last executing test programs: 7m35.78736503s ago: executing program 2 (id=46): sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000008c0)="26807c4448198d1b7d875c6db951839b7efc780ea101cc6482fbb66aebeb0f9fdd6f9ffd9ba3d837c1fe7a5cb9", 0x2d}], 0x1, 0x0, 0x158}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000080000000000000000000000000000000080000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000004010500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000600000000000000000000000000000000000000000004d33c0000000200"], 0x1bc}}, 0x10) 7m34.782847347s ago: executing program 2 (id=51): socket$nl_audit(0x10, 0x3, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) pipe(&(0x7f0000000280)) socket$rds(0x15, 0x5, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000, 0x3, 0x0, 0x40002, 0x0, 0x2}, 0x0, &(0x7f0000000200)={0x3ff, 0x1000000000002, 0x0, 0x41, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) 7m32.607891127s ago: executing program 2 (id=55): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newae={0x48, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in6=@mcast2, 0x4d5, 0x2, 0xff}, @in=@local, 0x67e, 0x3507}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 7m31.659071023s ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) 7m30.843115194s ago: executing program 2 (id=64): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1, 0x42, 0x6, {}, {0x0, 0xea60}, {0x3, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "16f711f6198b4be3bb51dd659ceb29d16fd8d83c08b2b4e3b2c6f33e941c0306d6203a82744c6231350c05653ebf61733ec6d3e1b3d8b5a1477fc3ec35c8b406"}}, 0x80}}, 0x811) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000085c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0xc004) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000880), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xf, 0x9, 0x7, 0x8, 0x7, 0x1, 0x9, 0xf5, 0x4, 0xa, 0x1, 0x1, 0x49, 0x4}, 0xe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b", 0xa8}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d", 0x9c}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc8", 0xc7}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4", 0x3c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc0) 7m29.156256929s ago: executing program 2 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 7m26.52911277s ago: executing program 32 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 7m11.492530649s ago: executing program 3 (id=110): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 7m10.732999548s ago: executing program 3 (id=112): ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) socket$rxrpc(0x21, 0x2, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m7.43200844s ago: executing program 3 (id=116): socket(0x840000000002, 0x3, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}}, 0x0) 7m6.445649184s ago: executing program 3 (id=120): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x110, 0x30, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{0xfc, 0x1, [@m_skbedit={0xf8, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xc9, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e344"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x110}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7m5.597481649s ago: executing program 3 (id=121): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 7m4.592425031s ago: executing program 3 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$snddsp(0xffffffffffffffff, &(0x7f0000000200), 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6m48.825003445s ago: executing program 33 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$snddsp(0xffffffffffffffff, &(0x7f0000000200), 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5m35.492882331s ago: executing program 4 (id=251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "e8"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 5m32.012327855s ago: executing program 4 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5m30.233638555s ago: executing program 4 (id=257): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$ITER_CREATE(0xb, 0x0, 0xfff5) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x5, 0xf46f, 0x68a2, 0x6, 0x1, 0x1, 0x5, 0x5, 0x401, 0xffa, 0x800000000e4b, 0xffffffffffffffff, 0x7, 0x0, 0x9, 0x8], 0x8080000, 0x202000}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x20000050) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40010122, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x60e82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) 5m26.455979198s ago: executing program 4 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 5m18.531650535s ago: executing program 4 (id=267): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 5m14.715554428s ago: executing program 4 (id=271): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000026"], 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d6946593", 0x68}], 0x1}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r3, 0xc6c3, 0x0) 4m58.913915572s ago: executing program 34 (id=271): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000026"], 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d6946593", 0x68}], 0x1}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r3, 0xc6c3, 0x0) 4m30.085016422s ago: executing program 0 (id=330): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1, 0x42, 0x6, {}, {0x0, 0xea60}, {0x3, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "16f711f6198b4be3bb51dd659ceb29d16fd8d83c08b2b4e3b2c6f33e941c0306d6203a82744c6231350c05653ebf61733ec6d3e1b3d8b5a1477fc3ec35c8b406"}}, 0x80}}, 0x811) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000085c0)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000880), 0x1006, r4, 0x0, 0xd88d02a0}, 0x38) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xf, 0x9, 0x7, 0x8, 0x7, 0x1, 0x9, 0xf5, 0x4, 0xa, 0x1, 0x1, 0x49, 0x4}, 0xe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b", 0xa8}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d", 0x9c}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc8", 0xc7}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4", 0x3c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc0) 4m26.806636039s ago: executing program 0 (id=333): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r0, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000440)) 4m23.559113426s ago: executing program 0 (id=337): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000fce) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0xffff1000, 0xdddca000, 0x5, 0xd, 0x20}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r6, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020}, 0xfffffffffffffdd3) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000600)={0x80, 0x2, 0xc8, 0x80, 0x6, 0x8}) 4m18.359912613s ago: executing program 0 (id=341): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1, 0x42, 0x6, {}, {0x0, 0xea60}, {0x3, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "16f711f6198b4be3bb51dd659ceb29d16fd8d83c08b2b4e3b2c6f33e941c0306d6203a82744c6231350c05653ebf61733ec6d3e1b3d8b5a1477fc3ec35c8b406"}}, 0x80}}, 0x811) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000085c0)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000880), 0x1006, r3, 0x0, 0xd88d02a0}, 0x38) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0xf, 0x9, 0x7, 0x8, 0x7, 0x1, 0x9, 0xf5, 0x4, 0xa, 0x1, 0x1, 0x49, 0x4}, 0xe) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b", 0xa8}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d", 0x9c}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc8", 0xc7}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4", 0x3c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc0) 4m17.202552074s ago: executing program 0 (id=344): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$audion(0x0, 0x7, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/217, &(0x7f0000000200)=0x18) 4m13.915856406s ago: executing program 0 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0x40082104, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0xc, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m58.604631238s ago: executing program 35 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0x40082104, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0xc, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m11.403836511s ago: executing program 1 (id=473): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.896444675s ago: executing program 1 (id=475): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 2m9.052465594s ago: executing program 1 (id=477): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) 2m8.363640914s ago: executing program 1 (id=479): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300), &(0x7f00000002c0)) 2m3.867356121s ago: executing program 1 (id=481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r5, 0xf, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, 0x0, 0x0, 0x88, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 2m2.628220108s ago: executing program 1 (id=483): socket(0x40000000015, 0x805, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x51b6, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20040400) 1m47.100942848s ago: executing program 36 (id=483): socket(0x40000000015, 0x805, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x51b6, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20040400) 1m0.26889185s ago: executing program 5 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 58.879863798s ago: executing program 5 (id=547): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4000c800) sendto$inet6(r0, &(0x7f0000000840)="2a9a43a9", 0x4, 0x3b00, 0x0, 0x0) 58.058687571s ago: executing program 5 (id=549): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 55.279801278s ago: executing program 5 (id=550): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xfe, 0xc9, 0x2, 0x80, "ad49658dea3f6f65"}}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}}, 0x0) 53.601563689s ago: executing program 5 (id=551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r5, 0xf, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, 0x0, 0x0, 0x88, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 52.399201769s ago: executing program 5 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRESOCT=0x0], 0x50}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.607047582s ago: executing program 37 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRESOCT=0x0], 0x50}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.21132617s ago: executing program 7 (id=583): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) 25.07493046s ago: executing program 7 (id=587): userfaultfd(0x801) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8900, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) 20.46437792s ago: executing program 7 (id=593): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$amidi(0x0, 0x4bc, 0x340) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000d00c2ff00"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 11.823899929s ago: executing program 9 (id=602): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 10.683749899s ago: executing program 9 (id=604): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffff7f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6]}) 10.244414564s ago: executing program 6 (id=605): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 9.679239643s ago: executing program 9 (id=606): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x82a42, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000cc0), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[], 0x0) 9.47446391s ago: executing program 6 (id=607): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100010, 0xffffffffffffffff, 0x7ba4c000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) close(0xffffffffffffffff) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000000400)=""/212, 0xd4}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000000, 0x0) 7.164595853s ago: executing program 7 (id=608): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="84", 0x1}], 0x1}}], 0x1, 0x4000c800) sendto$inet6(r0, &(0x7f0000000840)="2a9a43a9", 0x4, 0x3b00, 0x0, 0x0) 5.877795606s ago: executing program 9 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 5.785239476s ago: executing program 6 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8010) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmsg$inet(r1, 0x0, 0x4048081) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@empty, @initdev}, &(0x7f0000000200)=0xc) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x0) 4.491772975s ago: executing program 7 (id=611): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.05308981s ago: executing program 9 (id=612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 2.694889754s ago: executing program 6 (id=613): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x5237, &(0x7f0000009a80)={0x0, 0x25d1, 0x400, 0x0, 0x210}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1.662295388s ago: executing program 9 (id=614): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.37329368s ago: executing program 6 (id=615): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 439.417783ms ago: executing program 7 (id=616): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$amidi(0x0, 0x4bc, 0x340) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008000d00c2ff00"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 0s ago: executing program 6 (id=617): syz_usb_connect(0x0, 0x371, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237", @ANYRESOCT=0x0], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) kernel console output (not intermixed with test programs): ed parameter 'utf8' [ 305.509464][ T6189] exfat: Deprecated parameter 'utf8' [ 305.515675][ T6189] exfat: Deprecated parameter 'utf8' [ 306.033192][ T6189] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 306.698533][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.901898][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.911351][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.926312][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.983076][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.470298][ T67] team0 (unregistering): Port device team_slave_1 removed [ 308.183579][ T67] team0 (unregistering): Port device team_slave_0 removed [ 309.157915][ T5795] Bluetooth: hci3: command tx timeout [ 309.875802][ T6216] loop1: detected capacity change from 0 to 512 [ 310.565831][ T6216] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.81: bg 0: block 393: padding at end of block bitmap is not set [ 310.710767][ T6216] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 310.748398][ T6216] EXT4-fs (loop1): 2 truncates cleaned up [ 310.757277][ T6216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.956959][ T6227] loop3: detected capacity change from 0 to 128 [ 310.962353][ T6216] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.81: path /18/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 311.204266][ T6227] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 311.212827][ T6227] FAT-fs (loop3): Filesystem has been set read-only [ 311.214492][ T5795] Bluetooth: hci3: command tx timeout [ 311.329677][ T6227] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 311.613631][ T5810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.687885][ T6191] chnl_net:caif_netlink_parms(): no params data found [ 312.549730][ T6240] loop4: detected capacity change from 0 to 1764 [ 312.923245][ T6244] loop0: detected capacity change from 0 to 512 [ 313.064859][ T6244] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.89: corrupted in-inode xattr: invalid ea_ino [ 313.159204][ T6244] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.89: couldn't read orphan inode 15 (err -117) [ 313.210584][ T6244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.296105][ T5795] Bluetooth: hci3: command tx timeout [ 313.313320][ T6244] EXT4-fs error (device loop0): ext4_lookup:1789: inode #14: comm syz.0.89: invalid fast symlink length 39 [ 313.660725][ T6253] netlink: 68 bytes leftover after parsing attributes in process `syz.4.91'. [ 313.898373][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.956852][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.964432][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.974230][ T6191] bridge_slave_0: entered allmulticast mode [ 313.984600][ T6191] bridge_slave_0: entered promiscuous mode [ 314.068846][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.076370][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.084237][ T6191] bridge_slave_1: entered allmulticast mode [ 314.093596][ T6191] bridge_slave_1: entered promiscuous mode [ 314.352737][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.440636][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.633345][ T6264] loop0: detected capacity change from 0 to 512 [ 314.652552][ T6264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.764073][ T6264] EXT4-fs (loop0): 1 truncate cleaned up [ 314.775492][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.959160][ T6191] team0: Port device team_slave_0 added [ 315.094085][ T6191] team0: Port device team_slave_1 added [ 315.400091][ T5089] Bluetooth: hci3: command tx timeout [ 315.673519][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.680795][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.712667][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.814724][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.822098][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.854489][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.052143][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.123019][ T6282] kAFS: Can only specify source 'none' with -o dyn [ 317.029982][ T6191] hsr_slave_0: entered promiscuous mode [ 317.039957][ T6191] hsr_slave_1: entered promiscuous mode [ 317.048871][ T6191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.056774][ T6191] Cannot create hsr debugfs directory [ 317.221360][ T6296] netlink: 68 bytes leftover after parsing attributes in process `syz.4.104'. [ 317.467091][ T5089] Bluetooth: hci3: command 0x0405 tx timeout [ 318.831971][ T6191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.981563][ T6191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.038933][ T6191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.208867][ T6191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.682012][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.855222][ T6191] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.953504][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.961156][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.053719][ T6335] netlink: 68 bytes leftover after parsing attributes in process `syz.3.116'. [ 323.113309][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.120895][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.155927][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 323.390876][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 323.450843][ T5857] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.522418][ T5857] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.541568][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.550924][ T5857] usb 1-1: Product: syz [ 323.555315][ T5857] usb 1-1: Manufacturer: syz [ 323.560321][ T5857] usb 1-1: SerialNumber: syz [ 323.663753][ T5857] usb 1-1: config 0 descriptor?? [ 323.673825][ T6332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.894698][ T6341] loop4: detected capacity change from 0 to 1024 [ 324.010348][ T5857] usb 1-1: USB disconnect, device number 2 [ 324.992227][ T6357] capability: warning: `syz.1.122' uses deprecated v2 capabilities in a way that may be insecure [ 325.204444][ T6361] loop0: detected capacity change from 0 to 128 [ 325.438815][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.123932][ T6361] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.455186][ T6361] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.617741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.627287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 326.637780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.956828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 327.598166][ T6361] syz.0.123 (pid 6361) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 327.858278][ T6378] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 327.871883][ T6378] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 328.614522][ T6389] loop4: detected capacity change from 0 to 256 [ 328.719377][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.742174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 329.236211][ T6389] FAT-fs (loop4): Directory bread(block 64) failed [ 329.244028][ T6389] FAT-fs (loop4): Directory bread(block 65) failed [ 329.251222][ T6389] FAT-fs (loop4): Directory bread(block 66) failed [ 329.258117][ T6389] FAT-fs (loop4): Directory bread(block 67) failed [ 329.265036][ T6389] FAT-fs (loop4): Directory bread(block 68) failed [ 329.272177][ T6389] FAT-fs (loop4): Directory bread(block 69) failed [ 329.279235][ T6389] FAT-fs (loop4): Directory bread(block 70) failed [ 329.285987][ T6389] FAT-fs (loop4): Directory bread(block 71) failed [ 329.296346][ T6389] FAT-fs (loop4): Directory bread(block 72) failed [ 329.305609][ T6389] FAT-fs (loop4): Directory bread(block 73) failed [ 329.449956][ T6397] netlink: 68 bytes leftover after parsing attributes in process `syz.0.129'. [ 330.385488][ T6191] veth0_vlan: entered promiscuous mode [ 330.975262][ T6191] veth1_vlan: entered promiscuous mode [ 331.358010][ T6191] veth0_macvtap: entered promiscuous mode [ 331.460213][ T6191] veth1_macvtap: entered promiscuous mode [ 331.759615][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.924920][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.074424][ T6191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.091011][ T6191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.102165][ T6191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.111280][ T6191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.281717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 332.384152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 332.896037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 333.100972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 333.203302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 336.179193][ T6423] loop4: detected capacity change from 0 to 4096 [ 336.272665][ T6423] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 336.612189][ T6435] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 337.128274][ T6423] ntfs3(loop4): Inode r=19 is not in use! [ 337.134508][ T6423] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 337.240191][ T6423] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 337.452809][ T6423] ntfs3(loop4): ino=1b, mi_enum_attr [ 337.459114][ T6423] ntfs3(loop4): ino=1b, mi_enum_attr [ 337.759457][ T6423] ntfs3(loop4): ino=1e, mi_enum_attr [ 338.275786][ T6445] loop1: detected capacity change from 0 to 1024 [ 341.232377][ T4129] hfsplus: b-tree write err: -5, ino 4 [ 343.009765][ T5089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.019211][ T5089] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.029522][ T5089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.048981][ T5089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.059995][ T5089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.661865][ T1610] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 343.886130][ T1610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 343.896055][ T1610] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 343.905957][ T1610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 343.915953][ T1610] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 343.925940][ T1610] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 343.935328][ T1610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.280202][ T1610] usb 1-1: config 0 descriptor?? [ 344.553750][ T1610] hdpvr 1-1:0.0: firmware version 0x0 dated [ 344.561532][ T1610] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 345.528065][ T5089] Bluetooth: hci5: command tx timeout [ 347.174779][ T1610] hdpvr 1-1:0.0: Could not setup controls [ 347.182588][ T1610] hdpvr 1-1:0.0: registering videodev failed [ 347.269183][ T1610] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 347.379004][ T1610] usb 1-1: USB disconnect, device number 3 [ 347.574974][ T6509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.155'. [ 347.617171][ T5089] Bluetooth: hci5: command tx timeout [ 348.046317][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 349.797382][ T5089] Bluetooth: hci5: command tx timeout [ 351.338460][ T3885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.346565][ T3885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.542810][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.728055][ T3885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.737964][ T3885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.791665][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.847180][ T5089] Bluetooth: hci5: command tx timeout [ 352.062872][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.366471][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.375987][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.711906][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.541037][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.548922][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.556923][ T6476] bridge_slave_0: entered allmulticast mode [ 355.566282][ T6476] bridge_slave_0: entered promiscuous mode [ 355.663506][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.167'. [ 355.723914][ T1152] bridge_slave_1: left allmulticast mode [ 355.733039][ T1152] bridge_slave_1: left promiscuous mode [ 355.739652][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.874977][ T1152] bridge_slave_0: left allmulticast mode [ 355.881535][ T1152] bridge_slave_0: left promiscuous mode [ 355.888417][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.577431][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.684155][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.767418][ T1152] bond0 (unregistering): Released all slaves [ 359.081884][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.089816][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.097784][ T6476] bridge_slave_1: entered allmulticast mode [ 359.107216][ T6476] bridge_slave_1: entered promiscuous mode [ 359.758977][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 359.841353][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.040345][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.598922][ T1152] hsr_slave_0: left promiscuous mode [ 360.691401][ T1152] hsr_slave_1: left promiscuous mode [ 360.700540][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.708426][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.789327][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.797417][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.673370][ T1152] veth1_macvtap: left promiscuous mode [ 362.679386][ T1152] veth0_macvtap: left promiscuous mode [ 362.685311][ T1152] veth1_vlan: left promiscuous mode [ 362.691410][ T1152] veth0_vlan: left promiscuous mode [ 363.171998][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.178'. [ 366.471747][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 366.609041][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 368.119317][ T6614] syz.1.185 uses obsolete (PF_INET,SOCK_PACKET) [ 368.250161][ T6476] team0: Port device team_slave_0 added [ 368.304087][ T6476] team0: Port device team_slave_1 added [ 368.626276][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.638235][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.667884][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.866269][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.873774][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.900354][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.078607][ T6476] hsr_slave_0: entered promiscuous mode [ 369.091208][ T6476] hsr_slave_1: entered promiscuous mode [ 369.099832][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.108561][ T6476] Cannot create hsr debugfs directory [ 369.770978][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 369.779383][ T5089] Bluetooth: hci4: command 0x0405 tx timeout [ 369.785653][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 370.232244][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 374.518848][ T6476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.915053][ T6476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.969090][ T6637] sctp: failed to load transform for md5: -2 [ 375.203726][ T6476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.348241][ T6476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.213765][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.485930][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.353037][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.360781][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.652107][ T6663] capability: warning: `syz.0.198' uses 32-bit capabilities (legacy support in use) [ 380.709367][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.717138][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.908217][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.199'. [ 391.143431][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.312985][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 400.503557][ T6476] veth0_vlan: entered promiscuous mode [ 400.512988][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 400.679144][ T6476] veth1_vlan: entered promiscuous mode [ 401.129630][ T6476] veth0_macvtap: entered promiscuous mode [ 401.201847][ T6476] veth1_macvtap: entered promiscuous mode [ 401.424031][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.568574][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.393151][ T6476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.403276][ T6476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.412247][ T6476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.421159][ T6476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.543702][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 406.613714][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 407.753707][ T6811] input: syz1 as /devices/virtual/input/input5 [ 408.447467][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.458215][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.588127][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.639478][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.656551][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.728681][ T5795] Bluetooth: hci2: command tx timeout [ 411.813263][ T5857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 412.145023][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 412.234697][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 412.288428][ T5857] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.440345][ T5857] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.450062][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.458631][ T5857] usb 2-1: Product: syz [ 412.469458][ T5857] usb 2-1: Manufacturer: syz [ 412.474587][ T5857] usb 2-1: SerialNumber: syz [ 412.739523][ T5857] usb 2-1: config 0 descriptor?? [ 412.750309][ T6844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 412.817178][ T5795] Bluetooth: hci2: command tx timeout [ 412.864145][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 413.058122][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 413.183880][ T5857] usb 2-1: USB disconnect, device number 3 [ 413.801837][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.808731][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.094400][ T3731] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.434987][ T3731] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.859104][ T3731] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.897662][ T5795] Bluetooth: hci2: command tx timeout [ 415.314011][ T3731] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.970276][ T5795] Bluetooth: hci2: command tx timeout [ 417.156467][ T3731] bridge_slave_1: left allmulticast mode [ 417.163193][ T3731] bridge_slave_1: left promiscuous mode [ 417.175238][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.429772][ T3731] bridge_slave_0: left allmulticast mode [ 417.435795][ T3731] bridge_slave_0: left promiscuous mode [ 417.476953][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.759114][ T6891] block device autoloading is deprecated and will be removed. [ 421.767729][ T6891] syz.4.257: attempt to access beyond end of device [ 421.767729][ T6891] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 422.186587][ T3731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.425939][ T3731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.451222][ T3731] bond0 (unregistering): Released all slaves [ 423.649330][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.659592][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.667489][ T6808] bridge_slave_0: entered allmulticast mode [ 423.677010][ T6808] bridge_slave_0: entered promiscuous mode [ 423.802204][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.810818][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.818671][ T6808] bridge_slave_1: entered allmulticast mode [ 423.830168][ T1723] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 423.960610][ T6808] bridge_slave_1: entered promiscuous mode [ 424.028227][ T1723] usb 1-1: Using ep0 maxpacket: 32 [ 424.043329][ T1723] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 424.104311][ T3731] hsr_slave_0: left promiscuous mode [ 424.122074][ T1723] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 424.131594][ T1723] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 424.142491][ T1723] usb 1-1: Product: syz [ 424.147717][ T1723] usb 1-1: Manufacturer: syz [ 424.152592][ T1723] usb 1-1: SerialNumber: syz [ 424.188004][ T3731] hsr_slave_1: left promiscuous mode [ 424.190611][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 424.196300][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.210430][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.242079][ T6903] process 'syz.5.261' launched './file0' with NULL argv: empty string added [ 424.292417][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 424.304606][ T1723] usb 1-1: config 0 descriptor?? [ 424.316432][ T6896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 424.357836][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.365671][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.673097][ T3731] veth1_macvtap: left promiscuous mode [ 424.678997][ T3731] veth0_macvtap: left promiscuous mode [ 424.685005][ T3731] veth1_vlan: left promiscuous mode [ 424.690812][ T3731] veth0_vlan: left promiscuous mode [ 424.739371][ T1610] usb 1-1: USB disconnect, device number 4 [ 428.588701][ T3731] team0 (unregistering): Port device team_slave_1 removed [ 428.862975][ T3731] team0 (unregistering): Port device team_slave_0 removed [ 431.298427][ T5795] Bluetooth: hci3: command 0x0405 tx timeout [ 431.387743][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.447937][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.967026][ T6808] team0: Port device team_slave_0 added [ 432.053002][ T6808] team0: Port device team_slave_1 added [ 432.271177][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.278579][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.305024][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.392993][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.400476][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.427984][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.475572][ T6808] hsr_slave_0: entered promiscuous mode [ 435.480050][ T6808] hsr_slave_1: entered promiscuous mode [ 435.483067][ T6808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.483143][ T6808] Cannot create hsr debugfs directory [ 436.796915][ T1610] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 437.041751][ T1610] usb 1-1: Using ep0 maxpacket: 32 [ 437.064980][ T1610] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 437.118088][ T1610] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 437.128014][ T1610] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 437.136446][ T1610] usb 1-1: Product: syz [ 437.144777][ T1610] usb 1-1: Manufacturer: syz [ 437.150973][ T1610] usb 1-1: SerialNumber: syz [ 437.188171][ T1610] usb 1-1: config 0 descriptor?? [ 437.196418][ T6962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 437.592745][ T1610] usb 1-1: USB disconnect, device number 5 [ 437.682548][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.276'. [ 437.801397][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 437.973589][ T6808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.085055][ T6808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.232203][ T6808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.300023][ T6808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.754734][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.059172][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.192199][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.200194][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.325634][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.333573][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.872221][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.288'. [ 444.730144][ T1723] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 445.029463][ T1723] usb 2-1: Using ep0 maxpacket: 32 [ 445.103636][ T1723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 445.272682][ T1723] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 445.282133][ T1723] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 445.290732][ T1723] usb 2-1: Product: syz [ 445.295043][ T1723] usb 2-1: Manufacturer: syz [ 445.299880][ T1723] usb 2-1: SerialNumber: syz [ 445.552819][ T1723] usb 2-1: config 0 descriptor?? [ 445.562813][ T7018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 445.970321][ T1723] usb 2-1: USB disconnect, device number 4 [ 447.950309][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.477127][ T5856] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 452.583735][ T5795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.622393][ T5795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.633110][ T5795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.686148][ T5795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.702096][ T5795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.714891][ T5856] usb 6-1: Using ep0 maxpacket: 32 [ 452.772541][ T5856] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 452.859960][ T5856] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 452.869668][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 452.878728][ T5856] usb 6-1: Product: syz [ 452.883213][ T5856] usb 6-1: Manufacturer: syz [ 452.888910][ T5856] usb 6-1: SerialNumber: syz [ 452.901018][ T5856] usb 6-1: config 0 descriptor?? [ 452.912339][ T7074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 455.493502][ T5795] Bluetooth: hci5: command tx timeout [ 457.858877][ T5801] Bluetooth: hci5: command tx timeout [ 458.380305][ T5856] usb 6-1: USB disconnect, device number 2 [ 459.663561][ T6808] veth0_vlan: entered promiscuous mode [ 460.017678][ T5795] Bluetooth: hci5: command tx timeout [ 461.745727][ T6808] veth1_vlan: entered promiscuous mode [ 462.088620][ T5795] Bluetooth: hci5: command tx timeout [ 462.148363][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 462.336074][ T6808] veth0_macvtap: entered promiscuous mode [ 462.410781][ T6808] veth1_macvtap: entered promiscuous mode [ 462.868179][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.138345][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.670973][ T6808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.680106][ T6808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.690383][ T6808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.699675][ T6808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.262487][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.274773][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.284209][ T7076] bridge_slave_0: entered allmulticast mode [ 468.292565][ T7076] bridge_slave_0: entered promiscuous mode [ 468.824465][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.833897][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.841624][ T7076] bridge_slave_1: entered allmulticast mode [ 468.850039][ T7076] bridge_slave_1: entered promiscuous mode [ 470.034462][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.211240][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.231581][ T7076] team0: Port device team_slave_0 added [ 471.411453][ T7076] team0: Port device team_slave_1 added [ 471.863360][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.870700][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.898665][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.323334][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 472.333244][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 472.349535][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 472.383903][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.403810][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.454555][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.461855][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.493621][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.263230][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.270265][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.586263][ T7076] hsr_slave_0: entered promiscuous mode [ 475.599821][ T7076] hsr_slave_1: entered promiscuous mode [ 475.608134][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.615806][ T7076] Cannot create hsr debugfs directory [ 476.000477][ T5856] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 476.635678][ T5801] Bluetooth: hci6: command tx timeout [ 476.680449][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.759836][ T5856] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.773987][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.783288][ T5856] usb 2-1: Product: syz [ 476.787825][ T5856] usb 2-1: Manufacturer: syz [ 476.792720][ T5856] usb 2-1: SerialNumber: syz [ 476.821980][ T5856] usb 2-1: config 0 descriptor?? [ 477.293956][ T5856] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 478.818898][ T5801] Bluetooth: hci6: command tx timeout [ 478.952325][ T5856] usb 2-1: USB disconnect, device number 5 [ 479.240567][ T7000] udevd[7000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.428702][ T5801] block nbd0: Receive control failed (result -104) [ 480.768071][ T7076] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 480.794964][ T7076] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 480.820161][ T7076] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 480.845092][ T7076] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 481.041704][ T5801] Bluetooth: hci6: command tx timeout [ 481.561304][ T7167] chnl_net:caif_netlink_parms(): no params data found [ 482.818317][ T1152] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.286799][ T5801] Bluetooth: hci6: command tx timeout [ 483.419246][ T1152] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.720047][ T1152] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.965536][ T1152] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.205857][ T1152] bridge_slave_1: left allmulticast mode [ 486.215761][ T1152] bridge_slave_1: left promiscuous mode [ 486.222184][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.420413][ T1152] bridge_slave_0: left allmulticast mode [ 486.426437][ T1152] bridge_slave_0: left promiscuous mode [ 486.436224][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.438050][ T5856] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 490.727292][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 491.084838][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.224667][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.328025][ T1152] bond0 (unregistering): Released all slaves [ 491.401591][ T5856] usb 1-1: device descriptor read/all, error -71 [ 491.992996][ T1152] hsr_slave_0: left promiscuous mode [ 492.015734][ T1152] hsr_slave_1: left promiscuous mode [ 492.029510][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.037290][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.150757][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.158569][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.310423][ T1152] veth1_macvtap: left promiscuous mode [ 492.316255][ T1152] veth0_macvtap: left promiscuous mode [ 492.322697][ T1152] veth1_vlan: left promiscuous mode [ 492.328361][ T1152] veth0_vlan: left promiscuous mode [ 492.467452][ T5801] block nbd1: Receive control failed (result -104) [ 495.863508][ T7253] IPVS: length: 24 != 6552 [ 498.507246][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 498.535245][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 500.287788][ T7275] Bluetooth: MGMT ver 1.23 [ 500.301476][ T7275] 9pnet_fd: Insufficient options for proto=fd [ 500.727231][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.741472][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.749356][ T7167] bridge_slave_0: entered allmulticast mode [ 500.759027][ T7167] bridge_slave_0: entered promiscuous mode [ 501.124531][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.291128][ T7283] nbd: must specify an index to disconnect [ 501.314146][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.378882][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.386454][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.394265][ T7167] bridge_slave_1: entered allmulticast mode [ 501.403476][ T7167] bridge_slave_1: entered promiscuous mode [ 501.440394][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.447983][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.480410][ T5801] block nbd2: Receive control failed (result -104) [ 501.568334][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.575768][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.811655][ T7167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.075387][ T7167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.428009][ T7167] team0: Port device team_slave_0 added [ 503.523382][ T7167] team0: Port device team_slave_1 added [ 504.992549][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.999752][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.028055][ T7167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.201507][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.414741][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.423737][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.453553][ T7167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.029619][ T7309] xt_CT: No such helper "snmp" [ 506.471291][ T7167] hsr_slave_0: entered promiscuous mode [ 506.480125][ T7167] hsr_slave_1: entered promiscuous mode [ 506.487853][ T7167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.495527][ T7167] Cannot create hsr debugfs directory [ 509.979999][ T7167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 510.153649][ T7167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 510.363285][ T7167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 510.542407][ T7167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.963198][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.148087][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.485883][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.213100][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.228966][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.285509][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.297831][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.315893][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.327514][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.457717][ T12] bridge_slave_1: left allmulticast mode [ 515.463756][ T12] bridge_slave_1: left promiscuous mode [ 515.470716][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.610962][ T12] bridge_slave_0: left allmulticast mode [ 515.617393][ T12] bridge_slave_0: left promiscuous mode [ 515.623578][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.476913][ T5795] Bluetooth: hci1: command tx timeout [ 518.465393][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.483272][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.500592][ T5089] Bluetooth: hci1: command tx timeout [ 518.518758][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.535856][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.559880][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.089859][ T7362] loop1: detected capacity change from 0 to 32768 [ 519.099660][ T7362] XFS: attr2 mount option is deprecated. [ 519.126760][ T7362] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 519.453379][ T7362] XFS (loop1): Ending clean mount [ 519.490836][ T7362] XFS (loop1): Quotacheck needed: Please wait. [ 519.599153][ T7362] XFS (loop1): Quotacheck: Done. [ 519.829806][ T5810] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 520.329579][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.382285][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.443101][ T12] bond0 (unregistering): Released all slaves [ 520.577369][ T5801] Bluetooth: hci1: command tx timeout [ 520.650264][ T5801] Bluetooth: hci2: command tx timeout [ 521.887208][ T12] hsr_slave_0: left promiscuous mode [ 521.940704][ T12] hsr_slave_1: left promiscuous mode [ 521.948128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.955770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.060096][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.068116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.142294][ T12] veth1_macvtap: left promiscuous mode [ 522.149136][ T12] veth0_macvtap: left promiscuous mode [ 522.154885][ T12] veth1_vlan: left promiscuous mode [ 522.160472][ T12] veth0_vlan: left promiscuous mode [ 522.652160][ T5801] Bluetooth: hci1: command tx timeout [ 522.736972][ T5801] Bluetooth: hci2: command tx timeout [ 524.817071][ T5801] Bluetooth: hci2: command tx timeout [ 526.039833][ T12] team0 (unregistering): Port device team_slave_1 removed [ 526.073711][ T12] team0 (unregistering): Port device team_slave_0 removed [ 526.782222][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.910314][ T5801] Bluetooth: hci2: command tx timeout [ 527.140242][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 527.240722][ T7167] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.503753][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.511356][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.640900][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.648658][ T3885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.287054][ T7405] loop5: detected capacity change from 0 to 32768 [ 528.295850][ T7405] XFS: attr2 mount option is deprecated. [ 529.092985][ T7405] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 530.083103][ T5855] IPVS: starting estimator thread 0... [ 530.797546][ T7421] IPVS: using max 240 ests per chain, 12000 per kthread [ 530.924149][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 531.190645][ T7405] XFS (loop5): Ending clean mount [ 531.221247][ T7405] XFS (loop5): Quotacheck needed: Please wait. [ 531.324182][ T7405] XFS (loop5): Quotacheck: Done. [ 531.660431][ T6191] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 532.382358][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.390056][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.398728][ T7352] bridge_slave_0: entered allmulticast mode [ 532.409066][ T7352] bridge_slave_0: entered promiscuous mode [ 532.573464][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.584150][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.593464][ T7352] bridge_slave_1: entered allmulticast mode [ 532.601875][ T7352] bridge_slave_1: entered promiscuous mode [ 532.698797][ T5089] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 532.728183][ T5089] Bluetooth: hci5: command 0xfc11 tx timeout [ 532.730051][ T5801] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 532.735678][ T5089] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 532.777226][ T7419] sp0: Synchronizing with TNC [ 532.886555][ T5801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 533.107930][ T5801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 533.166088][ T5801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 535.368628][ T5801] Bluetooth: hci7: command tx timeout [ 536.434171][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.695721][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.720340][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.728417][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.392248][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 537.541356][ T5801] Bluetooth: hci7: command tx timeout [ 537.620246][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 537.644064][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.657075][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.667409][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.680076][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.694204][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.706036][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.771727][ T12] bridge_slave_1: left allmulticast mode [ 537.780751][ T12] bridge_slave_1: left promiscuous mode [ 537.787839][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.956163][ T12] bridge_slave_0: left allmulticast mode [ 537.962280][ T12] bridge_slave_0: left promiscuous mode [ 537.971500][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.890312][ T9] usb 6-1: GET_CAPABILITIES returned 2f [ 538.896249][ T9] usbtmc 6-1:16.0: can't read capabilities [ 539.060605][ T9] usb 6-1: USB disconnect, device number 3 [ 539.613610][ T5801] Bluetooth: hci7: command tx timeout [ 540.124428][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.143949][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.164258][ T12] bond0 (unregistering): Released all slaves [ 540.487579][ T7352] team0: Port device team_slave_0 added [ 541.200074][ T7352] team0: Port device team_slave_1 added [ 541.212421][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.222704][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.230625][ T7367] bridge_slave_0: entered allmulticast mode [ 541.240085][ T7367] bridge_slave_0: entered promiscuous mode [ 541.687033][ T5801] Bluetooth: hci7: command tx timeout [ 541.992938][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.008045][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.015873][ T7367] bridge_slave_1: entered allmulticast mode [ 542.025664][ T7367] bridge_slave_1: entered promiscuous mode [ 542.112076][ T12] hsr_slave_0: left promiscuous mode [ 542.124606][ T12] hsr_slave_1: left promiscuous mode [ 542.136265][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.193414][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.068057][ T12] team0 (unregistering): Port device team_slave_1 removed [ 546.108153][ T12] team0 (unregistering): Port device team_slave_0 removed [ 546.374046][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.381279][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.412075][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.515868][ T30] audit: type=1326 audit(1748297231.054:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.5.387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f537318e969 code=0x0 [ 547.679651][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.688964][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.715963][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.061195][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.339010][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.772531][ T7352] hsr_slave_0: entered promiscuous mode [ 548.782609][ T7352] hsr_slave_1: entered promiscuous mode [ 548.791344][ T7352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.799495][ T7352] Cannot create hsr debugfs directory [ 548.835064][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 549.229451][ T7367] team0: Port device team_slave_0 added [ 549.419201][ T7367] team0: Port device team_slave_1 added [ 549.716856][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 549.837214][ T30] audit: type=1326 audit(1748297233.824:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f498e969 code=0x7fc00000 [ 549.988611][ T5855] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.105628][ T5855] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 550.115244][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.125496][ T5855] usb 6-1: Product: syz [ 550.130235][ T5855] usb 6-1: Manufacturer: syz [ 550.135090][ T5855] usb 6-1: SerialNumber: syz [ 550.266103][ T1152] bridge_slave_1: left allmulticast mode [ 550.272842][ T1152] bridge_slave_1: left promiscuous mode [ 550.281214][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.366483][ T1152] bridge_slave_0: left allmulticast mode [ 550.375639][ T1152] bridge_slave_0: left promiscuous mode [ 550.382468][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.659565][ T5855] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 551.027246][ T5855] usb 6-1: USB disconnect, device number 4 [ 551.069404][ T5855] usblp0: removed [ 551.079045][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.157537][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.216338][ T1152] bond0 (unregistering): Released all slaves [ 551.317722][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.330110][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.356907][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.662022][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.669532][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.696139][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.800351][ T1152] hsr_slave_0: left promiscuous mode [ 551.815295][ T1152] hsr_slave_1: left promiscuous mode [ 551.825078][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.886097][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.072992][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 554.318881][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 555.950338][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.960389][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.968276][ T7432] bridge_slave_0: entered allmulticast mode [ 555.977831][ T7432] bridge_slave_0: entered promiscuous mode [ 556.250537][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.258221][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.265786][ T7432] bridge_slave_1: entered allmulticast mode [ 556.276206][ T7432] bridge_slave_1: entered promiscuous mode [ 556.322203][ T7367] hsr_slave_0: entered promiscuous mode [ 556.338119][ T7367] hsr_slave_1: entered promiscuous mode [ 556.346967][ T7367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.354682][ T7367] Cannot create hsr debugfs directory [ 556.403055][ T7352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.742707][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.799360][ T7352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 557.158370][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.169561][ T7352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 557.508358][ T7352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 557.662159][ T7525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.398'. [ 558.002777][ T7432] team0: Port device team_slave_0 added [ 558.084509][ T7432] team0: Port device team_slave_1 added [ 558.232125][ T1117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.434317][ T1117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.632988][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.640268][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.668277][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.785592][ T1117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.830449][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.839218][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.866978][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.988619][ T1117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.576403][ T7432] hsr_slave_0: entered promiscuous mode [ 559.587220][ T7432] hsr_slave_1: entered promiscuous mode [ 559.596000][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.606500][ T7432] Cannot create hsr debugfs directory [ 560.292870][ T1117] bridge_slave_1: left allmulticast mode [ 560.300913][ T1117] bridge_slave_1: left promiscuous mode [ 