power cycle [ 834.536269][ T5937] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 834.596500][ T5937] usb 3-1: device descriptor read/8, error -71 [ 834.865848][ T5937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 834.929055][ T5937] usb 3-1: device descriptor read/8, error -71 [ 835.076294][ T5937] usb usb3-port1: unable to enumerate USB device [ 835.818259][ T5646] Bluetooth: hci3: command tx timeout [ 836.266386][ T7695] IPVS: stop unused estimator thread 0... [ 837.274931][T11688] netlink: 4352 bytes leftover after parsing attributes in process `syz.6.1426'. [ 837.974353][ T5646] Bluetooth: hci3: command tx timeout [ 838.151165][ T7695] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.626158][T11528] virt_wifi0 speed is unknown, defaulting to 1000 [ 838.912642][ T7695] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.018127][T11592] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.504723][ T7695] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.760392][T11653] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.917287][ T7695] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.119141][ T5641] Bluetooth: hci3: command tx timeout [ 840.196576][ T5937] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 840.329760][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 840.425253][ T5937] usb 7-1: unable to get BOS descriptor or descriptor too short [ 840.437216][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 840.701295][ T5937] usb 7-1: can't read configurations, error -71 [ 842.137191][ T5641] Bluetooth: hci3: command tx timeout [ 842.656563][ T9860] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 842.825778][ T9860] usb 7-1: device descriptor read/64, error -71 [ 843.111716][ T9860] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 843.296387][ T9860] usb 7-1: device descriptor read/64, error -71 [ 843.448061][ T9860] usb usb7-port1: attempt power cycle [ 843.611032][T11592] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.652022][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.687630][T11592] bridge_slave_0: entered allmulticast mode [ 843.717445][T11592] bridge_slave_0: entered promiscuous mode [ 843.829831][ T9860] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 843.876700][ T9860] usb 7-1: device descriptor read/8, error -71 [ 843.951388][T11592] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.973787][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.993590][T11592] bridge_slave_1: entered allmulticast mode [ 844.014503][T11592] bridge_slave_1: entered promiscuous mode [ 844.036676][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 844.145837][ T9860] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 844.186730][ T9860] usb 7-1: device descriptor read/8, error -71 [ 844.274193][T11528] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.284621][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.294238][T11528] bridge_slave_0: entered allmulticast mode [ 844.300983][ T9860] usb usb7-port1: unable to enumerate USB device [ 844.312210][T11528] bridge_slave_0: entered promiscuous mode [ 844.415397][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.465351][T11528] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.484322][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.510900][T11528] bridge_slave_1: entered allmulticast mode [ 844.531163][T11528] bridge_slave_1: entered promiscuous mode [ 844.635945][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.793982][T11653] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.813545][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.839267][T11653] bridge_slave_0: entered allmulticast mode [ 844.861283][T11653] bridge_slave_0: entered promiscuous mode [ 844.979593][T11592] team0: Port device team_slave_0 added [ 845.009569][T11528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.030730][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.044991][T11653] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.075481][T11653] bridge_slave_1: entered allmulticast mode [ 845.102017][T11653] bridge_slave_1: entered promiscuous mode [ 845.129342][T11592] team0: Port device team_slave_1 added [ 845.153438][T11528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.749398][T11528] team0: Port device team_slave_0 added [ 845.782567][T11653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.027204][T11528] team0: Port device team_slave_1 added [ 846.096011][ T957] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 846.117633][T11653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.199143][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.219832][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.308074][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.766726][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.775618][ T957] usb 7-1: unable to get BOS descriptor or descriptor too short [ 846.789619][ T957] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 846.797761][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.844650][ T957] usb 7-1: can't read configurations, error -71 [ 846.875887][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.410542][T11528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.425420][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.489373][T11528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.524411][T11653] team0: Port device team_slave_0 added [ 847.642413][T11528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.687387][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.763524][T11528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.812243][T11653] team0: Port device team_slave_1 added [ 848.137207][T11592] hsr_slave_0: entered promiscuous mode [ 848.164284][T11592] hsr_slave_1: entered promiscuous mode [ 848.185789][T11592] debugfs: 'hsr0' already exists in 'hsr' [ 848.219837][T11592] Cannot create hsr debugfs directory [ 848.318048][ T7695] bridge_slave_1: left allmulticast mode [ 848.338533][ T7695] bridge_slave_1: left promiscuous mode [ 848.379493][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.466556][ T7695] bridge_slave_0: left allmulticast mode [ 848.482446][ T7695] bridge_slave_0: left promiscuous mode [ 848.494555][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.889737][ T7695] bridge_slave_1: left allmulticast mode [ 848.895582][ T7695] bridge_slave_1: left promiscuous mode [ 848.902702][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.973170][T11814] siw: device registration error -23 [ 848.998688][T11814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.537258][ T7695] bridge_slave_0: left allmulticast mode [ 849.545821][ T7695] bridge_slave_0: left promiscuous mode [ 849.551636][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.625979][ T7695] bridge_slave_1: left allmulticast mode [ 849.644753][ T7695] bridge_slave_1: left promiscuous mode [ 849.666639][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.723444][ T7695] bridge_slave_0: left allmulticast mode [ 849.737556][ T7695] bridge_slave_0: left promiscuous mode [ 849.755526][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.450525][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.553357][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.604850][ T7695] bond0 (unregistering): Released all slaves [ 851.246503][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.280864][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.327087][ T7695] bond0 (unregistering): Released all slaves [ 851.859230][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.900642][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.922662][ T7695] bond0 (unregistering): Released all slaves [ 852.152010][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 852.402412][T11528] hsr_slave_0: entered promiscuous mode [ 852.433044][T11528] hsr_slave_1: entered promiscuous mode [ 852.447830][T11528] debugfs: 'hsr0' already exists in 'hsr' [ 852.461354][T11528] Cannot create hsr debugfs directory [ 852.559198][T11653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.613727][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.660887][T11653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.685499][T11653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.695591][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.775290][T11653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.825770][ T5356] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 852.967724][ T5356] usb 3-1: device descriptor read/64, error -71 [ 853.205958][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 853.225815][ T5356] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 854.252403][ T5356] usb 3-1: device descriptor read/64, error -71 [ 854.387810][ T5356] usb usb3-port1: attempt power cycle [ 854.485165][T11653] hsr_slave_0: entered promiscuous mode [ 854.504990][T11653] hsr_slave_1: entered promiscuous mode [ 854.518528][T11653] debugfs: 'hsr0' already exists in 'hsr' [ 854.535714][T11653] Cannot create hsr debugfs directory [ 854.627372][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 854.657461][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 854.695978][ T10] usb 4-1: can't read configurations, error -71 [ 854.765789][ T5356] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 854.827762][ T5356] usb 3-1: device descriptor read/8, error -71 [ 854.953499][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.983667][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.060608][ T7695] hsr_slave_0: left promiscuous mode [ 855.090177][ T7695] hsr_slave_1: left promiscuous mode [ 855.096160][ T5356] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 855.107742][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.134784][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.158612][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.159226][ T5356] usb 3-1: device descriptor read/8, error -71 [ 855.215142][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.305935][ T7695] hsr_slave_0: left promiscuous mode [ 855.316758][ T5356] usb usb3-port1: unable to enumerate USB device [ 855.350934][ T7695] hsr_slave_1: left promiscuous mode [ 855.374642][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.403130][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.529620][ T7695] veth1_macvtap: left promiscuous mode [ 855.551363][ T7695] veth0_macvtap: left promiscuous mode [ 855.569300][ T7695] veth1_vlan: left promiscuous mode [ 855.586759][ T7695] veth0_vlan: left promiscuous mode [ 856.349315][ T7695] team0 (unregistering): Port device team_slave_1 removed [ 856.412412][ T7695] team0 (unregistering): Port device team_slave_0 removed [ 857.801784][ T7695] team0 (unregistering): Port device team_slave_1 removed [ 857.873196][ T7695] team0 (unregistering): Port device team_slave_0 removed [ 858.590515][T11855] siw: device registration error -23 [ 858.617558][T11855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.591506][ T7695] team0 (unregistering): Port device team_slave_1 removed [ 859.636226][ T7695] team0 (unregistering): Port device team_slave_0 removed [ 860.770695][ T5937] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 861.338307][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 861.372168][ T5937] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 861.405487][ T5937] usb 4-1: can't read configurations, error -71 [ 861.685621][T11592] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 861.777510][ T802] libceph: connect (1)[c::]:6789 error -101 [ 861.788469][T11592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.811259][ T802] libceph: mon0 (1)[c::]:6789 connect error [ 861.821251][T11592] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 861.918442][ T802] libceph: connect (1)[c::]:6789 error -101 [ 861.942578][ T802] libceph: mon0 (1)[c::]:6789 connect error [ 861.966751][T11592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.437384][ T802] libceph: connect (1)[c::]:6789 error -101 [ 862.448997][ T802] libceph: mon0 (1)[c::]:6789 connect error [ 862.475157][T11878] ceph: No mds server is up or the cluster is laggy [ 862.509672][T11592] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 862.552144][T11592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.584551][T11592] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 