last executing test programs: 10m6.443211141s ago: executing program 32 (id=25): openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5}) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0xfffffffb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000006480)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 9m58.893357713s ago: executing program 33 (id=38): close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, 0x0, 0x0) 7m12.91153333s ago: executing program 34 (id=311): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 6m57.798309586s ago: executing program 4 (id=366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e80"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 6m55.902425081s ago: executing program 4 (id=368): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x1}, 0xfe9b) 6m49.95754423s ago: executing program 4 (id=372): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$nfs(&(0x7f0000000140)='\xc3\x8cPD', 0x0, 0x0, 0x2009000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffff"], 0x398}}, 0x4) 6m48.268812035s ago: executing program 4 (id=374): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002500)={0x10, &(0x7f0000000040)={0x0, 0xe}, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 6m42.531337556s ago: executing program 4 (id=376): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f00000000c0)={0xf5d4, 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) 6m37.551105094s ago: executing program 4 (id=381): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 6m26.50671063s ago: executing program 6 (id=392): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) shutdown(r0, 0x2) 6m24.9518471s ago: executing program 6 (id=395): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 6m23.490450109s ago: executing program 6 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) 6m22.597369149s ago: executing program 6 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40085874, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000180)=0xfffffffd, 0x4) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9806d1267c49cd76", "c442e6adcb511ad19648396c5352e18f", "6086c2ca", "b973738a82366fb2"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000b40)=0xfffffffc, 0x1) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd46cb653e01283afffe800000000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc01000000000000000000000000000004209595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"], 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x4000032f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x800000000000, &(0x7f0000000000)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m22.330367725s ago: executing program 35 (id=381): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 6m19.218263377s ago: executing program 6 (id=399): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6m17.955501337s ago: executing program 6 (id=400): r0 = syz_io_uring_setup(0x3f, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m9.842805407s ago: executing program 36 (id=394): syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m2.334166634s ago: executing program 37 (id=400): r0 = syz_io_uring_setup(0x3f, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m10.617536379s ago: executing program 8 (id=415): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 5m9.375094508s ago: executing program 9 (id=419): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000200)={[{@dots}, {@fat=@quiet}, {@dots}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@gid}, {}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@dots}]}, 0x1, 0x1bf, &(0x7f0000000300)="$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") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 5m8.067629953s ago: executing program 9 (id=421): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30303030303030303030303030303030303030303030342c7569643d666f726765742c6e6f6164696e6963622c756d61736b3d30303030303030303030303030303034303030323030302c6c617374626c6f636b3d30303030303030303030303030303030303031332c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030352c002c8766d2fada4c3ad2ac082bc7173399e7495495fed7acdd89796464b5f2623c15ac928b3ca465f527e47157"], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 5m6.255242525s ago: executing program 8 (id=425): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r3, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0xfe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000034cb63077b538bfaeaab100000000000000000000000002000000"], 0x0, 0x1a}, 0x28) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x10b200) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{0x7}, {0x6, 0xf7}}}}, 0x8) 5m6.186992306s ago: executing program 9 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00004aa000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x1010, r0, 0x42ef7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5m3.937336845s ago: executing program 9 (id=431): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000200)={[{@dots}, {@fat=@quiet}, {@dots}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@gid}, {}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@dots}]}, 0x1, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 5m2.539911905s ago: executing program 8 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 5m0.749740873s ago: executing program 9 (id=436): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30303030303030303030303030303030303030303030342c7569643d666f726765742c6e6f6164696e6963622c756d61736b3d30303030303030303030303030303034303030323030302c6c617374626c6f636b3d30303030303030303030303030303030303031332c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030352c002c8766d2fada4c3ad2ac082bc7173399e7495495fed7acdd89796464b5f2623c15ac928b3ca465f527e47157"], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 4m58.881765906s ago: executing program 9 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m57.071899951s ago: executing program 8 (id=446): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x440e7c36c8022fb3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 4m51.915580512s ago: executing program 8 (id=448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={r2, 0x5}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001b40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x31, 0x4}, {0x2, 0x6}}}}, 0x11) 4m49.692419094s ago: executing program 8 (id=454): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_disconnect(r0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'pim6reg0\x00', {0x2, 0x0, @remote}}) r7 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) socket$packet(0x11, 0xa, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 4m43.260589479s ago: executing program 38 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m34.049741679s ago: executing program 39 (id=454): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_disconnect(r0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'pim6reg0\x00', {0x2, 0x0, @remote}}) r7 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) socket$packet(0x11, 0xa, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 3m2.42739177s ago: executing program 5 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x3c}}, 0x0) 3m1.627074788s ago: executing program 5 (id=618): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x4, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) 2m58.627778835s ago: executing program 5 (id=624): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x1403, 0x1, 0x0, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2000}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x1ff, 0x64a0]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x40, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x80000005, 0x2}) 2m56.314248924s ago: executing program 5 (id=626): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="f27fe9", 0x3}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x4000) 2m54.767177925s ago: executing program 5 (id=630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={r1, 0x5}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001b40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x31, 0x4}, {0x2, 0x6}}}}, 0x11) 2m51.628470475s ago: executing program 5 (id=635): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m35.163169706s ago: executing program 40 (id=635): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m4.797203881s ago: executing program 1 (id=697): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x7, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x4044090) 2m3.131138035s ago: executing program 1 (id=699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2", 0x15}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1}, 0xfff}], 0x1, 0x2021, 0x0) 1m58.729509959s ago: executing program 1 (id=702): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x7}, 0xfe}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r6, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m55.44763744s ago: executing program 1 (id=705): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) kexec_load(0x0, 0x0, 0x0, 0x0) 1m53.899395927s ago: executing program 1 (id=708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m52.785350734s ago: executing program 1 (id=711): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x8081) read(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m36.548163542s ago: executing program 41 (id=711): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x8081) read(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 13.60983072s ago: executing program 0 (id=860): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 12.621036738s ago: executing program 0 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) 11.870705844s ago: executing program 0 (id=865): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5}) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) 11.284084364s ago: executing program 3 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000180)=0x58, 0xa) 9.411499114s ago: executing program 3 (id=870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004440)="e63060b6", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000881) 6.428416315s ago: executing program 3 (id=872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000040)="0f4f8771c032030fc72adf8d00900f52df3e0f070f08267806f0f759880f01d1", 0x20}], 0x1, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00007c6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.148434838s ago: executing program 2 (id=873): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1, 0x1}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) truncate(&(0x7f0000000b00)='./file0\x00', 0x8) 5.287272014s ago: executing program 7 (id=875): unshare(0x22020400) openat$sndseq(0xffffffffffffff9c, 0x0, 0x840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000001, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x634, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x1ff, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0xa, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x1000008, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x2, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.233044184s ago: executing program 2 (id=876): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) 5.205790562s ago: executing program 0 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08040e1f291f8cd03c6e00"/25], 0x24}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x630c00) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r6 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) write$vga_arbiter(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8420696fc651a4b464b923cb41d912119175f52b6d656d00"], 0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0xa2, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x8d, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x2000004, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x100, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x405, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x5, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x2, 0xd, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @remote, @loopback, {[], @ndisc_na={0x88, 0x0, 0x0, 0xb, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f00000000c0)={0xf0f003, 0x4}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x0, 0x3, 0x48000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_RSSI_HYST={0x0, 0x2, 0x314c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff001}, @NL80211_ATTR_CQM_TXE_INTVL={0x0, 0x7, 0x295}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 4.87928752s ago: executing program 3 (id=878): socket$inet(0x2, 0x800, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 4.547294235s ago: executing program 7 (id=879): creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="920100000000000081", @ANYRES8=r0], 0x10) 4.361117779s ago: executing program 2 (id=880): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 3.716708095s ago: executing program 7 (id=881): r0 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.440312019s ago: executing program 2 (id=882): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.215460523s ago: executing program 3 (id=883): socket$inet(0x2, 0x800, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 2.706859975s ago: executing program 0 (id=884): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) 1.887400336s ago: executing program 7 (id=885): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1, 0x1}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) truncate(&(0x7f0000000b00)='./file0\x00', 0x8) 1.87759285s ago: executing program 0 (id=886): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5}) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) 1.500228756s ago: executing program 3 (id=887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000040)="0f4f8771c032030fc72adf8d00900f52df3e0f070f08267806f0f759880f01d1", 0x20}], 0x1, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00007c6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 938.933923ms ago: executing program 7 (id=888): unshare(0x22020400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 803.45297ms ago: executing program 2 (id=889): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) 319.366938ms ago: executing program 2 (id=890): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6103060404d4e7dfa84b59"], 0xb) 0s ago: executing program 7 (id=891): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x2, 0x200, '@\x00V', 0x1, 0xf}) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 558.850416][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.859385][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.886863][ T7640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.143625][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.155018][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.183628][ T7640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.877764][ T7659] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.887392][ T7659] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.895540][ T7659] bridge_slave_0: entered allmulticast mode [ 559.905486][ T7659] bridge_slave_0: entered promiscuous mode [ 560.065133][ T3942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.246448][ T3942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.416857][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.425542][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.433466][ T7659] bridge_slave_1: entered allmulticast mode [ 560.442087][ T7659] bridge_slave_1: entered promiscuous mode [ 560.531715][ T3942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.860949][ T3942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.913162][ T7640] hsr_slave_0: entered promiscuous mode [ 560.924232][ T7640] hsr_slave_1: entered promiscuous mode [ 560.933350][ T7640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.941869][ T7640] Cannot create hsr debugfs directory [ 560.949812][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.957664][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.965701][ T7658] bridge_slave_0: entered allmulticast mode [ 560.975315][ T7658] bridge_slave_0: entered promiscuous mode [ 561.047688][ T7659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.130528][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.140307][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.148375][ T7658] bridge_slave_1: entered allmulticast mode [ 561.158310][ T7658] bridge_slave_1: entered promiscuous mode [ 561.190112][ T7659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.357512][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.531283][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.949236][ T7659] team0: Port device team_slave_0 added [ 561.966492][ T7658] team0: Port device team_slave_0 added [ 562.120065][ T3942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.164453][ T7659] team0: Port device team_slave_1 added [ 562.183379][ T7658] team0: Port device team_slave_1 added [ 562.316128][ T3942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.558571][ T3942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.580503][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.587972][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.615176][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.643056][ T7591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.660837][ T7659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.668842][ T7659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.695684][ T7659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.756981][ T3942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.910882][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.918277][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.949232][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.018340][ T7659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.026711][ T7659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.057814][ T7659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.080628][ T7632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 563.232235][ T7632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 563.400487][ T7632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.586341][ T7632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 563.874953][ T7659] hsr_slave_0: entered promiscuous mode [ 563.885696][ T7659] hsr_slave_1: entered promiscuous mode [ 563.894855][ T7659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.902761][ T7659] Cannot create hsr