560.309897][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.413854][ T1117] bridge_slave_0: left allmulticast mode [ 560.420830][ T1117] bridge_slave_0: left promiscuous mode [ 560.432782][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.958851][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.974393][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.990159][ T1117] bond0 (unregistering): Released all slaves [ 561.683762][ T7367] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 561.896530][ T7546] 9pnet_fd: Insufficient options for proto=fd [ 561.903542][ T7367] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.019962][ T1117] hsr_slave_0: left promiscuous mode [ 562.046175][ T1117] hsr_slave_1: left promiscuous mode [ 562.054561][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.062540][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.108289][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.116033][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.175588][ T1117] veth1_macvtap: left promiscuous mode [ 562.181800][ T1117] veth0_macvtap: left promiscuous mode [ 562.188032][ T1117] veth1_vlan: left promiscuous mode [ 562.193638][ T1117] veth0_vlan: left promiscuous mode [ 562.668979][ T7551] autofs: Unknown parameter 'fd0x0000000000000000' [ 563.038562][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 563.082719][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 563.570083][ T7367] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.688136][ T7367] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 564.043099][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.293669][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.411202][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.418928][ T6741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.585171][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.592857][ T6741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.394527][ T7432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 565.496073][ T7432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 565.586249][ T7432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 565.681839][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.729393][ T7432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.968061][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.079620][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.087588][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.249481][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.257223][ T3885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.015474][ T7576] 9pnet_fd: Insufficient options for proto=fd [ 567.418541][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.583684][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.713089][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.791485][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.799236][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.994450][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.002171][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.355160][ T7583] autofs: Unknown parameter 'fd0x0000000000000000' [ 569.218838][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.832314][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.992562][ T7352] veth0_vlan: entered promiscuous mode [ 571.104285][ T5856] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 571.146824][ T7352] veth1_vlan: entered promiscuous mode [ 571.379253][ T5856] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 571.389524][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.400784][ T5856] usb 2-1: config 0 has no interface number 0 [ 571.407360][ T5856] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 571.419294][ T5856] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 571.430720][ T5856] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.438678][ T7352] veth0_macvtap: entered promiscuous mode [ 571.441116][ T5856] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.460309][ T5856] usb 2-1: config 0 interface 52 has no altsetting 0 [ 571.591960][ T7352] veth1_macvtap: entered promiscuous mode [ 571.934524][ T5856] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 571.944261][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 571.953241][ T5856] usb 2-1: Product: syz [ 571.957823][ T5856] usb 2-1: SerialNumber: syz [ 572.071124][ T5856] usb 2-1: config 0 descriptor?? [ 573.418430][ T5856] usb 2-1: USB disconnect, device number 6 [ 574.049656][ T7367] veth0_vlan: entered promiscuous mode [ 574.200409][ T7367] veth1_vlan: entered promiscuous mode [ 574.410625][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.430274][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.450406][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.501862][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.516359][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.760432][ T7367] veth0_macvtap: entered promiscuous mode [ 574.829294][ T7367] veth1_macvtap: entered promiscuous mode [ 575.598863][ T7432] veth0_vlan: entered promiscuous mode [ 575.804676][ T7432] veth1_vlan: entered promiscuous mode [ 576.445002][ T7432] veth0_macvtap: entered promiscuous mode [ 576.758578][ T5795] Bluetooth: hci0: command tx timeout [ 576.788975][ T7432] veth1_macvtap: entered promiscuous mode [ 576.990102][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 577.001300][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.089109][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 577.117443][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 577.153230][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 577.172492][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 577.179458][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.335908][ T7432] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.345196][ T7432] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.354541][ T7432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.363854][ T7432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.797519][ T7626] chnl_net:caif_netlink_parms(): no params data found [ 578.810533][ T5801] Bluetooth: hci0: command tx timeout [ 579.383406][ T5801] Bluetooth: hci5: command tx timeout [ 580.540828][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 580.757230][ T1152] bridge_slave_1: left allmulticast mode [ 580.763261][ T1152] bridge_slave_1: left promiscuous mode [ 580.771743][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.888514][ T1152] bridge_slave_0: left allmulticast mode [ 580.894449][ T1152] bridge_slave_0: left promiscuous mode [ 580.894789][ T5801] Bluetooth: hci0: command tx timeout [ 580.901575][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.459967][ T5801] Bluetooth: hci5: command tx timeout [ 581.678710][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.713737][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.737296][ T1152] bond0 (unregistering): Released all slaves [ 582.141452][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.151770][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.159671][ T7626] bridge_slave_0: entered allmulticast mode [ 582.169983][ T7626] bridge_slave_0: entered promiscuous mode [ 582.274249][ T1152] hsr_slave_0: left promiscuous mode [ 582.291864][ T1152] hsr_slave_1: left promiscuous mode [ 582.299884][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.363242][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.441190][ T1152] veth1_macvtap: left promiscuous mode [ 582.449447][ T1152] veth0_macvtap: left promiscuous mode [ 582.455455][ T1152] veth1_vlan: left promiscuous mode [ 582.461202][ T1152] veth0_vlan: left promiscuous mode [ 582.967361][ T5801] Bluetooth: hci0: command tx timeout [ 583.398087][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 583.424416][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 583.527106][ T5801] Bluetooth: hci5: command tx timeout [ 583.819201][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.827168][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.835146][ T7626] bridge_slave_1: entered allmulticast mode [ 583.844990][ T7626] bridge_slave_1: entered promiscuous mode [ 584.131632][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.251463][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.618435][ T7626] team0: Port device team_slave_0 added [ 584.737778][ T7626] team0: Port device team_slave_1 added [ 585.180095][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.187425][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.216099][ T7626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.447408][ T5855] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 585.569752][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.579010][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.605095][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.613381][ T7626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.648277][ T5801] Bluetooth: hci5: command tx timeout [ 586.037567][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 586.152951][ T5855] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 586.162511][ T5855] usb 6-1: config 0 has no interface number 0 [ 586.212878][ T5855] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 586.222353][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.235354][ T5855] usb 6-1: Product: syz [ 586.242500][ T5855] usb 6-1: Manufacturer: syz [ 586.248061][ T5855] usb 6-1: SerialNumber: syz [ 586.364871][ T7626] hsr_slave_0: entered promiscuous mode [ 586.375337][ T7626] hsr_slave_1: entered promiscuous mode [ 586.404244][ T5855] usb 6-1: config 0 descriptor?? [ 586.524405][ T5855] smsc95xx v2.0.0 [ 586.693449][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.701451][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.709399][ T7652] bridge_slave_0: entered allmulticast mode [ 586.719388][ T7652] bridge_slave_0: entered promiscuous mode [ 586.874205][ T5855] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 586.885466][ T5855] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 586.930742][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.938708][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.946459][ T7652] bridge_slave_1: entered allmulticast mode [ 586.959141][ T7652] bridge_slave_1: entered promiscuous mode [ 587.363035][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.507793][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.747264][ T7652] team0: Port device team_slave_0 added [ 588.969319][ T7652] team0: Port device team_slave_1 added [ 589.084771][ T5855] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 589.097030][ T5855] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 589.578215][ T5855] usb 6-1: USB disconnect, device number 5 [ 590.010753][ T1152] bridge_slave_1: left allmulticast mode [ 590.019413][ T1152] bridge_slave_1: left promiscuous mode [ 590.030662][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.184338][ T1152] bridge_slave_0: left allmulticast mode [ 590.191422][ T1152] bridge_slave_0: left promiscuous mode [ 590.199166][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.189173][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 592.199649][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 592.209669][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 592.228966][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 592.244036][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 592.255434][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.368404][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.409669][ T1152] bond0 (unregistering): Released all slaves [ 592.679700][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.689350][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.716531][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.677678][ T1152] hsr_slave_0: left promiscuous mode [ 593.745723][ T1152] hsr_slave_1: left promiscuous mode [ 593.753799][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.858856][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.967339][ T1152] veth1_macvtap: left promiscuous mode [ 593.973128][ T1152] veth0_macvtap: left promiscuous mode [ 593.979456][ T1152] veth1_vlan: left promiscuous mode [ 593.985178][ T1152] veth0_vlan: left promiscuous mode [ 594.343403][ T5795] Bluetooth: hci1: command tx timeout [ 594.867598][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 594.967940][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 595.198892][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.207989][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.237664][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.453038][ T5795] Bluetooth: hci1: command tx timeout [ 596.620311][ T7652] hsr_slave_0: entered promiscuous mode [ 596.630442][ T7652] hsr_slave_1: entered promiscuous mode [ 596.639166][ T7652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.647088][ T7652] Cannot create hsr debugfs directory [ 597.908119][ T7626] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 597.965663][ T7626] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 598.129756][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.136458][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.162196][ T7626] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 598.300570][ T7626] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 598.506844][ T5795] Bluetooth: hci1: command tx timeout [ 598.561707][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 599.313644][ T7770] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 599.547733][ T7770] usb 6-1: Using ep0 maxpacket: 8 [ 599.808237][ T6740] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.866144][ T7770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 599.875741][ T7770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.884150][ T7770] usb 6-1: Product: syz [ 599.888702][ T7770] usb 6-1: Manufacturer: syz [ 599.893558][ T7770] usb 6-1: SerialNumber: syz [ 599.940969][ T7770] usb 6-1: config 0 descriptor?? [ 600.220279][ T7770] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 600.239448][ T6740] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.567076][ T5795] Bluetooth: hci1: command tx timeout [ 600.831850][ T6740] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.203858][ T6740] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.691322][ T7770] usb write operation failed. (-71) [ 601.732353][ T7770] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 601.744361][ T7770] dvbdev: DVB: registering new adapter (Terratec H7) [ 601.751662][ T7770] usb 6-1: media controller created [ 601.956839][ T7770] usb read operation failed. (-71) [ 601.963908][ T7770] usb write operation failed. (-71) [ 602.055262][ T7770] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 602.243337][ T7770] usb 6-1: USB disconnect, device number 6 [ 602.541918][ T7652] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 602.868428][ T7652] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.961198][ T6740] bridge_slave_1: left allmulticast mode [ 602.967623][ T6740] bridge_slave_1: left promiscuous mode [ 602.974320][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.077993][ T6740] bridge_slave_0: left allmulticast mode [ 603.083980][ T6740] bridge_slave_0: left promiscuous mode [ 603.091043][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.799285][ T6740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.858772][ T6740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.893654][ T6740] bond0 (unregistering): Released all slaves [ 603.958377][ T7652] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 604.221015][ T6740] hsr_slave_0: left promiscuous mode [ 604.247883][ T6740] hsr_slave_1: left promiscuous mode [ 604.259503][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.267435][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.370013][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.378042][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.500639][ T6740] veth1_macvtap: left promiscuous mode [ 604.506466][ T6740] veth0_macvtap: left promiscuous mode [ 604.512780][ T6740] veth1_vlan: left promiscuous mode [ 604.518573][ T6740] veth0_vlan: left promiscuous mode [ 605.583562][ T6740] team0 (unregistering): Port device team_slave_1 removed [ 605.773969][ T6740] team0 (unregistering): Port device team_slave_0 removed [ 606.124748][ T7652] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 606.382879][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.391589][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.399718][ T7748] bridge_slave_0: entered allmulticast mode [ 606.412518][ T7748] bridge_slave_0: entered promiscuous mode [ 606.523911][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.531841][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.539959][ T7748] bridge_slave_1: entered allmulticast mode [ 606.549881][ T7748] bridge_slave_1: entered promiscuous mode [ 606.968818][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.085916][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.181777][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.480648][ T7748] team0: Port device team_slave_0 added [ 607.587545][ T7748] team0: Port device team_slave_1 added [ 607.914065][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.922032][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.951840][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.990730][ T7626] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.125145][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.132848][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.289134][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.296886][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.799621][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.807136][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.833912][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.358204][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.920683][ T7748] hsr_slave_0: entered promiscuous mode [ 609.931317][ T7748] hsr_slave_1: entered promiscuous mode [ 609.941059][ T7748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.949150][ T7748] Cannot create hsr debugfs directory [ 610.012892][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.147816][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.155434][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.356523][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.364299][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.046159][ T7626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.752866][ T7748] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.885121][ T7748] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.150272][ T7748] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.353830][ T7748] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 618.685455][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.053225][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.119992][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.286382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.294085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.399229][ T7626] veth0_vlan: entered promiscuous mode [ 619.527993][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.535641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.583974][ T7626] veth1_vlan: entered promiscuous mode [ 619.973889][ T7748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.124582][ T7626] veth0_macvtap: entered promiscuous mode [ 620.282986][ T7626] veth1_macvtap: entered promiscuous mode [ 620.585546][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.722790][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.868081][ T7626] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.878887][ T7626] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.888996][ T7626] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.898228][ T7626] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.964931][ T7924] 9pnet_fd: Insufficient options for proto=fd [ 626.294044][ T7748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.489111][ T7652] veth0_vlan: entered promiscuous mode [ 626.592579][ T7652] veth1_vlan: entered promiscuous mode [ 626.882138][ T7958] No control pipe specified [ 626.921560][ T7652] veth0_macvtap: entered promiscuous mode [ 626.975522][ T7652] veth1_macvtap: entered promiscuous mode [ 627.210842][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.382064][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.511151][ T7652] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.520687][ T7652] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.530541][ T7652] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.539820][ T7652] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.207710][ T5857] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 629.387570][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 629.415972][ T5857] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 629.449912][ T5857] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 629.459817][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 629.468353][ T5857] usb 6-1: Product: syz [ 629.472668][ T5857] usb 6-1: Manufacturer: syz [ 629.477511][ T5857] usb 6-1: SerialNumber: syz [ 629.567541][ T5857] usb 6-1: config 0 descriptor?? [ 629.575253][ T7984] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 629.901886][ T1610] usb 6-1: USB disconnect, device number 7 [ 630.199671][ T7748] veth0_vlan: entered promiscuous mode [ 630.329343][ T7748] veth1_vlan: entered promiscuous mode [ 630.729688][ T7748] veth0_macvtap: entered promiscuous mode [ 630.797840][ T7748] veth1_macvtap: entered promiscuous mode [ 631.047921][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.162087][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.278883][ T7748] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.290465][ T7748] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.300355][ T7748] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.309528][ T7748] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.340421][ T8003] 9pnet_fd: Insufficient options for proto=fd [ 633.199459][ T5857] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 633.388578][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 633.451980][ T5857] usb 6-1: config 8 has an invalid interface number: 203 but max is 0 [ 633.460789][ T5857] usb 6-1: config 8 has no interface number 0 [ 633.467362][ T5857] usb 6-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 633.479796][ T5857] usb 6-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 633.491586][ T5857] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 633.502034][ T5857] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 633.512515][ T5857] usb 6-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 633.522662][ T5857] usb 6-1: config 8 interface 203 has no altsetting 0 [ 633.607926][ T5857] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 633.617398][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.625650][ T5857] usb 6-1: Product: syz [ 633.630105][ T5857] usb 6-1: Manufacturer: syz [ 633.634840][ T5857] usb 6-1: SerialNumber: syz [ 633.693187][ T8020] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 633.713073][ T8020] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 634.138086][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.148102][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.364691][ C0] port100 6-1:8.203: NFC: Urb failure (status -71) [ 634.373414][ C0] port100 6-1:8.203: NFC: Urb failure (status -71) [ 634.407688][ T5857] port100 6-1:8.203: NFC: Could not get supported command types [ 634.484152][ T5857] usb 6-1: USB disconnect, device number 8 [ 634.529110][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.540130][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.560270][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.580726][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.592507][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.747201][ T5801] Bluetooth: hci2: command tx timeout [ 637.985188][ T5795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 638.004682][ T5795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 638.058955][ T5795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 638.074088][ T5795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 638.088112][ T5795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 638.440424][ T8028] chnl_net:caif_netlink_parms(): no params data found [ 638.807008][ T5801] Bluetooth: hci2: command tx timeout [ 639.144047][ T8057] No control pipe specified [ 639.557012][ T7944] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.787562][ T7944] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.168147][ T7944] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.248861][ T5801] Bluetooth: hci6: command tx timeout [ 640.490898][ T7944] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.888269][ T5801] Bluetooth: hci2: command tx timeout [ 641.210499][ T7944] bridge_slave_1: left allmulticast mode [ 641.216916][ T7944] bridge_slave_1: left promiscuous mode [ 641.225308][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.329436][ T7944] bridge_slave_0: left allmulticast mode [ 641.335346][ T7944] bridge_slave_0: left promiscuous mode [ 641.342013][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.155087][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.177589][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.200711][ T7944] bond0 (unregistering): Released all slaves [ 642.354150][ T5801] Bluetooth: hci6: command tx timeout [ 642.620609][ T7944] hsr_slave_0: left promiscuous mode [ 642.687439][ T7944] hsr_slave_1: left promiscuous mode [ 642.695701][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.703662][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.750155][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.760755][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.960544][ T7944] veth1_macvtap: left promiscuous mode [ 642.968710][ T7944] veth0_macvtap: left promiscuous mode [ 642.974519][ T7944] veth1_vlan: left promiscuous mode [ 642.980072][ T7944] veth0_vlan: left promiscuous mode [ 642.989905][ T5801] Bluetooth: hci2: command tx timeout [ 644.136052][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 644.252902][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 644.441428][ T5801] Bluetooth: hci6: command tx timeout [ 644.455233][ T5857] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 644.571395][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 644.599075][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.609741][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.617786][ T8028] bridge_slave_0: entered allmulticast mode [ 644.627653][ T8028] bridge_slave_0: entered promiscuous mode [ 644.715179][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.743145][ T5857] usb 6-1: Using ep0 maxpacket: 8 [ 644.759645][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.785663][ T5857] usb 6-1: unable to get BOS descriptor or descriptor too short [ 644.809006][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.816942][ T5857] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 644.828900][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 644.840062][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 644.850084][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 644.860261][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 644.870211][ T5857] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 644.880153][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 644.890181][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 645.106148][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.121587][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.169604][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.177381][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.185225][ T8028] bridge_slave_1: entered allmulticast mode [ 645.195398][ T8028] bridge_slave_1: entered promiscuous mode [ 645.478515][ T6741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.487315][ T6741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.527696][ T5857] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 645.537273][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.545553][ T5857] usb 6-1: Product: syz [ 645.550540][ T5857] usb 6-1: Manufacturer: syz [ 645.555395][ T5857] usb 6-1: SerialNumber: syz [ 645.680922][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.689709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.745094][ T5857] usb 6-1: config 0 descriptor?? [ 645.805994][ T5857] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.047739][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.297701][ T7944] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.348114][ T5857] usb 6-1: USB disconnect, device number 9 [ 646.394789][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.494616][ T7944] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.517505][ T5801] Bluetooth: hci6: command tx timeout [ 646.582418][ T6928] udevd[6928]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.789551][ T7944] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.893729][ T8028] team0: Port device team_slave_0 added [ 647.015162][ T8028] team0: Port device team_slave_1 added [ 647.218480][ T5801] Bluetooth: hci0: command tx timeout [ 647.230780][ T7944] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.702839][ T8113] No control pipe specified [ 648.757425][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.764642][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.791305][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.291252][ T5801] Bluetooth: hci0: command tx timeout [ 649.567523][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.574752][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.601419][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.664558][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.672381][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.680421][ T8051] bridge_slave_0: entered allmulticast mode [ 649.689236][ T8051] bridge_slave_0: entered promiscuous mode [ 649.701458][ T7944] bridge_slave_1: left allmulticast mode [ 649.707748][ T7944] bridge_slave_1: left promiscuous mode [ 649.714025][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.812133][ T7944] bridge_slave_0: left allmulticast