862.634211][T11592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.386197][T11528] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 865.406652][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.427217][T11528] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 865.444215][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.470869][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 865.802347][T11931] siw: device registration error -23 [ 866.575367][T11931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.691088][T11528] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 867.731551][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.619447][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 868.632418][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 868.645574][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 868.661208][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 868.675293][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 868.683636][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 868.777825][ T7695] IPVS: stop unused estimator thread 0... [ 868.801860][T11592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.961603][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 868.978809][T11592] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.993577][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 869.029928][ T10] usb 3-1: can't read configurations, error -71 [ 869.040024][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.047215][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.130518][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.137733][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.529461][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.536065][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.547073][ T5875] bond0 (unregistering): Released all slaves [ 870.790763][ T5641] Bluetooth: hci5: command tx timeout [ 870.863299][T11653] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 870.935557][T11653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.021496][T11653] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 871.091806][T11653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.828087][T11995] siw: device registration error -23 [ 872.467498][T11995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.588331][T11653] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 872.617344][T11653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 872.637531][T11653] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 872.649299][T11653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.823947][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 872.865805][ T5641] Bluetooth: hci5: command tx timeout [ 874.423774][T11949] virt_wifi0 speed is unknown, defaulting to 1000 [ 874.567852][T12030] loop4: detected capacity change from 0 to 7 [ 874.730757][ T5749] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 874.895156][T11776] Buffer I/O error on dev loop4, logical block 0, async page read [ 874.937596][ T5641] Bluetooth: hci5: command tx timeout [ 875.072558][T11776] Buffer I/O error on dev loop4, logical block 0, async page read [ 875.267670][T11776] Buffer I/O error on dev loop4, logical block 0, async page read [ 875.486390][T11776] Buffer I/O error on dev loop4, logical block 0, async page read [ 875.620383][T11776] Buffer I/O error on dev loop4, logical block 0, async page read [ 875.790811][ T5749] usb 7-1: unable to get BOS descriptor or descriptor too short [ 875.854382][ T5749] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 876.053575][ T5749] usb 7-1: can't read configurations, error -71 [ 877.015701][ T5641] Bluetooth: hci5: command tx timeout [ 877.026417][T11653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.364262][T11653] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.414768][T11653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.425484][T11653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.482758][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.490027][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.540472][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.547770][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.241794][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 879.914995][ T48] bridge_slave_1: left allmulticast mode [ 879.950116][ T48] bridge_slave_1: left promiscuous mode [ 879.972683][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.163244][ T48] bridge_slave_0: left allmulticast mode [ 880.227421][ T48] bridge_slave_0: left promiscuous mode [ 880.250732][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.408953][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 880.418090][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 880.473047][T12099] (syz.2.1500,12099,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 880.482073][T12099] (syz.2.1500,12099,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 881.405575][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.454781][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.517107][ T48] bond0 (unregistering): Released all slaves [ 881.686332][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 881.699294][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 881.711224][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 881.729712][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 881.764419][T11654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 882.075558][ T48] hsr_slave_0: left promiscuous mode [ 882.112862][ T48] hsr_slave_1: left promiscuous mode [ 882.135333][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.182315][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.205824][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 882.389782][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 882.423234][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.451812][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.477522][ T10] usb 3-1: config 1 has no interface number 0 [ 882.508988][ T10] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 882.527226][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.551037][ T10] usb 3-1: Product: syz [ 882.558793][ T10] usb 3-1: Manufacturer: syz [ 882.567442][ T10] usb 3-1: SerialNumber: syz [ 882.681197][ T48] team0 (unregistering): Port device team_slave_1 removed [ 882.707629][ T48] team0 (unregistering): Port device team_slave_0 removed [ 882.898972][ T5859] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 882.944040][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 882.978126][ T10] usb 3-1: USB disconnect, device number 39 [ 883.045592][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 883.071951][T11776] udevd[11776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.279556][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 883.320026][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 883.341141][ T5859] usb 4-1: can't read configurations, error -71 [ 883.342866][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.395175][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.407969][T11949] bridge_slave_0: entered allmulticast mode [ 883.430664][T11949] bridge_slave_0: entered promiscuous mode [ 883.470499][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.485090][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.515122][T11949] bridge_slave_1: entered allmulticast mode [ 883.539071][T11949] bridge_slave_1: entered promiscuous mode [ 883.562208][T11653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.689841][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.754352][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.816160][ T5641] Bluetooth: hci6: command tx timeout [ 883.959457][T11949] team0: Port device team_slave_0 added [ 884.004586][T11949] team0: Port device team_slave_1 added [ 884.150736][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.176783][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.282157][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.341425][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.383000][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.138082][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.562704][T12118] virt_wifi0 speed is unknown, defaulting to 1000 [ 885.599982][T11949] hsr_slave_0: entered promiscuous mode [ 885.650608][T11949] hsr_slave_1: entered promiscuous mode [ 885.667913][T11949] debugfs: 'hsr0' already exists in 'hsr' [ 885.673736][T11949] Cannot create hsr debugfs directory [ 885.731042][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 885.912569][ T5641] Bluetooth: hci6: command tx timeout [ 886.176137][ T5779] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 886.344131][ T5779] usb 7-1: unable to get BOS descriptor or descriptor too short [ 886.382155][ T5779] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 886.412691][ T5779] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.438572][ T5779] usb 7-1: Product: syz [ 886.452991][ T5779] usb 7-1: Manufacturer: syz [ 886.467089][ T5779] usb 7-1: SerialNumber: syz [ 887.976011][ T5641] Bluetooth: hci6: command tx timeout [ 888.244552][T11653] veth0_vlan: entered promiscuous mode [ 888.310682][T11653] veth1_vlan: entered promiscuous mode [ 888.559625][T12213] virt_wifi0 speed is unknown, defaulting to 1000 [ 888.813587][ T48] bridge_slave_1: left allmulticast mode [ 888.819525][ T48] bridge_slave_1: left promiscuous mode [ 888.825402][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.837699][ T48] bridge_slave_0: left allmulticast mode [ 888.843381][ T48] bridge_slave_0: left promiscuous mode [ 888.849282][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.040657][ T5779] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 889.053777][ T5779] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 889.157674][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 889.205090][ T5779] usb 7-1: USB disconnect, device number 33 [ 889.378666][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.399280][T12225] udevd[12225]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.424283][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.438924][ T48] bond0 (unregistering): Released all slaves [ 889.606331][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 889.628785][T11653] veth0_macvtap: entered promiscuous mode [ 890.055718][ T5641] Bluetooth: hci6: command tx timeout [ 890.072329][ T48] hsr_slave_0: left promiscuous mode [ 890.078842][ T48] hsr_slave_1: left promiscuous mode [ 890.085175][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.095013][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.238306][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 890.246753][ T10] usb 3-1: can't read configurations, error -71 [ 890.779493][ T48] team0 (unregistering): Port device team_slave_1 removed [ 890.812128][ T48] team0 (unregistering): Port device team_slave_0 removed [ 891.008706][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.022131][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.029570][T12118] bridge_slave_0: entered allmulticast mode [ 891.037988][T12118] bridge_slave_0: entered promiscuous mode [ 891.091684][T11653] veth1_macvtap: entered promiscuous mode [ 891.110345][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.118129][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.125408][T12118] bridge_slave_1: entered allmulticast mode [ 891.133770][T12118] bridge_slave_1: entered promiscuous mode [ 891.173391][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 891.223686][T12118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.244397][T12118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.340495][T12118] team0: Port device team_slave_0 added [ 891.427385][T12118] team0: Port device team_slave_1 added [ 891.611779][T12118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.635372][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.681737][T12118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.719021][T12118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.731758][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.759395][T12118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.772461][T11949] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 891.788526][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.812123][T11949] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 