debugfs directory [ 563.994376][ T7658] hsr_slave_0: entered promiscuous mode [ 564.005443][ T7658] hsr_slave_1: entered promiscuous mode [ 564.013889][ T7658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.022117][ T7658] Cannot create hsr debugfs directory [ 564.217344][ T3942] bridge_slave_1: left allmulticast mode [ 564.227345][ T3942] bridge_slave_1: left promiscuous mode [ 564.239575][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.302672][ T3942] bridge_slave_0: left allmulticast mode [ 564.308601][ T3942] bridge_slave_0: left promiscuous mode [ 564.315575][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.353861][ T3942] bridge_slave_1: left allmulticast mode [ 564.359846][ T3942] bridge_slave_1: left promiscuous mode [ 564.366742][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.396539][ T3942] bridge_slave_0: left allmulticast mode [ 564.404803][ T3942] bridge_slave_0: left promiscuous mode [ 564.414613][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.444028][ T3942] bridge_slave_1: left allmulticast mode [ 564.450776][ T3942] bridge_slave_1: left promiscuous mode [ 564.460065][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.487447][ T3942] bridge_slave_0: left allmulticast mode [ 564.493711][ T3942] bridge_slave_0: left promiscuous mode [ 564.500337][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.533739][ T3942] bridge_slave_1: left allmulticast mode [ 564.539676][ T3942] bridge_slave_1: left promiscuous mode [ 564.546591][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.560429][ T3942] bridge_slave_0: left allmulticast mode [ 564.566709][ T3942] bridge_slave_0: left promiscuous mode [ 564.578198][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.513051][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.541989][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.558200][ T3942] bond0 (unregistering): Released all slaves [ 565.847193][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.888476][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.906431][ T3942] bond0 (unregistering): Released all slaves [ 566.171272][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.188236][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.203341][ T3942] bond0 (unregistering): Released all slaves [ 566.489605][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.507927][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.529531][ T3942] bond0 (unregistering): Released all slaves [ 567.327841][ T7640] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 567.372187][ T7640] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 567.613125][ T7640] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 567.645891][ T7640] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 568.707307][ T7591] veth0_vlan: entered promiscuous mode [ 569.065881][ T3942] hsr_slave_0: left promiscuous mode [ 569.099192][ T3942] hsr_slave_1: left promiscuous mode [ 569.108177][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.120483][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.148930][ T3942] hsr_slave_0: left promiscuous mode [ 569.157748][ T3942] hsr_slave_1: left promiscuous mode [ 569.165995][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.173925][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.199233][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.207372][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.237374][ T3942] hsr_slave_0: left promiscuous mode [ 569.247048][ T3942] hsr_slave_1: left promiscuous mode [ 569.256305][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.264440][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.275958][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.284061][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.316828][ T3942] hsr_slave_0: left promiscuous mode [ 569.325278][ T3942] hsr_slave_1: left promiscuous mode [ 569.337086][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.345224][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.359435][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.367643][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.438521][ T3942] veth1_vlan: left promiscuous mode [ 569.444937][ T3942] veth0_vlan: left promiscuous mode [ 569.454015][ T3942] veth1_macvtap: left promiscuous mode [ 569.459801][ T3942] veth0_macvtap: left promiscuous mode [ 569.465918][ T3942] veth1_vlan: left promiscuous mode [ 569.471794][ T3942] veth0_vlan: left promiscuous mode [ 569.481073][ T3942] veth1_macvtap: left promiscuous mode [ 569.486912][ T3942] veth0_macvtap: left promiscuous mode [ 569.495634][ T3942] veth1_vlan: left promiscuous mode [ 569.501372][ T3942] veth0_vlan: left promiscuous mode [ 569.509417][ T3942] veth1_macvtap: left promiscuous mode [ 569.515587][ T3942] veth0_macvtap: left promiscuous mode [ 569.522158][ T3942] veth1_vlan: left promiscuous mode [ 569.527684][ T3942] veth0_vlan: left promiscuous mode [ 570.997587][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 571.045568][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 571.693635][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 571.792789][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 572.468267][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 572.524488][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 573.097981][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 573.172699][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 573.527367][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.580676][ T7591] veth1_vlan: entered promiscuous mode [ 573.856687][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.971294][ T7591] veth0_macvtap: entered promiscuous mode [ 574.037487][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.045149][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.112912][ T7591] veth1_macvtap: entered promiscuous mode [ 574.218221][ T7659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 574.269499][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.277271][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.287594][ T7659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.526102][ T7659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 574.645398][ T7591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.689250][ T7640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.698314][ T7659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 574.863494][ T7591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.895380][ T7591] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.904794][ T7591] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.914075][ T7591] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.925426][ T7591] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.385960][ T7640] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.509652][ T3942] IPVS: stop unused estimator thread 0... [ 575.538260][ T7658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 575.608282][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.615969][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.639144][ T7658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 575.737945][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.745678][ T7361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.773450][ T7658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 575.873489][ T7658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 576.174486][ T3942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.374160][ T3942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.486266][ T3942] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.688093][ T3942] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.302352][ T7659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.356939][ T3942] bridge_slave_1: left allmulticast mode [ 577.363102][ T3942] bridge_slave_1: left promiscuous mode [ 577.369740][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.460461][ T3942] bridge_slave_0: left allmulticast mode [ 577.467144][ T3942] bridge_slave_0: left promiscuous mode [ 577.473967][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.922115][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.940105][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.967004][ T3942] bond0 (unregistering): Released all slaves [ 578.036662][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.189810][ T7659] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.367247][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.375025][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.612996][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.620607][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.900064][ T3942] hsr_slave_0: left promiscuous mode [ 578.922273][ T3942] hsr_slave_1: left promiscuous mode [ 578.929368][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.938613][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.966149][ T3942] veth1_macvtap: left promiscuous mode [ 578.971961][ T3942] veth0_macvtap: left promiscuous mode [ 578.977734][ T3942] veth1_vlan: left promiscuous mode [ 578.983512][ T3942] veth0_vlan: left promiscuous mode [ 579.532025][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 579.558165][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 580.072444][ T7658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.165237][ T7640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.519698][ T7658] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.683345][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.690895][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.822647][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.830215][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.127712][ T7658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.495621][ T7659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.525895][ T7632] veth0_vlan: entered promiscuous mode [ 582.695659][ T7632] veth1_vlan: entered promiscuous mode [ 583.135559][ T7632] veth0_macvtap: entered promiscuous mode [ 583.174469][ T7659] veth0_vlan: entered promiscuous mode [ 583.279333][ T7632] veth1_macvtap: entered promiscuous mode [ 583.368911][ T7659] veth1_vlan: entered promiscuous mode [ 583.470709][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.659041][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.800172][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.956798][ T7632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.967042][ T7632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.976250][ T7632] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.985620][ T7632] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.013927][ T7640] veth0_vlan: entered promiscuous mode [ 584.033468][ T7659] veth0_macvtap: entered promiscuous mode [ 584.082887][ T7640] veth1_vlan: entered promiscuous mode [ 584.273187][ T7659] veth1_macvtap: entered promiscuous mode [ 584.481388][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.489492][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.626624][ T7640] veth0_macvtap: entered promiscuous mode [ 584.679898][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.688120][ T7659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.696714][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.722880][ T7640] veth1_macvtap: entered promiscuous mode [ 584.774602][ T7659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.905984][ T7659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.916872][ T7659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.926172][ T7659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.935438][ T7659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.102512][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.136919][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.307816][ T7640] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.317173][ T7640] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.326567][ T7640] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.335881][ T7640] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.261911][ T7658] veth0_vlan: entered promiscuous mode [ 587.428378][ T7658] veth1_vlan: entered promiscuous mode [ 587.922201][ T7658] veth0_macvtap: entered promiscuous mode [ 588.009844][ T7658] veth1_macvtap: entered promiscuous mode [ 588.273394][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.362439][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.535892][ T7658] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.546642][ T7658] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.557328][ T7658] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.566990][ T7658] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.523955][ T7476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.532197][ T7476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.792782][ T7471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.792903][ T7471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.066169][ T7471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.076174][ T7471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.415845][ T7485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.424226][ T7485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.912639][ T7471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.920759][ T7471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.187187][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.199126][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.226133][ T7886] loop8: detected capacity change from 0 to 2048 [ 595.316089][ T7889] loop1: detected capacity change from 0 to 256 [ 595.453026][ T7886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.219775][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.229904][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.309904][ T7482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.318303][ T7482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.482848][ T5865] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 599.582239][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.590444][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.772333][ T5865] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 599.782359][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.790699][ T5865] usb 8-1: Product: syz [ 599.795397][ T5865] usb 8-1: Manufacturer: syz [ 599.800251][ T5865] usb 8-1: SerialNumber: syz [ 599.976914][ T5865] usb 8-1: config 0 descriptor?? [ 600.117494][ T7926] sctp: failed to load transform for md5: -2 [ 600.188476][ T7934] loop9: detected capacity change from 0 to 256 [ 600.220379][ T5865] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 601.800404][ T7945] loop9: detected capacity change from 0 to 2048 [ 601.982075][ T7945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.386130][ T5865] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 602.439581][ T5865] usb 8-1: USB disconnect, device number 2 [ 602.713656][ T7485] Bluetooth: hci0: Frame reassembly failed (-84) [ 604.713714][ T5816] Bluetooth: hci0: command 0x1003 tx timeout [ 604.751596][ T5110] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 606.617583][ T30] audit: type=1326 audit(1752333766.624:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.640539][ T30] audit: type=1326 audit(1752333766.624:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.663442][ T30] audit: type=1326 audit(1752333766.624:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.689108][ T30] audit: type=1326 audit(1752333766.624:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.712901][ T30] audit: type=1326 audit(1752333766.624:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.735583][ T30] audit: type=1326 audit(1752333766.634:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.758158][ T30] audit: type=1326 audit(1752333766.634:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.784098][ T30] audit: type=1326 audit(1752333766.634:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.808220][ T30] audit: type=1326 audit(1752333766.634:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 606.830815][ T30] audit: type=1326 audit(1752333766.634:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.7.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 607.045084][ T7979] loop9: detected capacity change from 0 to 256 [ 609.339645][ T7995] loop9: detected capacity change from 0 to 2048 [ 609.486676][ T7995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.781245][ T5865] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 610.055014][ T5865] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 610.064493][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.073108][ T5865] usb 2-1: Product: syz [ 610.077525][ T5865] usb 2-1: Manufacturer: syz [ 610.082457][ T5865] usb 2-1: SerialNumber: syz [ 610.244410][ T5865] usb 2-1: config 0 descriptor?? [ 610.511748][ T5865] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 612.436005][ T5865] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 612.992701][ T5865] usb 2-1: USB disconnect, device number 2 [ 617.317726][ T8022] loop7: detected capacity change from 0 to 2048 [ 618.737000][ T8042] loop5: detected capacity change from 0 to 2048 [ 619.021613][ T8044] netlink: 'syz.1.452': attribute type 8 has an invalid length. [ 619.029737][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 619.084294][ T8042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.071908][ T7713] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 620.346156][ T7713] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.399452][ T7713] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 620.408893][ T7713] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 620.417387][ T7713] usb 9-1: Product: syz [ 620.422072][ T7713] usb 9-1: Manufacturer: syz [ 620.426908][ T7713] usb 9-1: SerialNumber: syz [ 620.613832][ T7713] usb 9-1: config 0 descriptor?? [ 620.868208][ T8050] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 620.938899][ T7713] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 621.649041][ T7933] udevd[7933]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.672080][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 621.847575][ T5900] usb 9-1: USB disconnect, device number 2 [ 622.271725][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 622.281669][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.289881][ T9] usb 2-1: Product: syz [ 622.294548][ T9] usb 2-1: Manufacturer: syz [ 622.299358][ T9] usb 2-1: SerialNumber: syz [ 622.404000][ T9] usb 2-1: config 0 descriptor?? [ 