mode [ 649.818507][ T7944] bridge_slave_0: left promiscuous mode [ 649.829659][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.372017][ T5801] Bluetooth: hci0: command tx timeout [ 651.451749][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.495946][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.520676][ T7944] bond0 (unregistering): Released all slaves [ 651.552787][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 651.586158][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.593778][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.601533][ T8051] bridge_slave_1: entered allmulticast mode [ 651.610920][ T8051] bridge_slave_1: entered promiscuous mode [ 651.990305][ T7944] hsr_slave_0: left promiscuous mode [ 652.008257][ T7944] hsr_slave_1: left promiscuous mode [ 652.017962][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.025593][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.073809][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.085106][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.130459][ T7944] veth1_macvtap: left promiscuous mode [ 652.137834][ T7944] veth0_macvtap: left promiscuous mode [ 652.143643][ T7944] veth1_vlan: left promiscuous mode [ 652.149514][ T7944] veth0_vlan: left promiscuous mode [ 653.278990][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 653.399776][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 653.637068][ T5801] Bluetooth: hci0: command tx timeout [ 653.847415][ T8028] hsr_slave_0: entered promiscuous mode [ 653.858171][ T8028] hsr_slave_1: entered promiscuous mode [ 654.078615][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.421051][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.201588][ T8051] team0: Port device team_slave_0 added [ 655.321989][ T8051] team0: Port device team_slave_1 added [ 655.547011][ T8151] 9pnet_fd: Insufficient options for proto=fd [ 655.985098][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.992770][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.019645][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.272067][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.288090][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.317419][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.681317][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.694369][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.702213][ T8091] bridge_slave_0: entered allmulticast mode [ 656.710695][ T8091] bridge_slave_0: entered promiscuous mode [ 656.842609][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.853281][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.861110][ T8091] bridge_slave_1: entered allmulticast mode [ 656.869605][ T8091] bridge_slave_1: entered promiscuous mode [ 657.436098][ T8051] hsr_slave_0: entered promiscuous mode [ 657.447136][ T8051] hsr_slave_1: entered promiscuous mode [ 657.456210][ T8051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.464514][ T8051] Cannot create hsr debugfs directory [ 657.541561][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.568783][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.138893][ T8091] team0: Port device team_slave_0 added [ 658.283941][ T8091] team0: Port device team_slave_1 added [ 658.859135][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.866354][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.894371][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.932989][ T8028] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 659.081073][ T8028] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 659.191720][ T8028] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 659.374414][ T8028] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 659.469540][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.476930][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.503734][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.612605][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.619417][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.232047][ T8091] hsr_slave_0: entered promiscuous mode [ 660.242764][ T8091] hsr_slave_1: entered promiscuous mode [ 660.252024][ T8091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.260007][ T8091] Cannot create hsr debugfs directory [ 661.693555][ T8190] 9pnet_fd: Insufficient options for proto=fd [ 661.801526][ T8051] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 661.938365][ T8051] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 662.061782][ T8051] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 662.282768][ T8051] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 662.490041][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.796053][ T8028] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.912268][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.920102][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.363752][ T8091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 663.666436][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.673979][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.691564][ T8091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 663.804941][ T8091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 664.001236][ T8205] syz.5.518: attempt to access beyond end of device [ 664.001236][ T8205] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 666.490877][ T8091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 667.118428][ T30] audit: type=1326 audit(1748297351.144:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 667.144157][ T30] audit: type=1326 audit(1748297351.144:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 667.170361][ T30] audit: type=1326 audit(1748297351.144:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 667.193207][ T30] audit: type=1326 audit(1748297351.144:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 667.215929][ T30] audit: type=1326 audit(1748297351.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 667.240463][ T30] audit: type=1326 audit(1748297351.144:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 668.728009][ T8051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.724380][ T30] audit: type=1326 audit(1748297351.334:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 670.748795][ T30] audit: type=1326 audit(1748297351.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 670.771545][ T30] audit: type=1326 audit(1748297351.334:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 670.794857][ T30] audit: type=1326 audit(1748297351.334:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24caf8e969 code=0x7fc00000 [ 671.024793][ T8051] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.223004][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.230720][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.426413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.434146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.773781][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.355729][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.501021][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.508757][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.749404][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.757167][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.245216][ T8232] 9pnet_fd: Insufficient options for proto=fd [ 673.515772][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.919313][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 675.165759][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 675.231346][ T24] usb 7-1: config 224 has an invalid interface number: 115 but max is 0 [ 675.240570][ T24] usb 7-1: config 224 has no interface number 0 [ 675.406436][ T24] usb 7-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice= f.f3 [ 675.416456][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.426997][ T24] usb 7-1: Product: syz [ 675.432126][ T24] usb 7-1: Manufacturer: syz [ 675.437489][ T24] usb 7-1: SerialNumber: syz [ 675.989542][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.034446][ T24] usb 7-1: USB disconnect, device number 2 [ 676.691371][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.900315][ T8028] veth0_vlan: entered promiscuous mode [ 678.016064][ T8028] veth1_vlan: entered promiscuous mode [ 678.541890][ T8028] veth0_macvtap: entered promiscuous mode [ 678.659935][ T8028] veth1_macvtap: entered promiscuous mode [ 678.973007][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.190395][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.389905][ T8028] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.402548][ T8028] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.411764][ T8028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.423222][ T8028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.992310][ T5801] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 680.001166][ T5801] Bluetooth: hci1: Injecting HCI hardware error event [ 680.013828][ T5801] Bluetooth: hci1: hardware error 0x00 [ 680.678318][ T8051] veth0_vlan: entered promiscuous mode [ 680.980746][ T8051] veth1_vlan: entered promiscuous mode [ 681.584042][ T8051] veth0_macvtap: entered promiscuous mode [ 681.714181][ T8051] veth1_macvtap: entered promiscuous mode [ 681.850456][ T8091] veth0_vlan: entered promiscuous mode [ 682.049361][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.064055][ T8091] veth1_vlan: entered promiscuous mode [ 682.088045][ T5801] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 682.171640][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.334143][ T8051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.343882][ T8051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.354397][ T8051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.363572][ T8051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.864468][ T8091] veth0_macvtap: entered promiscuous mode [ 682.993701][ T8091] veth1_macvtap: entered promiscuous mode [ 683.300441][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.499674][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.658475][ T8091] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.667660][ T8091] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.676935][ T8091] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.685992][ T8091] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.623447][ T8408] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.762033][ T6740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.772792][ T6740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.945691][ T8408] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.095089][ T8408] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.213601][ T7944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.222184][ T7944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.353157][ T8408] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.758333][ T8408] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.789877][ T8408] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.827754][ T8408] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.865025][ T8408] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.635559][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.644139][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.062526][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.070941][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.233984][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 695.249421][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 695.931219][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.299'. [ 696.161919][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 696.226392][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 696.257794][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 697.753500][ T6740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.761896][ T6740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.217105][ T6740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.225224][ T6740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.411772][ T5089] Bluetooth: hci4: command tx timeout [ 699.052172][ T8438] 9pnet_fd: Insufficient options for proto=fd [ 699.813564][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 700.491323][ T5089] Bluetooth: hci4: command tx timeout [ 701.856737][ T7944] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.567855][ T5089] Bluetooth: hci4: command tx timeout [ 702.629858][ T7944] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.421411][ T7944] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.647181][ T5089] Bluetooth: hci4: command tx timeout [ 705.041568][ T7944] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.455061][ T7944] bridge_slave_1: left allmulticast mode [ 706.461393][ T7944] bridge_slave_1: left promiscuous mode [ 706.468429][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.584519][ T7944] bridge_slave_0: left allmulticast mode [ 706.594693][ T7944] bridge_slave_0: left promiscuous mode [ 706.602234][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.969426][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.059284][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.123259][ T7944] bond0 (unregistering): Released all slaves [ 708.758628][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.766306][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.774566][ T8418] bridge_slave_0: entered allmulticast mode [ 708.784767][ T8418] bridge_slave_0: entered promiscuous mode [ 709.055013][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.062987][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.064400][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.7.560'. [ 709.071098][ T8418] bridge_slave_1: entered allmulticast mode [ 709.089731][ T8418] bridge_slave_1: entered promiscuous mode [ 709.288545][ T7944] hsr_slave_0: left promiscuous mode [ 709.367109][ T7944] hsr_slave_1: left promiscuous mode [ 709.375449][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.383897][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.507362][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.515171][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.676174][ T7944] veth1_macvtap: left promiscuous mode [ 709.682513][ T7944] veth0_macvtap: left promiscuous mode [ 709.688797][ T7944] veth1_vlan: left promiscuous mode [ 709.694435][ T7944] veth0_vlan: left promiscuous mode [ 709.970609][ T8497] 9pnet_fd: Insufficient options for proto=fd [ 710.901846][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 710.938557][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 711.942176][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.120917][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.765195][ T8418] team0: Port device team_slave_0 added [ 713.994612][ T8418] team0: Port device team_slave_1 added [ 714.416185][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.423547][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.455809][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.820402][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.827955][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.858965][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.867665][ T8418] hsr_slave_0: entered promiscuous mode [ 715.884022][ T8418] hsr_slave_1: entered promiscuous mode [ 716.019564][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.040434][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.069517][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.113711][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.125833][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.049209][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.578'. [ 718.115328][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.578'. [ 718.260431][ T5801] Bluetooth: hci2: command tx timeout [ 719.078000][ T8528] chnl_net:caif_netlink_parms(): no params data found [ 720.141687][ T8418] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 720.298666][ T8418] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 720.337373][ T5801] Bluetooth: hci2: command tx timeout [ 720.393182][ T8418] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 720.426814][ T8418] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 721.012316][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.019430][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.460591][ T5801] Bluetooth: hci2: command tx timeout [ 723.864989][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.873106][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.881217][ T8528] bridge_slave_0: entered allmulticast mode [ 723.891309][ T8528] bridge_slave_0: entered promiscuous mode [ 724.428489][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.436141][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.444465][ T8528] bridge_slave_1: entered allmulticast mode [ 724.454560][ T8528] bridge_slave_1: entered promiscuous mode [ 724.526257][ T5801] Bluetooth: hci2: command tx timeout [ 725.339473][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.408991][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.588'. [ 725.421065][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.477778][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.588'. [ 725.648745][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.842456][ T8528] team0: Port device team_slave_0 added [ 725.863826][ T8528] team0: Port device team_slave_1 added [ 727.949776][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.961728][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.989308][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.098791][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.967411][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.974644][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.006027][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.194170][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.201911][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.459614][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.467152][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.197473][ T8528] hsr_slave_0: entered promiscuous mode [ 731.209533][ T8528] hsr_slave_1: entered promiscuous mode [ 731.218652][ T8528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 731.226451][ T8528] Cannot create hsr debugfs directory [ 731.370766][ T7731] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 731.579728][ T7731] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 731.592133][ T7731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 731.603686][ T7731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 731.613938][ T7731] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 731.627842][ T7731] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 731.637442][ T7731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.965913][ T7731] usb 10-1: config 0 descriptor?? [ 732.792082][ T7731] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 732.963645][ T7731] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 733.474648][ T24] usb 10-1: USB disconnect, device number 2 [ 734.386809][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.945430][ T8639] fido_id[8639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 735.013751][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.9.598'. [ 735.103291][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.9.598'. [ 736.515162][ T8528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 738.239452][ T8528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 738.511970][ T8528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 738.718005][ T8528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 740.919452][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.195792][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.398875][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.406631][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.649951][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.657705][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.054071][ T8418] veth0_vlan: entered promiscuous mode [ 742.251619][ T8528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.335443][ T8418] veth1_vlan: entered promiscuous mode [ 742.978919][ T8418] veth0_macvtap: entered promiscuous mode [ 743.130468][ T8418] veth1_macvtap: entered promiscuous mode [ 743.491365][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.586338][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.655230][ T8418] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.666045][ T8418] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.675264][ T8418] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.684427][ T8418] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.812797][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.9.609'. [ 744.907346][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.9.609'. [ 745.960368][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.376395][ T8528] veth0_vlan: entered promiscuous mode [ 747.614211][ T8528] veth1_vlan: entered promiscuous mode [ 748.481881][ T8528] veth0_macvtap: entered promiscuous mode [ 748.813774][ T8528] veth1_macvtap: entered promiscuous mode [ 749.622025][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.746771][ T7731] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 749.832586][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.952256][ T8528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.961557][ T8528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.967116][ T7731] usb 10-1: Using ep0 maxpacket: 8 [ 749.978182][ T8528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.991164][ T8528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.055815][ T7731] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 750.065741][ T7731] usb 10-1: config 2 has no interface number 0 [ 750.076844][ T7731] usb 10-1: config 2 interface 31 has no altsetting 0 [ 750.213905][ T7731] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 750.223921][ T7731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.232484][ T7731] usb 10-1: Product: syz [ 750.237096][ T7731] usb 10-1: Manufacturer: syz [ 750.242044][ T7731] usb 10-1: SerialNumber: syz [ 750.729699][ T5857] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 750.950782][ T7731] ===================================================== [ 750.958318][ T7731] BUG: KMSAN: uninit-value in mii_nway_restart+0xfe/0x220 [ 750.965708][ T7731] mii_nway_restart+0xfe/0x220 [ 750.968449][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 750.973750][ T7731] ch9200_bind+0x21c/0xfe0 [ 750.981862][ T7731] usbnet_probe+0xbe6/0x4390 [ 750.986844][ T7731] usb_probe_interface+0xd04/0x1310 [ 750.992293][ T7731] really_probe+0x4d1/0xd90 [ 751.002516][ T7731] __driver_probe_device+0x268/0x380 [ 751.009718][ T7731] driver_probe_device+0x70/0x8b0 [ 751.015017][ T7731] __device_attach_driver+0x4ee/0x950 [ 751.021468][ T7731] bus_for_each_drv+0x3e3/0x680 [ 751.027191][ T7731] __device_attach+0x3c8/0x5c0 [ 751.032208][ T7731] device_initial_probe+0x33/0x40 [ 751.037667][ T7731] bus_probe_device+0x3ba/0x5e0 [ 751.042832][ T7731] device_add+0x12a9/0x1c10 [ 751.050105][ T7731] usb_set_configuration+0x3493/0x3b70 [ 751.055827][ T7731] usb_generic_driver_probe+0xfc/0x290 [ 751.061711][ T7731] usb_probe_device+0x38a/0x690 [ 751.069044][ T7731] really_probe+0x4d1/0xd90 [ 751.073823][ T7731] __driver_probe_device+0x268/0x380 [ 751.079467][ T7731] driver_probe_device+0x70/0x8b0 [ 751.084761][ T7731] __device_attach_driver+0x4ee/0x950 [ 751.090596][ T7731] bus_for_each_drv+0x3e3/0x680 [ 751.095674][ T7731] __device_attach+0x3c8/0x5c0 [ 751.106185][ T7731] device_initial_probe+0x33/0x40 [ 751.113076][ T7731] bus_probe_device+0x3ba/0x5e0 [ 751.118948][ T7731] device_add+0x12a9/0x1c10 [ 751.123706][ T7731] usb_new_device+0x104b/0x20c0 [ 751.128910][ T7731] hub_event+0x5588/0x7580 [ 751.133551][ T7731] process_scheduled_works+0xb9a/0x1d90 [ 751.139464][ T7731] worker_thread+0xedf/0x1590 [ 751.144395][ T7731] kthread+0xd5c/0xf00 [ 751.148878][ T7731] ret_from_fork+0x71/0x90 [ 751.153556][ T7731] ret_from_fork_asm+0x1a/0x30 [ 751.158721][ T7731] [ 751.161175][ T7731] Local variable buff created at: [ 751.166331][ T7731] ch9200_mdio_read+0x3d/0xd0 [ 751.171372][ T7731] mii_nway_restart+0x8f/0x220 [ 751.176402][ T7731] [ 751.179005][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: kworker/1:3 Not tainted 6.15.0-syzkaller #0 PREEMPT(undef) [ 751.189630][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.205638][ T7731] Workqueue: usb_hub_wq hub_event [ 751.212645][ T7731] ===================================================== [ 751.219854][ T7731] Disabling lock debugging due to kernel taint [ 751.226180][ T7731] Kernel panic - not syncing: kmsan.panic set ... [ 751.232789][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: kworker/1:3 Tainted: G B 6.15.0-syzkaller #0 PREEMPT(undef) [ 751.244710][ T7731] Tainted: [B]=BAD_PAGE [ 751.249021][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.259284][ T7731] Workqueue: usb_hub_wq hub_event [ 751.264590][ T7731] Call Trace: [ 751.268056][ T7731] [ 751.271134][ T7731] __dump_stack+0x26/0x30 [ 751.275708][ T7731] dump_stack_lvl+0x53/0x270 [ 751.280553][ T7731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.286664][ T7731] dump_stack+0x1e/0x25 [ 751.291064][ T7731] panic+0x4bd/0xd50 [ 751.295270][ T7731] kmsan_report+0x29d/0x2a0 [ 751.300151][ T7731] ? worker_thread+0xedf/0x1590 [ 751.305266][ T7731] ? __pfx_warn_thunk_thunk+0x10/0x10 [ 751.311099][ T7731] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 751.317170][ T7731] ? __msan_warning+0x96/0x120 [ 751.322223][ T7731] ? mii_nway_restart+0xfe/0x220 [ 751.327424][ T7731] ? ch9200_bind+0x21c/0xfe0 [ 751.332282][ T7731] ? usbnet_probe+0xbe6/0x4390 [ 751.337290][ T7731] ? usb_probe_interface+0xd04/0x1310 [ 751.342945][ T7731] ? really_probe+0x4d1/0xd90 [ 751.347846][ T7731] ? __driver_probe_device+0x268/0x380 [ 751.353528][ T7731] ? driver_probe_device+0x70/0x8b0 [ 751.358961][ T7731] ? __device_attach_driver+0x4ee/0x950 [ 751.364748][ T7731] ? bus_for_each_drv+0x3e3/0x680 [ 751.370097][ T7731] ? __device_attach+0x3c8/0x5c0 [ 751.375261][ T7731] ? device_initial_probe+0x33/0x40 [ 751.380683][ T7731] ? bus_probe_device+0x3ba/0x5e0 [ 751.385904][ T7731] ? device_add+0x12a9/0x1c10 [ 751.390792][ T7731] ? usb_set_configuration+0x3493/0x3b70 [ 751.396663][ T7731] ? usb_generic_driver_probe+0xfc/0x290 [ 751.402520][ T7731] ? usb_probe_device+0x38a/0x690 [ 751.407774][ T7731] ? really_probe+0x4d1/0xd90 [ 751.412693][ T7731] ? __driver_probe_device+0x268/0x380 [ 751.418400][ T7731] ? driver_probe_device+0x70/0x8b0 [ 751.423828][ T7731] ? __device_attach_driver+0x4ee/0x950 [ 751.429617][ T7731] ? bus_for_each_drv+0x3e3/0x680 [ 751.434840][ T7731] ? __device_attach+0x3c8/0x5c0 [ 751.440003][ T7731] ? device_initial_probe+0x33/0x40 [ 751.445426][ T7731] ? bus_probe_device+0x3ba/0x5e0 [ 751.450654][ T7731] ? device_add+0x12a9/0x1c10 [ 751.455536][ T7731] ? usb_new_device+0x104b/0x20c0 [ 751.460746][ T7731] ? hub_event+0x5588/0x7580 [ 751.465523][ T7731] ? process_scheduled_works+0xb9a/0x1d90 [ 751.471474][ T7731] ? worker_thread+0xedf/0x1590 [ 751.476555][ T7731] ? kthread+0xd5c/0xf00 [ 751.481041][ T7731] ? ret_from_fork+0x71/0x90 [ 751.485876][ T7731] ? ret_from_fork_asm+0x1a/0x30 [ 751.491059][ T7731] ? control_read+0x26f/0x310 [ 751.496012][ T7731] ? kmsan_get_metadata+0x105/0x1b0 [ 751.501491][ T7731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.507588][ T7731] __msan_warning+0x96/0x120 [ 751.512449][ T7731] mii_nway_restart+0xfe/0x220 [ 751.517477][ T7731] ch9200_bind+0x21c/0xfe0 [ 751.522137][ T7731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.528208][ T7731] ? __pfx_ch9200_bind+0x10/0x10 [ 751.533370][ T7731] usbnet_probe+0xbe6/0x4390 [ 751.538181][ T7731] ? pm_runtime_enable+0x3b2/0x4d0 [ 751.543569][ T7731] ? __pfx_usbnet_probe+0x10/0x10 [ 751.549183][ T7731] usb_probe_interface+0xd04/0x1310 [ 751.554646][ T7731] ? __pfx_usb_probe_interface+0x10/0x10 [ 751.560505][ T7731] really_probe+0x4d1/0xd90 [ 751.565286][ T7731] __driver_probe_device+0x268/0x380 [ 751.570868][ T7731] driver_probe_device+0x70/0x8b0 [ 751.576152][ T7731] ? kmsan_get_metadata+0x105/0x1b0 [ 751.581608][ T7731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.587704][ T7731] __device_attach_driver+0x4ee/0x950 [ 751.593356][ T7731] bus_for_each_drv+0x3e3/0x680 [ 751.598402][ T7731] ? __pfx___device_attach_driver+0x10/0x10 [ 751.604574][ T7731] __device_attach+0x3c8/0x5c0 [ 751.609591][ T7731] device_initial_probe+0x33/0x40 [ 751.614863][ T7731] bus_probe_device+0x3ba/0x5e0 [ 751.619929][ T7731] device_add+0x12a9/0x1c10 [ 751.624682][ T7731] usb_set_configuration+0x3493/0x3b70 [ 751.630486][ T7731] usb_generic_driver_probe+0xfc/0x290 [ 751.636263][ T7731] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 751.642573][ T7731] usb_probe_device+0x38a/0x690 [ 751.647770][ T7731] ? __pfx_usb_probe_device+0x10/0x10 [ 751.653367][ T7731] really_probe+0x4d1/0xd90 [ 751.658380][ T7731] __driver_probe_device+0x268/0x380 [ 751.663910][ T7731] driver_probe_device+0x70/0x8b0 [ 751.669180][ T7731] ? kmsan_get_metadata+0x105/0x1b0 [ 751.674633][ T7731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.680741][ T7731] __device_attach_driver+0x4ee/0x950 [ 751.686385][ T7731] bus_for_each_drv+0x3e3/0x680 [ 751.691441][ T7731] ? __pfx___device_attach_driver+0x10/0x10 [ 751.698062][ T7731] __device_attach+0x3c8/0x5c0 [ 751.703110][ T7731] device_initial_probe+0x33/0x40 [ 751.708364][ T7731] bus_probe_device+0x3ba/0x5e0 [ 751.713801][ T7731] device_add+0x12a9/0x1c10 [ 751.718541][ T7731] usb_new_device+0x104b/0x20c0 [ 751.723631][ T7731] hub_event+0x5588/0x7580 [ 751.728297][ T7731] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 751.734368][ T7731] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 751.740172][ T7731] ? kmsan_get_metadata+0x105/0x1b0 [ 751.745683][ T7731] ? __pfx_hub_event+0x10/0x10 [ 751.750684][ T7731] process_scheduled_works+0xb9a/0x1d90 [ 751.756535][ T7731] worker_thread+0xedf/0x1590 [ 751.761499][ T7731] kthread+0xd5c/0xf00 [ 751.765809][ T7731] ? __pfx_worker_thread+0x10/0x10 [ 751.771185][ T7731] ? __pfx_kthread+0x10/0x10 [ 751.776013][ T7731] ret_from_fork+0x71/0x90 [ 751.780675][ T7731] ? __pfx_kthread+0x10/0x10 [ 751.785519][ T7731] ret_from_fork_asm+0x1a/0x30 [ 751.790556][ T7731] [ 751.794103][ T7731] Kernel Offset: disabled [ 751.798525][ T7731] Rebooting in 86400 seconds..