891.841272][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.881624][T11653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.914975][T11949] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 891.970440][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.026805][T11653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.042054][T11949] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 892.070539][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.227989][T12118] hsr_slave_0: entered promiscuous mode [ 892.235603][T12118] hsr_slave_1: entered promiscuous mode [ 892.242899][T12118] debugfs: 'hsr0' already exists in 'hsr' [ 892.251103][T12118] Cannot create hsr debugfs directory [ 892.258530][ T5937] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 892.285084][ T7695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.305458][ T7695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.381102][ T7695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.443624][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 892.477880][ T5937] usb 4-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 892.486748][ T7695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.507622][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.538495][ T5937] usb 4-1: Product: syz [ 892.554803][ T5937] usb 4-1: Manufacturer: syz [ 892.569454][ T5937] usb 4-1: SerialNumber: syz [ 894.149353][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.209350][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 894.431657][T11654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 894.445850][T11654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 894.454356][T11654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 894.481405][T11654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 894.491394][T11654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.719751][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.954896][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.962205][ T7695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.070014][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.077254][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.175193][ T5937] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 895.208135][ T5937] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 895.531461][ T5937] usb 4-1: USB disconnect, device number 43 [ 895.535558][ T5893] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.342196][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.454994][ T5893] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.530375][ T5937] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 896.538150][T11654] Bluetooth: hci4: command tx timeout [ 896.719897][ T5893] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.768814][T12118] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 896.802558][T12118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.827234][T12118] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 896.837570][ T802] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 896.867827][T12118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.883128][T12118] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 896.893230][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 896.912749][ T5937] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 896.930753][T12118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.945884][ T5937] usb 4-1: can't read configurations, error -71 [ 896.953413][T12118] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 896.971384][T12118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 897.020182][ T802] usb 7-1: unable to get BOS descriptor or descriptor too short [ 897.045255][ T802] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 897.048025][ T5893] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.065738][ T802] usb 7-1: config 0 has no interface number 0 [ 897.079377][ T802] usb 7-1: config 0 interface 30 has no altsetting 0 [ 897.099582][ T802] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=47.86 [ 897.112562][ T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.129325][ T802] usb 7-1: Product: syz [ 897.135027][ T802] usb 7-1: Manufacturer: syz [ 897.141493][ T802] usb 7-1: SerialNumber: syz [ 897.160734][ T802] usb 7-1: config 0 descriptor?? [ 897.174862][T12285] virt_wifi0 speed is unknown, defaulting to 1000 [ 898.616044][T11654] Bluetooth: hci4: command tx timeout [ 900.695803][T11654] Bluetooth: hci4: command tx timeout [ 900.953605][ T802] qmi_wwan 7-1:0.30: probe with driver qmi_wwan failed with error -22 [ 900.995001][ T802] usb 7-1: USB disconnect, device number 34 [ 901.118957][ T5893] bridge_slave_1: left allmulticast mode [ 901.133531][ T5893] bridge_slave_1: left promiscuous mode [ 901.273025][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.764387][ T5893] bridge_slave_0: left allmulticast mode [ 901.805392][ T957] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 901.860557][ T5893] bridge_slave_0: left promiscuous mode [ 901.961476][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.177006][ T957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 902.231915][ T957] usb 3-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 902.271483][ T957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.293083][ T957] usb 3-1: Product: syz [ 902.309060][ T957] usb 3-1: Manufacturer: syz [ 902.323719][ T957] usb 3-1: SerialNumber: syz [ 902.825918][T11654] Bluetooth: hci4: command tx timeout [ 902.918741][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.932732][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.518230][ T5893] bond0 (unregistering): Released all slaves [ 903.650913][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.066068][T12118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.217297][ T5893] hsr_slave_0: left promiscuous mode [ 904.254453][ T5893] hsr_slave_1: left promiscuous mode [ 904.301529][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.334886][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.363588][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.396614][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.519711][ T5893] veth1_macvtap: left promiscuous mode [ 904.554906][ T5893] veth0_macvtap: left promiscuous mode [ 904.744590][ T5893] veth1_vlan: left promiscuous mode [ 904.753114][ T957] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 904.770199][ T5893] veth0_vlan: left promiscuous mode [ 904.770460][ T957] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 904.871519][ T957] usb 3-1: USB disconnect, device number 42 [ 905.245818][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 905.323675][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.791553][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 905.822323][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 907.179893][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 907.192023][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 907.222972][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 907.259543][ T24] usb 7-1: can't read configurations, error -71 [ 907.311411][T12118] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.413004][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.420317][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.491919][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.499172][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.656190][T12285] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.674719][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.685867][T12285] bridge_slave_0: entered allmulticast mode [ 910.665347][T12285] bridge_slave_0: entered promiscuous mode [ 910.885448][T12456] netlink: 4352 bytes leftover after parsing attributes in process `syz.3.1554'. [ 910.901396][T12285] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.934975][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.947039][T12285] bridge_slave_1: entered allmulticast mode [ 910.960404][T12285] bridge_slave_1: entered promiscuous mode [ 911.102806][T12285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.144686][T12285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.520217][T12285] team0: Port device team_slave_0 added [ 911.550902][T12285] team0: Port device team_slave_1 added [ 911.710157][T12285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.731631][ T957] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 911.733036][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.777346][T12285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.799355][T12285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.807488][T12285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.834450][T12285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.923597][T11949] veth0_vlan: entered promiscuous mode [ 912.017399][T12285] hsr_slave_0: entered promiscuous mode [ 912.038840][T12285] hsr_slave_1: entered promiscuous mode [ 912.057307][ T957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 912.059226][T12285] debugfs: 'hsr0' already exists in 'hsr' [ 912.090178][T12285] Cannot create hsr debugfs directory [ 912.262338][ T957] usb 3-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 912.293913][T11949] veth1_vlan: entered promiscuous mode [ 912.320648][ T957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.355230][ T957] usb 3-1: Product: syz [ 912.371584][ T957] usb 3-1: Manufacturer: syz [ 912.389762][ T957] usb 3-1: SerialNumber: syz [ 914.805195][T11949] veth0_macvtap: entered promiscuous mode [ 915.475665][T11949] veth1_macvtap: entered promiscuous mode [ 915.592461][ T957] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 915.653930][ T957] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 915.982970][ T957] usb 3-1: USB disconnect, device number 43 [ 916.365572][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.234567][T11823] udevd[11823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.470257][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.674016][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.708500][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.751302][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.772764][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.842082][T12118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.405727][ T5356] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 919.710758][ T5356] usb 4-1: unable to get BOS descriptor or descriptor too short [ 919.760421][ T5356] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 919.815325][ T5356] usb 4-1: can't read configurations, error -71 [ 919.835294][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.900198][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.123460][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.174564][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.782083][T12285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 921.855033][T12285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.968224][T12285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 922.405749][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 922.441488][T12285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.498626][T12285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 922.581546][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 922.612237][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.653041][T12285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.653653][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.714122][ T10] usb 4-1: config 1 has no interface number 0 [ 922.729995][T12285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 922.968654][T12285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.981955][ T10] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 924.035553][ T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 924.084705][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.110693][ T10] usb 4-1: Product: syz [ 924.132076][ T10] usb 4-1: Manufacturer: syz [ 924.164509][ T10] usb 4-1: SerialNumber: syz [ 924.242603][T12118] veth0_vlan: entered promiscuous mode [ 924.412558][T12118] veth1_vlan: entered promiscuous mode [ 924.679790][T12118] veth0_macvtap: entered promiscuous mode [ 924.767174][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 924.778298][T12118] veth1_macvtap: entered promiscuous mode [ 924.820800][ T10] usb 4-1: USB disconnect, device number 48 [ 924.846706][T12043] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 924.884373][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.928916][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 925.043761][T12043] usb 7-1: unable to get BOS descriptor or descriptor too short [ 925.086654][T12043] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 925.097557][T12285] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.127548][T12043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.146942][T12118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.165550][T12043] usb 7-1: Product: syz [ 925.184856][T12043] usb 7-1: Manufacturer: syz [ 925.200728][T12043] usb 7-1: SerialNumber: syz [ 925.238347][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.245558][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.306659][T12118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.375020][ T1113] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.407966][ T1113] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.441761][ T1113] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.719024][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.726285][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.478053][ T1113] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.252001][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.293538][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.514650][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.756078][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.130718][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1572'. [ 928.803504][T12586] vxlan0: entered promiscuous mode [ 928.814854][ T57] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.824242][ T57] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.833247][ T57] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.845156][ T57] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.994174][T12043] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 930.049292][T12043] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 930.628590][T12043] usb 7-1: USB disconnect, device number 37 [ 930.938219][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.946974][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.051237][T11777] udevd[11777]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.325849][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 932.393780][T12285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.906602][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 933.950001][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 933.996701][ T10] usb 4-1: can't read configurations, error -71 [ 935.676810][ T802] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 936.683295][T12648] netlink: 4352 bytes leftover after parsing attributes in process `syz.9.1579'. [ 936.719458][ T802] usb 7-1: unable to get BOS descriptor or descriptor too short [ 936.749765][ T802] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 936.784122][ T802] usb 7-1: can't read configurations, error -71 [ 937.266105][T12285] veth0_vlan: entered promiscuous mode [ 937.324997][T12285] veth1_vlan: entered promiscuous mode [ 937.326821][T12351] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 937.539132][T12351] usb 10-1: unable to get BOS descriptor or descriptor too short [ 937.566349][T12285] veth0_macvtap: entered promiscuous mode [ 937.596512][T12351] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.630048][T12285] veth1_macvtap: entered promiscuous mode [ 937.652595][T12351] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.698487][T12351] usb 10-1: config 1 has no interface number 0 [ 937.734368][T12351] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 937.760732][T12285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.780358][T12351] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.825706][T12285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.866627][T12351] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 937.900047][T12351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.911984][T12351] usb 10-1: Product: syz [ 937.916518][T12043] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 937.920417][T12351] usb 10-1: Manufacturer: syz [ 937.934873][T12351] usb 10-1: SerialNumber: syz [ 938.041941][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.082221][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.124891][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.169301][T12043] usb 3-1: unable to get BOS descriptor or descriptor too short [ 938.183330][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.329739][T12043] usb 3-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 938.437002][T12043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.465152][T12043] usb 3-1: Product: syz [ 938.484692][T12043] usb 3-1: Manufacturer: syz [ 938.510330][T12043] usb 3-1: SerialNumber: syz [ 938.706972][T12351] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 938.779950][T12351] usb 10-1: USB disconnect, device number 2 [ 938.918146][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.275552][ T6231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.312535][ T6231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.675389][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.722659][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.506029][T12043] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 941.523523][T12043] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 942.049845][T12043] usb 3-1: USB disconnect, device number 44 [ 942.476987][T12225] udevd[12225]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.972284][T12714] loop7: detected capacity change from 0 to 16384 [ 945.696411][ T957] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 945.788062][ C1] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 945.798213][ C0] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 945.807724][ C0] Buffer I/O error on dev loop7, logical block 384, async page read [ 945.834359][T12714] loop7: detected capacity change from 16384 to 0 [ 946.257829][T12724] netlink: 4352 bytes leftover after parsing attributes in process `syz.9.1594'. [ 946.286917][ T957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 946.326135][ T957] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 946.357354][ T957] usb 3-1: can't read configurations, error -71 [ 949.695965][ T5779] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 950.121610][ T5779] usb 7-1: unable to get BOS descriptor or descriptor too short [ 950.791742][ T5779] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 950.808379][ T5779] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.835321][ T5779] usb 7-1: Product: syz [ 950.866040][ T5779] usb 7-1: Manufacturer: syz [ 950.879634][ T5779] usb 7-1: SerialNumber: syz [ 951.520479][T12757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 953.022939][T12765] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 953.036596][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.044871][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.056416][T12765] bridge0: entered allmulticast mode [ 953.370902][ T5779] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 953.473723][ T5779] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 958.770975][T12788] syz_tun: entered allmulticast mode [ 958.845834][ T5779] usb 7-1: USB disconnect, device number 40 [ 958.870572][T12792] netlink: 4352 bytes leftover after parsing attributes in process `syz.9.1612'. [ 958.877062][T12788] syz_tun: left allmulticast mode [ 959.237023][T12796] siw: device registration error -23 [ 959.902301][T12796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.132559][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 960.163310][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 960.174743][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 960.201736][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 960.218054][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 960.712415][T11776] udevd[11776]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.195958][ T802] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 962.300643][T11654] Bluetooth: hci3: command tx timeout [ 963.178917][ T802] usb 7-1: unable to get BOS descriptor or descriptor too short [ 963.226525][ T802] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 963.282784][ T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.807161][ T802] usb 7-1: Product: syz [ 963.833792][ T802] usb 7-1: Manufacturer: syz [ 963.849371][T12840] netlink: 'syz.8.1621': attribute type 8 has an invalid length. [ 963.857674][ T802] usb 7-1: SerialNumber: syz [ 964.400061][T11654] Bluetooth: hci3: command tx timeout [ 964.783704][T12849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 966.466113][T11654] Bluetooth: hci3: command tx timeout [ 968.546142][T11654] Bluetooth: hci3: command tx timeout [ 969.038384][ T802] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 969.118805][ T802] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 969.307536][ T5893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.382948][T12873] netlink: 4352 bytes leftover after parsing attributes in process `syz.7.1627'. [ 969.791595][T12798] virt_wifi0 speed is unknown, defaulting to 1000 [ 970.033811][T12876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 970.772775][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1629'. [ 971.550473][ T5893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.682171][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 971.700270][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 971.709325][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 971.718943][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 971.740123][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 972.177921][ T5893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.408138][ T24] usb 7-1: USB disconnect, device number 41 [ 972.513615][ T5893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.616395][ T802] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 972.820433][ T802] usb 8-1: unable to get BOS descriptor or descriptor too short [ 972.851443][ T802] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.932400][ T802] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.988724][ T802] usb 8-1: config 1 has no interface number 0 [ 973.045955][ T802] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 973.088677][ T802] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 973.132591][ T802] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 973.161549][ T802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.176023][ T5779] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 973.193255][ T802] usb 8-1: Product: syz [ 973.205787][ T802] usb 8-1: Manufacturer: syz [ 973.213406][ T802] usb 8-1: SerialNumber: syz [ 973.366346][ T5779] usb 7-1: Using ep0 maxpacket: 8 [ 973.402358][ T5779] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 973.437415][ T5779] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 973.492344][ T5779] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 973.535215][ T5779] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 973.569345][ T5779] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.614482][ T5779] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 973.647402][ T5779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.709051][ T5893] bridge_slave_1: left allmulticast mode [ 973.719495][ T5893] bridge_slave_1: left promiscuous mode [ 973.749327][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.769463][ T802] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 973.791296][ T5893] bridge_slave_0: left allmulticast mode [ 973.811768][ T802] usb 8-1: USB disconnect, device number 2 [ 973.820143][ T5641] Bluetooth: hci1: command tx timeout [ 973.827267][ T5893] bridge_slave_0: left promiscuous mode [ 973.845629][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.879779][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.928056][ T5779] usb 7-1: GET_CAPABILITIES returned 0 [ 973.950241][ T5779] usbtmc 7-1:16.0: can't read capabilities [ 974.230587][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1628'. [ 974.268713][T12907] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 974.270034][ T802] usb 7-1: USB disconnect, device number 42 [ 974.276803][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1628'. [ 975.763809][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.812571][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.846387][ T5893] bond0 (unregistering): Released all slaves [ 975.895910][ T5641] Bluetooth: hci1: command tx timeout [ 977.342826][T12948] netlink: 4352 bytes leftover after parsing attributes in process `syz.8.1639'. [ 977.474508][T12952] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1640'. [ 977.526176][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1640'. [ 978.546992][ T5641] Bluetooth: hci1: command tx timeout [ 979.276763][T12798] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.355862][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.374327][T12798] bridge_slave_0: entered allmulticast mode [ 979.406659][T12798] bridge_slave_0: entered promiscuous mode [ 979.453071][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.489375][T12798] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.510871][T12798] bridge_slave_1: entered allmulticast mode [ 979.545134][T12798] bridge_slave_1: entered promiscuous mode [ 979.717151][ T957] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 979.775179][T12880] virt_wifi0 speed is unknown, defaulting to 1000 [ 979.863070][T12798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.898402][ T957] usb 7-1: unable to get BOS descriptor or descriptor too short [ 979.956439][ T957] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 979.980619][ T957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.025862][ T957] usb 7-1: Product: syz [ 980.047271][ T957] usb 7-1: Manufacturer: syz [ 980.055024][T12798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.088515][ T957] usb 7-1: SerialNumber: syz [ 980.283945][T12984] syz.8.1649 (12984): /proc/12979/oom_adj is deprecated, please use /proc/12979/oom_score_adj instead. [ 980.744380][ T5641] Bluetooth: hci1: command tx timeout [ 980.874565][T12988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 981.770380][T12798] team0: Port device team_slave_0 added [ 982.329900][ T5893] hsr_slave_0: left promiscuous mode [ 982.339038][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.370838][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.400509][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.410573][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.461171][ T5893] veth1_macvtap: left promiscuous mode [ 982.479170][ T5893] veth0_macvtap: left promiscuous mode [ 982.505481][ T5893] veth1_vlan: left promiscuous mode [ 982.525116][ T5893] veth0_vlan: left promiscuous mode [ 983.037884][ T957] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 983.075179][ T957] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 983.281608][ T957] usb 7-1: USB disconnect, device number 43 [ 983.582457][T11780] udevd[11780]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.089224][T13009] netlink: 4352 bytes leftover after parsing attributes in process `syz.8.1652'. [ 984.237105][ T5937] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 984.427549][ T5937] usb 10-1: Using ep0 maxpacket: 16 [ 984.465304][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 984.540204][ T5937] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 984.581712][ T1113] smbdirect: ib_dev[syz1] removed [ 984.858276][ T5937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 984.869091][ T5937] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 984.905872][ T5937] usb 10-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 984.934263][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.944981][ T5937] usb 10-1: Product: syz [ 984.966661][ T5937] usb 10-1: Manufacturer: syz [ 985.136238][ T5937] usb 10-1: SerialNumber: syz [ 985.820921][ T5937] usb 10-1: config 0 descriptor?? [ 985.845060][ T5937] omninet 10-1:0.0: ZyXEL - omni.net usb converter detected [ 985.868617][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 985.894384][ T5937] usb 10-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 985.944888][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 986.068617][T13006] netlink: 552 bytes leftover after parsing attributes in process `syz.9.1646'. [ 986.102979][ T5937] usb 10-1: USB disconnect, device number 3 [ 986.174313][ T5937] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 986.223915][ T5937] omninet 10-1:0.0: device disconnected [ 986.424412][T12798] team0: Port device team_slave_1 added [ 986.551904][T12798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.560163][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.627243][T12798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.821634][T12798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.884946][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.968842][T13018] loop7: detected capacity change from 0 to 16384 [ 987.111767][T12798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.156126][T13022] kernel read not supported for file /!s"D$ (pid: 13022 comm: syz.6.1656) [ 987.375738][ T5770] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 987.428151][ T30] audit: type=1800 audit(2000000876.859:25): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1656" name=21732244D724D6E08BDB dev="mqueue" ino=37396 res=0 errno=0 [ 987.604483][T12798] hsr_slave_0: entered promiscuous mode [ 987.620361][T12798] hsr_slave_1: entered promiscuous mode [ 987.639697][T13019] loop7: detected capacity change from 16384 to 0 [ 987.659469][ C1] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 987.663304][T12798] debugfs: 'hsr0' already exists in 'hsr' [ 987.941452][T12798] Cannot create hsr debugfs directory [ 988.905085][ T5770] usb 8-1: unable to get BOS descriptor or descriptor too short [ 988.944368][ T5770] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 989.011631][ T5770] usb 8-1: can't read configurations, error -71 [ 989.207821][ T5893] IPVS: stop unused estimator thread 0... [ 989.557897][ T9860] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 989.763528][ T9860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 989.840585][ T9860] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 989.900910][ T9860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.954341][ T9860] usb 7-1: Product: syz [ 989.974977][ T9860] usb 7-1: Manufacturer: syz [ 989.992557][ T9860] usb 7-1: SerialNumber: syz [ 990.230967][ T5893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.364893][ T5893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.380263][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.386705][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.542318][ T9860] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 992.554169][ T9860] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 992.692422][ T9860] usb 7-1: USB disconnect, device number 44 [ 993.022337][T11780] udevd[11780]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.304614][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1665'. [ 993.404776][ T5893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.673740][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.928943][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.936962][T12880] bridge_slave_0: entered allmulticast mode [ 993.948297][T12880] bridge_slave_0: entered promiscuous mode [ 994.458185][T11654] Bluetooth: hci5: command 0x0406 tx timeout [ 994.823292][ T5893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.884894][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.902830][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.926146][T12880] bridge_slave_1: entered allmulticast mode [ 994.935801][ T957] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 994.944375][T12880] bridge_slave_1: entered promiscuous mode [ 995.178681][ T957] usb 10-1: Using ep0 maxpacket: 32 [ 995.421907][ T957] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 995.586304][ T957] usb 10-1: config 0 has no interface number 0 [ 995.765324][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.771672][ T957] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 995.822353][ T957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.861059][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.862323][ T957] usb 10-1: Product: syz [ 995.917019][ T957] usb 10-1: Manufacturer: syz [ 995.941199][ T957] usb 10-1: SerialNumber: syz [ 995.999383][ T957] usb 10-1: config 0 descriptor?? [ 996.081645][ T957] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 996.212624][T12880] team0: Port device team_slave_0 added [ 996.332570][ T957] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 997.024406][T13082] netlink: 'syz.9.1667': attribute type 1 has an invalid length. [ 997.225149][T13112] netlink: 'syz.9.1667': attribute type 10 has an invalid length. [ 997.251316][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1667'. [ 997.416124][ T957] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 997.531714][T12880] team0: Port device team_slave_1 added [ 997.601154][ T24] IPVS: starting estimator thread 0... [ 997.697016][T13103] IPVS: using max 23 ests per chain, 55200 per kthread [ 998.120556][T13125] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1675'. [ 999.020699][T13112] dummy0: entered promiscuous mode [ 999.228996][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.241304][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.304981][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 999.305769][ T5770] usb 10-1: USB disconnect, device number 4 [ 999.314650][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.399917][ T5770] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 999.478752][ T5770] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 999.490568][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 999.520399][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.548836][ T5770] quatech2 10-1:0.51: device disconnected [ 999.571295][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.741155][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.070406][T13139] comedi comedi1: pcl818: I/O base address or length out of range [ 1001.290183][ T9860] IPVS: starting estimator thread 0... [ 1001.531068][T13143] IPVS: using max 30 ests per chain, 72000 per kthread [ 1002.357661][ T5893] bridge_slave_1: left allmulticast mode [ 1002.374209][ T5893] bridge_slave_1: left promiscuous mode [ 1002.390824][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.424364][ T5893] bridge_slave_0: left allmulticast mode [ 1002.438533][ T5893] bridge_slave_0: left promiscuous mode [ 1002.458802][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.363760][T13163] loop7: detected capacity change from 0 to 16384 [ 1004.405274][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.427408][ T5893] bond_slave_0: left promiscuous mode [ 1004.443796][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.470005][ T5893] bond_slave_1: left promiscuous mode [ 1004.490960][ T5893] bond0 (unregistering): Released all slaves [ 1004.557839][T12880] hsr_slave_0: entered promiscuous mode [ 1004.561308][T13166] loop7: detected capacity change from 16384 to 0 [ 1004.565214][ C0] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1004.605053][T12880] hsr_slave_1: entered promiscuous mode [ 1004.623889][T12880] debugfs: 'hsr0' already exists in 'hsr' [ 1004.641809][T12880] Cannot create hsr debugfs directory [ 1004.683606][T12798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1004.706085][T11654] Bluetooth: hci6: command 0x0406 tx timeout [ 1004.752137][T12798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.776184][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1004.788705][T12798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1004.830656][T12798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.841545][T12798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1004.878995][T12798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.905923][ T5893] tipc: Left network mode [ 1004.979003][T12798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1004.996287][T12798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.038518][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1005.054606][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1005.063900][ T24] usb 7-1: can't read configurations, error -71 [ 1005.692771][ T5893] hsr_slave_0: left promiscuous mode [ 1005.739561][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.823589][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.133808][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.272258][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.604771][ T5893] veth1_macvtap: left promiscuous mode [ 1006.625556][ T5893] veth0_macvtap: left promiscuous mode [ 1006.651001][ T5893] veth1_vlan: left promiscuous mode [ 1007.120267][ T5893] veth0_vlan: left promiscuous mode [ 1007.686493][T13198] loop4: detected capacity change from 0 to 7 [ 1007.824682][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1695'. [ 1007.967234][T12224] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.013292][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1695'. [ 1008.123798][T12224] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.250110][T12224] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.385027][T12224] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.606200][T12224] Buffer I/O error on dev loop4, logical block 0, async page read [ 1008.829033][ T5893] pim6reg (unregistering): left allmulticast mode [ 1009.272014][T13215] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 1009.298872][T13216] loop8: detected capacity change from 0 to 256 [ 1009.342583][T13216] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1010.067264][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 1010.095847][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 1010.413076][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1010.582589][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1010.623276][T13234] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1010.699161][T13234] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1010.846618][T13236] loop7: detected capacity change from 0 to 16384 [ 1011.127989][ T5893] IPVS: stop unused estimator thread 0... [ 1011.150061][T13236] loop7: detected capacity change from 16384 to 0 [ 1011.151576][T12798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.156851][ C1] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 [ 1011.315847][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1012.445663][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1012.480849][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1012.486178][ T5642] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1012.500772][T12798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.517778][ T10] usb 8-1: can't read configurations, error -71 [ 1012.541726][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.548968][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.668288][ T5642] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1012.691788][ T5642] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.720713][ T5642] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.750426][ T5642] usb 9-1: config 1 has no interface number 0 [ 1012.768600][ T5642] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1012.783011][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.790259][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.796667][ T5642] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.848101][ T5642] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1012.871291][ T5642] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.898648][ T5642] usb 9-1: Product: syz [ 1012.914552][ T5642] usb 9-1: Manufacturer: syz [ 1012.930568][ T5642] usb 9-1: SerialNumber: syz [ 1014.470303][ T5642] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1014.484479][ T5642] usb 9-1: USB disconnect, device number 2 [ 1014.767412][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1015.079162][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1015.304711][T12880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1015.364447][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1015.394862][T12880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1015.679055][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1015.679527][T13297] netlink: 4352 bytes leftover after parsing attributes in process `syz.9.1718'. [ 1015.731498][T12880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1016.668117][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.727968][T12880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1016.735021][T13310] loop7: detected capacity change from 0 to 16384 [ 1016.775321][T13311] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 1016.789118][T13311] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.803497][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.813594][T13311] Buffer I/O error on dev loop7, logical block 0, async page read [ 1016.855973][T13310] loop7: detected capacity change from 16384 to 0 [ 1016.946303][ T5779] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1017.120468][ T5779] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1017.162278][ T5779] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.173482][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.193288][ T5779] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.216418][ T9860] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1017.235536][ T5779] usb 10-1: config 1 has no interface number 0 [ 1017.244744][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.266445][ T5779] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1017.283169][ T5779] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1017.309612][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.317461][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.336908][ T5779] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1017.352647][ T5779] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.371504][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.378703][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.398356][ T5779] usb 10-1: Product: syz [ 1017.437858][ T5779] usb 10-1: Manufacturer: syz [ 1017.471248][ T5779] usb 10-1: SerialNumber: syz [ 1017.478905][ T9860] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1017.512182][ T9860] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1017.547057][ T9860] usb 8-1: can't read configurations, error -71 [ 1017.946968][ T5779] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1018.011104][ T5779] usb 10-1: USB disconnect, device number 5 [ 1018.110641][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.398740][T11654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1019.414345][T11654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1019.426368][T11654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1019.439436][T11654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1019.451842][T11654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1020.278880][T13375] CUSE: info not properly terminated [ 1021.845798][T11654] Bluetooth: hci0: command tx timeout [ 1022.182202][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1023.895683][T11654] Bluetooth: hci0: command tx timeout [ 1024.101832][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.847887][T13436] syzkaller0: entered promiscuous mode [ 1025.876403][T13436] syzkaller0: entered allmulticast mode [ 1025.976135][T11654] Bluetooth: hci0: command tx timeout [ 1026.651142][T13466] netlink: 4352 bytes leftover after parsing attributes in process `syz.8.1748'. [ 1028.066035][T11654] Bluetooth: hci0: command tx timeout [ 1028.327539][T13349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.362517][T13349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.387173][T13349] bridge_slave_0: entered allmulticast mode [ 1028.429936][T13349] bridge_slave_0: entered promiscuous mode [ 1028.463583][T13349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.486446][T13349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.514953][T13349] bridge_slave_1: entered allmulticast mode [ 1029.438368][T13349] bridge_slave_1: entered promiscuous mode [ 1029.449421][T13493] loop7: detected capacity change from 0 to 16384 [ 1029.773864][T13349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.138675][T13349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.204677][ T5642] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1030.230410][ T57] bridge_slave_1: left allmulticast mode [ 1030.252491][T13499] loop7: detected capacity change from 16384 to 0 [ 1030.264733][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1030.281853][ T57] bridge_slave_1: left promiscuous mode [ 1030.302639][ C0] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1030.306255][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.407196][ T57] bridge_slave_0: left allmulticast mode [ 1030.471484][ T57] bridge_slave_0: left promiscuous mode [ 1030.507221][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.720089][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1030.739300][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1030.748873][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1030.763789][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1030.773764][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1031.155024][T13518] loop9: detected capacity change from 0 to 256 [ 1032.186187][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.231699][T13525] loop6: detected capacity change from 0 to 512 [ 1032.324401][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.377722][ T57] bond0 (unregistering): Released all slaves [ 1032.620212][ T5642] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1032.645868][ T957] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1032.694904][ T5642] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1032.726552][ T5642] usb 9-1: can't read configurations, error -71 [ 1032.762454][T13349] team0: Port device team_slave_0 added [ 1032.851344][ T957] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1032.855840][T11654] Bluetooth: hci3: command tx timeout [ 1032.900565][ T57] hsr_slave_0: left promiscuous mode [ 1032.906266][ T957] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.941985][ T957] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.991234][ T57] hsr_slave_1: left promiscuous mode [ 1033.005262][ T957] usb 10-1: config 1 has no interface number 0 [ 1033.026521][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.029885][ T957] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1033.074137][ T957] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.101576][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.123903][ T957] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1033.167547][ T957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.211595][ T957] usb 10-1: Product: syz [ 1033.237185][ T957] usb 10-1: Manufacturer: syz [ 1033.254992][ T957] usb 10-1: SerialNumber: syz [ 1033.742963][ T957] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1033.804263][ T957] usb 10-1: USB disconnect, device number 6 [ 1033.964049][T13551] loop8: detected capacity change from 0 to 128 [ 1034.020291][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.524090][T13560] netlink: 4352 bytes leftover after parsing attributes in process `syz.9.1769'. [ 1034.825982][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1034.935679][T11654] Bluetooth: hci3: command tx timeout [ 1034.947920][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1035.917118][T13574] loop8: detected capacity change from 0 to 164 [ 1036.188419][ T957] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1036.199270][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1036.747164][ T957] usb 10-1: device descriptor read/64, error -32 [ 1037.007825][ T957] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1037.032913][T11654] Bluetooth: hci3: command tx timeout [ 1038.353002][ T957] usb 10-1: device descriptor read/all, error -71 [ 1038.375160][ T957] usb usb10-port1: attempt power cycle [ 1038.475437][T13349] team0: Port device team_slave_1 added [ 1038.693489][T13349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.738488][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.842524][T13349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.889471][T13349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.905636][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.995303][T13349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.097381][T11654] Bluetooth: hci3: command tx timeout [ 1039.109325][T13595] loop8: detected capacity change from 0 to 8192 [ 1039.216557][T13349] hsr_slave_0: entered promiscuous mode [ 1039.247099][T13349] hsr_slave_1: entered promiscuous mode [ 1039.308325][T13349] debugfs: 'hsr0' already exists in 'hsr' [ 1039.358532][T13349] Cannot create hsr debugfs directory [ 1039.680741][T13595] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1039.714539][T13595] FAT-fs (loop8): Filesystem has been set read-only [ 1039.812521][ T957] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1039.840270][ T957] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1039.860103][ T957] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.881953][ T957] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.892691][ T957] usb 10-1: config 1 has no interface number 0 [ 1039.913373][ T957] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1039.960442][ T957] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1040.032590][ T957] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1040.079047][ T957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.088444][T13615] netlink: 4352 bytes leftover after parsing attributes in process `syz.6.1782'. [ 1040.119907][ T957] usb 10-1: Product: syz [ 1040.142741][ T957] usb 10-1: Manufacturer: syz [ 1040.155620][ T957] usb 10-1: SerialNumber: syz [ 1040.530267][ T957] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1040.544247][ T957] usb 10-1: USB disconnect, device number 9 [ 1040.829371][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.829941][T13628] loop8: detected capacity change from 0 to 128 [ 1040.856306][T13628] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1041.603431][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1041.700411][T13636] loop7: detected capacity change from 0 to 16384 [ 1042.186202][T13641] loop7: detected capacity change from 16384 to 0 [ 1042.186937][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1042.228878][ C1] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1042.305906][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1042.851395][T13649] loop8: detected capacity change from 0 to 16 [ 1042.963703][T13649] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1043.021078][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1043.585193][ T24] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1043.598201][ T24] usb 10-1: can't read configurations, error -71 [ 1043.948049][T13656] loop7: detected capacity change from 0 to 128 [ 1044.673094][T13663] loop6: detected capacity change from 0 to 256 [ 1044.818363][T13669] netlink: 4352 bytes leftover after parsing attributes in process `syz.7.1797'. [ 1045.245981][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1046.242156][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1046.294346][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.337125][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.367874][ T24] usb 9-1: config 1 has no interface number 0 [ 1046.401220][ T24] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1046.433029][ T24] usb 9-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1046.472733][ T24] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1046.506916][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.553802][ T24] usb 9-1: Product: syz [ 1046.569897][ T24] usb 9-1: Manufacturer: syz [ 1046.590874][ T24] usb 9-1: SerialNumber: syz [ 1047.632777][ T24] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1047.660389][ T24] usb 9-1: USB disconnect, device number 5 [ 1047.935852][T12224] udevd[12224]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.071824][T13713] loop7: detected capacity change from 0 to 16384 [ 1049.289542][ C0] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1049.300109][T13716] loop7: detected capacity change from 16384 to 0 [ 1049.408075][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1049.861828][ T802] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1050.056636][ T57] bridge_slave_1: left allmulticast mode [ 1050.096622][ T57] bridge_slave_1: left promiscuous mode [ 1050.129614][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.202414][ T57] bridge_slave_0: left allmulticast mode [ 1050.228139][ T57] bridge_slave_0: left promiscuous mode [ 1050.240736][T13728] netlink: 4352 bytes leftover after parsing attributes in process `syz.7.1812'. [ 1050.264785][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.230476][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.347376][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.405178][ T57] bond0 (unregistering): Released all slaves [ 1052.801949][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.841726][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.866066][T13511] bridge_slave_0: entered allmulticast mode [ 1052.914691][T13511] bridge_slave_0: entered promiscuous mode [ 1053.063008][ T802] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1053.096757][ T802] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1053.112117][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.135523][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.143122][ T802] usb 9-1: can't read configurations, error -71 [ 1053.183076][T13511] bridge_slave_1: entered allmulticast mode [ 1053.221814][T13511] bridge_slave_1: entered promiscuous mode [ 1053.613920][T13761] loop5: detected capacity change from 0 to 7 [ 1053.632842][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.642210][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1053.662848][ T57] hsr_slave_0: left promiscuous mode [ 1053.674672][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.684339][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1053.720961][T13764] [ 1053.723336][T13764] ====================================================== [ 1053.730424][T13764] WARNING: possible circular locking dependency detected [ 1053.737463][T13764] syzkaller #0 Tainted: G L [ 1053.743470][T13764] ------------------------------------------------------ [ 1053.750501][T13764] syz.7.1820/13764 is trying to acquire lock: [ 1053.757022][T13764] ffff88801c6a5210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 1053.767262][T13764] [ 1053.767262][T13764] but task is already holding lock: [ 1053.774641][T13764] ffff888026ef89b0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1053.785997][T13764] [ 1053.785997][T13764] which lock already depends on the new lock. [ 1053.785997][T13764] [ 1053.796404][T13764] [ 1053.796404][T13764] the existing dependency chain (in reverse order) is: [ 1053.805426][T13764] [ 1053.805426][T13764] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 1053.815054][T13764] blk_alloc_queue+0x610/0x790 [ 1053.820366][T13764] blk_mq_alloc_queue+0x174/0x290 [ 1053.825947][T13764] __blk_mq_alloc_disk+0x29/0x120 [ 1053.831536][T13764] loop_add+0x498/0xb60 [ 1053.836271][T13764] loop_init+0x1d3/0x200 [ 1053.841077][T13764] do_one_initcall+0x121/0x750 [ 1053.846415][T13764] kernel_init_freeable+0x6ea/0x7b0 [ 1053.852191][T13764] kernel_init+0x1f/0x1e0 [ 1053.857075][T13764] ret_from_fork+0x72b/0xd50 [ 1053.862220][T13764] ret_from_fork_asm+0x1a/0x30 [ 1053.867551][T13764] [ 1053.867551][T13764] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1053.874814][T13764] fs_reclaim_acquire+0xc4/0x100 [ 1053.880335][T13764] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1053.886305][T13764] __kernfs_iattrs+0x124/0x3e0 [ 1053.891646][T13764] __kernfs_setattr+0x4d/0x3c0 [ 1053.896958][T13764] kernfs_iop_setattr+0xda/0x130 [ 1053.902449][T13764] notify_change+0xb25/0x1330 [ 1053.907702][T13764] do_truncate+0x1df/0x240 [ 1053.912705][T13764] path_openat+0x2a55/0x31a0 [ 1053.916445][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.917842][T13764] do_file_open+0x20e/0x430 [ 1053.917885][T13764] do_sys_openat2+0x10d/0x1e0 [ 1053.924265][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.929108][T13764] __x64_sys_openat+0x12d/0x210 [ 1053.929158][T13764] do_syscall_64+0x10b/0xf80 [ 1053.950944][T13764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.957363][T13764] [ 1053.957363][T13764] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1053.965974][T13764] __lock_acquire+0x14b8/0x2630 [ 1053.971381][T13764] lock_acquire+0x1b1/0x370 [ 1053.976432][T13764] down_read+0x99/0x450 [ 1053.981114][T13764] kernfs_iop_getattr+0x9c/0xf0 [ 1053.986515][T13764] vfs_getattr_nosec+0x2d4/0x430 [ 1053.991972][T13764] vfs_getattr+0x4a/0x60 [ 1053.996732][T13764] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1054.003335][T13764] lo_ioctl+0x13aa/0x1bc0 [ 1054.008226][T13764] blkdev_ioctl+0x5ad/0x6f0 [ 1054.013279][T13764] __x64_sys_ioctl+0x18e/0x210 [ 1054.018592][T13764] do_syscall_64+0x10b/0xf80 [ 1054.023718][T13764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.030131][T13764] [ 1054.030131][T13764] other info that might help us debug this: [ 1054.030131][T13764] [ 1054.040348][T13764] Chain exists of: [ 1054.040348][T13764] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 1054.040348][T13764] [ 1054.054900][T13764] Possible unsafe locking scenario: [ 1054.054900][T13764] [ 1054.062354][T13764] CPU0 CPU1 [ 1054.067731][T13764] ---- ---- [ 1054.073081][T13764] lock(&q->q_usage_counter(io)#22); [ 1054.078465][T13764] lock(fs_reclaim); [ 1054.084970][T13764] lock(&q->q_usage_counter(io)#22); [ 1054.092897][T13764] rlock(&root->kernfs_iattr_rwsem); [ 1054.098302][T13764] [ 1054.098302][T13764] *** DEADLOCK *** [ 1054.098302][T13764] [ 1054.106441][T13764] 3 locks held by syz.7.1820/13764: [ 1054.111657][T13764] #0: ffff888027025430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 1054.121881][T13764] #1: ffff888026ef89b0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1054.133601][T13764] #2: ffff888026ef89e8 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1054.145498][T13764] [ 1054.145498][T13764] stack backtrace: [ 1054.151405][T13764] CPU: 1 UID: 0 PID: 13764 Comm: syz.7.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.151447][T13764] Tainted: [L]=SOFTLOCKUP [ 1054.151458][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1054.151475][T13764] Call Trace: [ 1054.151485][T13764] [ 1054.151496][T13764] dump_stack_lvl+0x100/0x190 [ 1054.151535][T13764] print_circular_bug.cold+0x178/0x1c7 [ 1054.151583][T13764] check_noncircular+0x146/0x160 [ 1054.151625][T13764] __lock_acquire+0x14b8/0x2630 [ 1054.151668][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.151706][T13764] lock_acquire+0x1b1/0x370 [ 1054.151738][T13764] ? kernfs_iop_getattr+0x9c/0xf0 [ 1054.151786][T13764] ? __pfx___might_resched+0x10/0x10 [ 1054.151825][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.151859][T13764] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1054.151904][T13764] down_read+0x99/0x450 [ 1054.151932][T13764] ? kernfs_iop_getattr+0x9c/0xf0 [ 1054.151977][T13764] ? rcu_is_watching+0x12/0xc0 [ 1054.152018][T13764] ? __pfx_down_read+0x10/0x10 [ 1054.152053][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152091][T13764] ? __rcu_read_unlock+0x27f/0x5e0 [ 1054.152133][T13764] kernfs_iop_getattr+0x9c/0xf0 [ 1054.152180][T13764] vfs_getattr_nosec+0x2d4/0x430 [ 1054.152211][T13764] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 1054.152268][T13764] vfs_getattr+0x4a/0x60 [ 1054.152305][T13764] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1054.152362][T13764] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 1054.152427][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152474][T13764] lo_ioctl+0x13aa/0x1bc0 [ 1054.152529][T13764] ? __pfx_lo_ioctl+0x10/0x10 [ 1054.152575][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152611][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152645][T13764] ? blk_get_meta_cap+0xd4/0x6c0 [ 1054.152683][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152720][T13764] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1054.152751][T13764] ? tomoyo_path_number_perm+0x28f/0x580 [ 1054.152780][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152818][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152852][T13764] ? blkdev_common_ioctl+0x515/0x2b80 [ 1054.152888][T13764] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1054.152925][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.152959][T13764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1054.152991][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.153025][T13764] ? do_vfs_ioctl+0x226/0x13e0 [ 1054.153066][T13764] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1054.153112][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.153146][T13764] ? find_held_lock+0x2b/0x80 [ 1054.153190][T13764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.153226][T13764] ? __pfx_lo_ioctl+0x10/0x10 [ 1054.153272][T13764] blkdev_ioctl+0x5ad/0x6f0 [ 1054.153304][T13764] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1054.153348][T13764] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1054.153392][T13764] __x64_sys_ioctl+0x18e/0x210 [ 1054.153435][T13764] do_syscall_64+0x10b/0xf80 [ 1054.153482][T13764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.153515][T13764] RIP: 0033:0x7f94a679ce59 [ 1054.153537][T13764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.153565][T13764] RSP: 002b:00007f94a768a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.153592][T13764] RAX: ffffffffffffffda RBX: 00007f94a6a16090 RCX: 00007f94a679ce59 [ 1054.153611][T13764] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 1054.153628][T13764] RBP: 00007f94a6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1054.153646][T13764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.153664][T13764] R13: 00007f94a6a16128 R14: 00007f94a6a16090 R15: 00007ffc893d5038 [ 1054.153692][T13764] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1054.942428][ T57] hsr_slave_1: left promiscuous mode [ 1054.966302][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.976230][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1054.985461][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1054.993757][ T802] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1054.995188][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.010481][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.018907][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.028072][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.037647][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.046912][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.055095][T13761] ldm_validate_partition_table(): Disk read failed. [ 1055.070720][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.079924][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.088961][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.098109][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.108571][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.117750][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.125885][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.135028][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1055.144245][T13761] Dev loop5: unable to read RDB block 0 [ 1055.149868][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.159347][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.169754][T13761] loop5: unable to read partition table [ 1055.175953][T13761] loop5: partition table beyond EOD, truncated [ 1055.189469][ T802] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1055.195877][T13761] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1055.219897][T13764] ldm_validate_partition_table(): Disk read failed. [ 1055.232215][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.275785][ T802] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.311050][T13764] Dev loop5: unable to read RDB block 0 [ 1055.347702][T13764] loop5: unable to read partition table [ 1055.350950][ T802] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.407983][ T802] usb 9-1: config 1 has no interface number 0 [ 1055.423575][ T802] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1055.457247][ T802] usb 9-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1055.469776][T13764] loop5: partition table beyond EOD, truncated [ 1055.534664][T13764] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1056.093975][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1056.152266][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1056.400360][T13349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1056.410988][T13349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.426935][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.643306][ T802] usb 9-1: string descriptor 0 read error: -71 [ 1056.664603][ T802] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1056.699244][ T802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.750454][ T802] usb 9-1: can't set config #1, error -71 [ 1056.911023][ T802] usb 9-1: USB disconnect, device number 7 [ 1057.962101][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.041836][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.111550][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.176582][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.287734][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.299954][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.364346][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.374763][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.412483][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.422900][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.465155][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.475583][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.567353][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.644280][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.692357][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.741684][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.832926][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.882111][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.931385][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.017326][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.124381][ T57] bridge_slave_1: left allmulticast mode [ 1059.130913][ T57] bridge_slave_1: left promiscuous mode [ 1059.136850][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.145397][ T57] bridge_slave_0: left allmulticast mode [ 1059.151882][ T57] bridge_slave_0: left promiscuous mode [ 1059.157927][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.174477][ T57] bridge_slave_1: left allmulticast mode [ 1059.180347][ T57] bridge_slave_1: left promiscuous mode [ 1059.186527][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.198544][ T57] bridge_slave_0: left allmulticast mode [ 1059.204224][ T57] bridge_slave_0: left promiscuous mode [ 1059.210248][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.549040][ T57] bridge_slave_1: left allmulticast mode [ 1059.554810][ T57] bridge_slave_1: left promiscuous mode [ 1059.561466][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.582272][ T57] bridge_slave_0: left allmulticast mode [ 1059.593372][ T57] bridge_slave_0: left promiscuous mode [ 1059.599414][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.612985][ T57] bridge_slave_1: left allmulticast mode [ 1059.619209][ T57] bridge_slave_1: left promiscuous mode [ 1059.624950][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.636009][ T57] bridge_slave_0: left allmulticast mode [ 1059.641737][ T57] bridge_slave_0: left promiscuous mode [ 1059.647657][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.659068][ T57] bridge_slave_1: left allmulticast mode [ 1059.664784][ T57] bridge_slave_1: left promiscuous mode [ 1059.672971][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.682056][ T57] bridge_slave_0: left allmulticast mode [ 1059.689285][ T57] bridge_slave_0: left promiscuous mode [ 1059.695006][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.890553][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.901546][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.913776][ T57] bond0 (unregistering): Released all slaves [ 1060.035287][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.046150][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.057505][ T57] bond0 (unregistering): Released all slaves [ 1060.180317][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.190594][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.200357][ T57] bond0 (unregistering): Released all slaves [ 1060.291815][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.302321][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.312088][ T57] bond0 (unregistering): Released all slaves [ 1060.403631][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.414035][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.424907][ T57] bond0 (unregistering): Released all slaves [ 1061.148653][ T57] hsr_slave_0: left promiscuous mode [ 1061.154618][ T57] hsr_slave_1: left promiscuous mode [ 1061.160892][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.168838][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.188178][ T57] hsr_slave_0: left promiscuous mode [ 1061.199788][ T57] hsr_slave_1: left promiscuous mode [ 1061.205596][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.212987][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.220712][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.228161][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.239837][ T57] hsr_slave_0: left promiscuous mode [ 1061.247112][ T57] hsr_slave_1: left promiscuous mode [ 1061.253087][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.260641][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.268343][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.275815][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.289050][ T57] hsr_slave_0: left promiscuous mode [ 1061.294768][ T57] hsr_slave_1: left promiscuous mode [ 1061.300569][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.308151][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.315878][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.323261][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.333916][ T57] hsr_slave_0: left promiscuous mode [ 1061.339752][ T57] hsr_slave_1: left promiscuous mode [ 1061.345429][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.352865][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.361766][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.369201][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.387758][ T57] veth1_macvtap: left promiscuous mode [ 1061.393240][ T57] veth0_macvtap: left promiscuous mode [ 1061.399070][ T57] veth1_vlan: left promiscuous mode [ 1061.404340][ T57] veth0_vlan: left promiscuous mode [ 1061.411705][ T57] veth1_macvtap: left promiscuous mode [ 1061.417328][ T57] veth0_macvtap: left promiscuous mode [ 1061.422840][ T57] veth1_vlan: left promiscuous mode [ 1061.428497][ T57] veth0_vlan: left promiscuous mode [ 1061.434390][ T57] veth1_macvtap: left promiscuous mode [ 1061.439981][ T57] veth0_macvtap: left promiscuous mode [ 1061.445537][ T57] veth1_vlan: left promiscuous mode [ 1061.451067][ T57] veth0_vlan: left promiscuous mode [ 1061.457421][ T57] veth1_macvtap: left promiscuous mode [ 1061.462889][ T57] veth0_macvtap: left promiscuous mode [ 1061.468503][ T57] veth1_vlan: left promiscuous mode [ 1061.473782][ T57] veth0_vlan: left promiscuous mode [ 1061.725339][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1061.740563][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1061.892691][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1061.904682][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1062.043679][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1062.057684][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1062.194592][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1062.209080][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1062.341742][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1062.360058][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1063.391195][ T57] IPVS: stop unused estimator thread 0... [ 1063.397669][ T57] IPVS: stop unused estimator thread 0... [ 1063.547562][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1063.652978][ T57] bridge_slave_1: left allmulticast mode [ 1063.659240][ T57] bridge_slave_1: left promiscuous mode [ 1063.665466][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.674043][ T57] bridge_slave_0: left allmulticast mode [ 1063.679981][ T57] bridge_slave_0: left promiscuous mode [ 1063.686635][ T57] bridge0: port 1(bridge_slave_0) entered disabled state