622.668779][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.825331][ T8073] loop7: detected capacity change from 0 to 2048 [ 623.967530][ T8073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.741873][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 624.848085][ T9] usb 2-1: USB disconnect, device number 3 [ 626.452138][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.465'. [ 627.419772][ T8094] loop7: detected capacity change from 0 to 2048 [ 627.727029][ T8094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.932211][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 627.975499][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 627.991733][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.013986][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.030110][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 630.091490][ T5110] Bluetooth: hci0: command tx timeout [ 630.457136][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 631.097446][ T8118] loop1: detected capacity change from 0 to 2048 [ 631.418277][ T8118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.031628][ T7713] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 632.167939][ T5110] Bluetooth: hci0: command tx timeout [ 632.386188][ T7713] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 632.395825][ T7713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.404468][ T7713] usb 8-1: Product: syz [ 632.408900][ T7713] usb 8-1: Manufacturer: syz [ 632.413841][ T7713] usb 8-1: SerialNumber: syz [ 632.637388][ T7713] usb 8-1: config 0 descriptor?? [ 632.886808][ T7713] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 633.693492][ T8131] sctp: failed to load transform for md5: -2 [ 633.920003][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.927857][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.936008][ T8098] bridge_slave_0: entered allmulticast mode [ 633.946102][ T8098] bridge_slave_0: entered promiscuous mode [ 634.248121][ T5110] Bluetooth: hci0: command tx timeout [ 634.420175][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.428099][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.436333][ T8098] bridge_slave_1: entered allmulticast mode [ 634.446283][ T8098] bridge_slave_1: entered promiscuous mode [ 634.594536][ T7478] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.637460][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'. [ 634.992242][ T7713] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 635.085821][ T7713] usb 8-1: USB disconnect, device number 3 [ 635.223526][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.346844][ T5110] Bluetooth: hci2: link tx timeout [ 635.353415][ T5110] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 635.382926][ T7478] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.558824][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.699397][ T7478] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.247684][ T7478] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.322635][ T5816] Bluetooth: hci0: command tx timeout [ 636.343046][ T8151] loop5: detected capacity change from 0 to 2048 [ 636.450667][ T8098] team0: Port device team_slave_0 added [ 636.543768][ T8098] team0: Port device team_slave_1 added [ 636.594833][ T8151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.741765][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 637.749887][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.763990][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.777666][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.822688][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.954574][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 639.586596][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.593966][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.620590][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.643737][ T8156] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 4096 lbcount: 8192 extent 129+7168 [ 639.735350][ T7478] bridge_slave_1: left allmulticast mode [ 639.749132][ T7478] bridge_slave_1: left promiscuous mode [ 639.762086][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.851727][ T7478] bridge_slave_0: left allmulticast mode [ 639.857671][ T7478] bridge_slave_0: left promiscuous mode [ 639.864655][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.977837][ T5816] Bluetooth: hci3: command tx timeout [ 641.037933][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 641.038028][ T30] audit: type=1326 audit(1752333801.104:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.067791][ T30] audit: type=1326 audit(1752333801.104:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.092818][ T30] audit: type=1326 audit(1752333801.104:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.116381][ T30] audit: type=1326 audit(1752333801.104:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.138836][ T30] audit: type=1326 audit(1752333801.104:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.161670][ T30] audit: type=1326 audit(1752333801.104:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.186990][ T30] audit: type=1326 audit(1752333801.104:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.210923][ T30] audit: type=1326 audit(1752333801.104:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.233877][ T30] audit: type=1326 audit(1752333801.104:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.256874][ T30] audit: type=1326 audit(1752333801.114:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc966b8e929 code=0x7ffc0000 [ 641.618648][ T8176] loop5: detected capacity change from 0 to 2048 [ 641.807764][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.881749][ T8176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.910770][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.975458][ T7478] bond0 (unregistering): Released all slaves [ 642.075556][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.083245][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.114358][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.045788][ T5816] Bluetooth: hci3: command tx timeout [ 643.688751][ T8184] sctp: failed to load transform for md5: -2 [ 643.974581][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.487'. [ 644.016456][ T8098] hsr_slave_0: entered promiscuous mode [ 644.025656][ T8098] hsr_slave_1: entered promiscuous mode [ 644.107890][ T7478] hsr_slave_0: left promiscuous mode [ 644.128054][ T7478] hsr_slave_1: left promiscuous mode [ 644.136346][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.148539][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.226926][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.240174][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.384327][ T7478] veth1_macvtap: left promiscuous mode [ 644.390380][ T7478] veth0_macvtap: left promiscuous mode [ 644.396759][ T7478] veth1_vlan: left promiscuous mode [ 644.402533][ T7478] veth0_vlan: left promiscuous mode [ 645.102235][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 645.111942][ T5816] Bluetooth: hci3: command tx timeout [ 645.394315][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 645.404237][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.412788][ T9] usb 2-1: Product: syz [ 645.417224][ T9] usb 2-1: Manufacturer: syz [ 645.422206][ T9] usb 2-1: SerialNumber: syz [ 645.453954][ T9] usb 2-1: config 0 descriptor?? [ 645.502787][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 645.575428][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 646.021408][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 647.208779][ T5816] Bluetooth: hci3: command tx timeout [ 647.381873][ T7478] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.552464][ T8206] IPVS: Error joining to the multicast group [ 647.591704][ T7478] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.619111][ T8210] loop5: detected capacity change from 0 to 2048 [ 647.765202][ T8210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.808820][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 647.859212][ T7478] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.918004][ T9] usb 2-1: USB disconnect, device number 4 [ 647.978698][ T8159] chnl_net:caif_netlink_parms(): no params data found [ 648.126059][ T7478] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.463910][ T8210] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 12288 lbcount: 16384 extent 129+15360 [ 649.145774][ T8225] loop5: detected capacity change from 0 to 256 [ 649.240651][ T7478] bridge_slave_1: left allmulticast mode [ 649.246747][ T7478] bridge_slave_1: left promiscuous mode [ 649.253594][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.391217][ T8224] loop1: detected capacity change from 0 to 2048 [ 649.395694][ T7478] bridge_slave_0: left allmulticast mode [ 649.404624][ T7478] bridge_slave_0: left promiscuous mode [ 649.411497][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.542692][ T8224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 650.435083][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.468812][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.505112][ T7478] bond0 (unregistering): Released all slaves [ 651.297816][ T8235] sctp: failed to load transform for md5: -2 [ 651.874607][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.884789][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.894290][ T8159] bridge_slave_0: entered allmulticast mode [ 651.906087][ T8159] bridge_slave_0: entered promiscuous mode [ 652.181671][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.190831][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.198838][ T8159] bridge_slave_1: entered allmulticast mode [ 652.208719][ T8159] bridge_slave_1: entered promiscuous mode [ 652.530906][ T7478] hsr_slave_0: left promiscuous mode [ 652.585660][ T7478] hsr_slave_1: left promiscuous mode [ 652.594165][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.602149][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.648659][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.656772][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.725744][ T7478] veth1_macvtap: left promiscuous mode [ 652.733958][ T7478] veth0_macvtap: left promiscuous mode [ 652.739856][ T7478] veth1_vlan: left promiscuous mode [ 652.749173][ T7478] veth0_vlan: left promiscuous mode [ 653.664029][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 653.805218][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 653.935595][ T8258] loop1: detected capacity change from 0 to 2048 [ 654.119061][ T8258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.544400][ T8098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 654.614910][ T8159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.662096][ T8098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 654.702683][ T7713] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 654.746441][ T8159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.757498][ T8098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.826674][ T8098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 654.874477][ T8263] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 12288 lbcount: 16384 extent 129+15360 [ 654.935050][ T7713] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 654.944594][ T7713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.953157][ T7713] usb 8-1: Product: syz [ 654.957581][ T7713] usb 8-1: Manufacturer: syz [ 654.962590][ T7713] usb 8-1: SerialNumber: syz [ 655.054142][ T7713] usb 8-1: config 0 descriptor?? [ 655.325226][ T7713] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 655.358769][ T8159] team0: Port device team_slave_0 added [ 655.469039][ T8159] team0: Port device team_slave_1 added [ 655.778833][ T8275] loop1: detected capacity change from 0 to 256 [ 655.955078][ T8159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.962803][ T8159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.989906][ T8159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.243154][ T8159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.250373][ T8159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.277100][ T8159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.576191][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.813566][ T8278] loop5: detected capacity change from 0 to 2048 [ 656.861922][ T5816] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 656.979770][ T8278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.166242][ T8159] hsr_slave_0: entered promiscuous mode [ 657.176692][ T8159] hsr_slave_1: entered promiscuous mode [ 657.185782][ T8159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.193836][ T8159] Cannot create hsr debugfs directory [ 657.246887][ T7713] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 657.359328][ T8098] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.381599][ T7713] usb 8-1: USB disconnect, device number 4 [ 657.491104][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.498733][ T7488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.640737][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.648518][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.690775][ T8285] sctp: failed to load transform for md5: -2 [ 659.620308][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.627496][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.219204][ T8159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.301492][ T8159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 660.440795][ T8159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 660.570018][ T8159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 660.784775][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.168413][ T8098] veth0_vlan: entered promiscuous mode [ 661.295470][ T8322] loop7: detected capacity change from 0 to 256 [ 661.384203][ T8098] veth1_vlan: entered promiscuous mode [ 661.987108][ T8098] veth0_macvtap: entered promiscuous mode [ 662.187531][ T8098] veth1_macvtap: entered promiscuous mode [ 662.493016][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.654300][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.864387][ T8098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.873906][ T8098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.887961][ T8098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.902306][ T8098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.083425][ T8159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.486572][ T8159] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.738575][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.746296][ T3856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.057853][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.065749][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.597352][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 666.803856][ T5110] Bluetooth: hci7: command 0x0406 tx timeout [ 666.917949][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 666.928065][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.936707][ T9] usb 6-1: Product: syz [ 666.941317][ T9] usb 6-1: Manufacturer: syz [ 666.946239][ T9] usb 6-1: SerialNumber: syz [ 667.028040][ T9] usb 6-1: config 0 descriptor?? [ 667.219221][ T8342] loop7: detected capacity change from 0 to 2048 [ 667.392035][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 667.640661][ T8342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.287014][ T8159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.852465][ T8348] sctp: failed to load transform for md5: -2 [ 669.014134][ T8159] veth0_vlan: entered promiscuous mode [ 669.188315][ T8159] veth1_vlan: entered promiscuous mode [ 669.422067][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 669.532175][ T9] usb 6-1: USB disconnect, device number 2 [ 669.657494][ T8159] veth0_macvtap: entered promiscuous mode [ 669.755454][ T8159] veth1_macvtap: entered promiscuous mode [ 669.886486][ T8159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.027554][ T8159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.134074][ T8159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.143502][ T8159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.160058][ T8159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.171363][ T8159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.403535][ T8384] loop7: detected capacity change from 0 to 256 [ 671.912975][ T5110] Bluetooth: hci1: command 0x0406 tx timeout [ 673.579359][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 673.797974][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 673.883703][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 673.893377][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.903780][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.914137][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 673.924499][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.938276][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 673.952253][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.072530][ T24] usb 2-1: usb_control_msg returned -32 [ 675.078603][ T24] usbtmc 2-1:16.0: can't read capabilities [ 675.859593][ T8423] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 676.082263][ T5865] usb 2-1: USB disconnect, device number 5 [ 676.098195][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.106485][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.458373][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.467267][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.192850][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 677.541536][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 677.551304][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.559578][ T9] usb 8-1: Product: syz [ 677.564248][ T9] usb 8-1: Manufacturer: syz [ 677.569189][ T9] usb 8-1: SerialNumber: syz [ 677.906191][ T9] usb 8-1: config 0 descriptor?? [ 677.981113][ T8438] overlayfs: overlapping lowerdir path [ 678.869582][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 680.961712][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 681.018676][ T7482] Bluetooth: hci4: Frame reassembly failed (-84) [ 681.048747][ T9] usb 8-1: USB disconnect, device number 5 [ 681.438273][ T8463] loop1: detected capacity change from 0 to 256 [ 681.996790][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.007597][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.354391][ T8471] 9pnet: p9_errstr2errno: server reported unknown error [ 682.415098][ T7476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.424280][ T7476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.031355][ T5816] Bluetooth: hci4: command 0x1003 tx timeout [ 683.031991][ T5110] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 684.334012][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 684.623629][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 684.689250][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.705028][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.719471][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 684.732967][ T5865] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 684.742470][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.349745][ T5865] usb 1-1: config 0 descriptor?? [ 685.825962][ T5865] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 685.833520][ T5865] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 685.841107][ T5865] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 685.848407][ T5865] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 685.855896][ T5865] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 686.013088][ T8481] random: crng reseeded on system resumption [ 686.143243][ T5865] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 686.243573][ T5865] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 686.254807][ T5865] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 686.363472][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 686.601232][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 686.611238][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.619751][ T24] usb 6-1: Product: syz [ 686.624629][ T24] usb 6-1: Manufacturer: syz [ 686.629690][ T24] usb 6-1: SerialNumber: syz [ 686.798955][ T24] usb 6-1: config 0 descriptor?? [ 687.068482][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 687.267085][ T8509] loop2: detected capacity change from 0 to 256 [ 687.365631][ T8420] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 687.414460][ T8420] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 687.494492][ T5865] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 687.521972][ T8420] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 687.589835][ T8420] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 687.692164][ T5865] usb 1-1: device descriptor read/64, error -32 [ 687.976046][ T5865] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 688.554154][ T8519] loop7: detected capacity change from 0 to 524255232 [ 688.838377][ T7713] usb 1-1: USB disconnect, device number 2 [ 689.020867][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 689.203273][ T24] usb 6-1: USB disconnect, device number 3 [ 692.265199][ T8531] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 692.278400][ T8531] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 692.354986][ T8531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 692.362046][ T8531] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 692.435147][ T8531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 692.441993][ T8531] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 692.562135][ T8531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 692.568637][ T8531] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 692.625135][ T8531] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 692.987080][ T8550] loop0: detected capacity change from 0 to 256 [ 693.516812][ T5110] Bluetooth: hci7: command 0x0406 tx timeout [ 693.624420][ T7713] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 693.845646][ T7713] usb 6-1: Using ep0 maxpacket: 16 [ 693.917625][ T7713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.930002][ T7713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.940655][ T7713] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 693.953983][ T7713] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 693.963648][ T7713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.236700][ T7713] usb 6-1: config 0 descriptor?? [ 694.392767][ T5110] Bluetooth: hci1: command 0x0406 tx timeout [ 694.474616][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 694.632421][ T5110] Bluetooth: hci3: command 0x0405 tx timeout [ 694.842718][ T7713] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 694.850469][ T7713] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 694.858356][ T7713] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 694.865956][ T7713] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 694.873511][ T7713] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 694.950549][ T8556] random: crng reseeded on system resumption [ 695.104336][ T8565] sctp: failed to load transform for md5: -2 [ 695.611601][ T5110] Bluetooth: hci7: command 0x0406 tx timeout [ 695.930311][ T7713] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 696.491868][ T5110] Bluetooth: hci1: command 0x0406 tx timeout [ 696.553172][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 696.713263][ T5110] Bluetooth: hci3: command 0x0405 tx timeout [ 696.950157][ T7713] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 696.965090][ T7713] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 697.738117][ T9] usb 6-1: USB disconnect, device number 4 [ 697.751415][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 697.766316][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 697.778397][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 697.790310][ T24] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 698.801686][ T5110] Bluetooth: hci3: command 0x0405 tx timeout [ 699.957529][ T5110] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 709.241395][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 710.519515][ T8647] loop7: detected capacity change from 0 to 2048 [ 710.606271][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 710.620040][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.631520][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.642299][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 710.661984][ T24] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 710.671784][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.817803][ T8652] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 710.947215][ T24] usb 3-1: config 0 descriptor?? [ 711.427374][ T8647] overlayfs: missing 'lowerdir' [ 711.586119][ T8652] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 711.601498][ T8652] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 711.762354][ T8652] Remounting filesystem read-only [ 711.768779][ T8647] NILFS (loop7): mounting fs with errors [ 711.803418][ T5110] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 711.930723][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 711.942208][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 712.211726][ T24] usb 3-1: USB disconnect, device number 2 [ 712.398872][ T8652] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 712.410221][ T8652] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 712.419806][ T8652] Remounting filesystem read-only [ 712.525139][ T7632] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 713.679320][ T8676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.594'. [ 715.949195][ T8686] program syz.0.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.911413][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 721.081396][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.088203][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.276774][ T8700] loop0: detected capacity change from 0 to 2048 [ 721.383271][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 721.425834][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.437890][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.448255][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.466303][ T24] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 721.477217][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.530353][ T8708] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.621133][ T24] usb 2-1: config 0 descriptor?? [ 722.024043][ T5110] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 722.050006][ T8700] overlayfs: missing 'lowerdir' [ 722.138068][ T8708] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 722.150573][ T8708] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 722.224234][ T8708] Remounting filesystem read-only [ 722.229997][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 722.238560][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 722.246032][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 722.255465][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 722.262918][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 722.271224][ T8700] NILFS (loop0): mounting fs with errors [ 722.299518][ T8701] random: crng reseeded on system resumption [ 722.347226][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 722.393311][ T24] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 722.404260][ T24] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 722.766218][ T8708] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 722.778458][ T8708] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 722.792790][ T8708] Remounting filesystem read-only [ 722.954594][ T8098] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 723.442602][ T7713] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 723.454821][ T7713] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 723.466624][ T7713] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 723.478376][ T7713] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 723.621295][ T24] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 723.790243][ T24] usb 2-1: device descriptor read/64, error -32 [ 724.091941][ T24] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 724.311414][ T24] usb 2-1: device descriptor read/64, error -32 [ 725.282520][ T5865] usb 2-1: USB disconnect, device number 6 [ 727.872949][ T5110] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 728.454970][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 728.626048][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 728.649553][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 728.658362][ T9] usb 6-1: config 179 has no interface number 0 [ 728.665110][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 728.676866][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 728.688785][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 728.700368][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 728.714623][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 728.732254][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 728.742699][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.096018][ T8767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 729.439024][ T5865] usb 6-1: USB disconnect, device number 5 [ 729.439180][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 729.453783][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 729.732360][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 729.958378][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 729.999047][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.010799][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.021261][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 730.034504][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 730.044124][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.278667][ T9] usb 3-1: config 0 descriptor?? [ 730.792507][ T9] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 730.799894][ T9] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 730.808278][ T9] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 730.815767][ T9] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 730.823380][ T9] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 730.914310][ T8773] random: crng reseeded on system resumption [ 732.020306][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 732.982439][ T5872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 733.033613][ T9] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 733.045219][ T9] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 733.401347][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 733.425521][ T5872] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 733.434499][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.447680][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.458835][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.469370][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.483217][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 733.492922][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.619197][ T8795] ieee802154 phy0 wpan0: encryption failed: -22 [ 733.696858][ T5879] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 733.699658][ T5865] usb 3-1: USB disconnect, device number 3 [ 733.708542][ T5879] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 733.726738][ T5879] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 733.738461][ T5879] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 734.341715][ T5872] usb 2-1: can't set config #16, error -71 [ 734.403438][ T5872] usb 2-1: USB disconnect, device number 7 [ 735.227925][ T5110] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 741.119931][ T8826] virtio-fs: tag not found [ 741.943620][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 744.141623][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 744.595736][ T8839] team_slave_1: entered promiscuous mode [ 745.072750][ T5872] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 745.081997][ T5879] usb 1-1: device descriptor read/all, error -71 [ 745.296294][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 745.386634][ T5872] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 745.395330][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 745.405383][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 745.415488][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 745.427929][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 745.442020][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 745.451797][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.750214][ T5872] usb 2-1: usb_control_msg returned -32 [ 745.756298][ T5872] usbtmc 2-1:16.0: can't read capabilities [ 746.035438][ T8849] Bluetooth: MGMT ver 1.23 [ 746.221117][ T5110] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 750.288462][ T5879] usb 2-1: USB disconnect, device number 8 [ 753.651721][ T5865] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 753.927259][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 753.972642][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.984202][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.994400][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 754.007799][ T5865] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 754.017240][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.299684][ T5865] usb 1-1: config 0 descriptor?? [ 755.081990][ T5865] usbhid 1-1:0.0: can't add hid device: -71 [ 755.088694][ T5865] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 755.271723][ T5865] usb 1-1: USB disconnect, device number 5 [ 756.051439][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.095962][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.105822][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.132346][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.142311][ T8901] sctp: failed to load transform for md5: -2 [ 756.212732][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 759.151216][ T5110] Bluetooth: hci4: command tx timeout [ 759.983555][ T8909] chnl_net:caif_netlink_parms(): no params data found [ 760.102802][ T8928] netlink: 'syz.7.663': attribute type 8 has an invalid length. [ 760.182992][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 760.411543][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 760.462549][ T5879] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 760.476768][ T5879] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.487563][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.497685][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 760.507938][ T5879] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.521426][ T5879] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 760.530678][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.731906][ T5110] Bluetooth: hci4: command tx timeout [ 761.762068][ T5879] usb 1-1: usb_control_msg returned -32 [ 761.768304][ T5879] usbtmc 1-1:16.0: can't read capabilities [ 763.530551][ T5879] usb 1-1: USB disconnect, device number 6 [ 763.761409][ T5110] Bluetooth: hci4: command tx timeout [ 764.261895][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 764.542121][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 764.618822][ T5879] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 764.628625][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.637186][ T5879] usb 2-1: Product: syz [ 764.641889][ T5879] usb 2-1: Manufacturer: syz [ 764.646754][ T5879] usb 2-1: SerialNumber: syz [ 764.776103][ T5865] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 764.878651][ T5879] usb 2-1: config 0 descriptor?? [ 764.981121][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 764.983233][ T5879] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 765.127384][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.138996][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.149370][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 765.162889][ T5865] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 765.172491][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.373588][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.382097][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.395598][ T8909] bridge_slave_0: entered allmulticast mode [ 765.405258][ T8909] bridge_slave_0: entered promiscuous mode [ 765.478977][ T5865] usb 1-1: config 0 descriptor?? [ 765.555689][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.563794][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.572021][ T8909] bridge_slave_1: entered allmulticast mode [ 765.582075][ T8909] bridge_slave_1: entered promiscuous mode [ 765.843665][ T5110] Bluetooth: hci4: command tx timeout [ 765.952224][ T5865] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 765.959733][ T5865] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 765.967455][ T5865] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 765.975060][ T5865] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 765.982574][ T5865] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 766.056109][ T5879] gspca_sonixj: reg_r err -71 [ 766.061485][ T5879] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 766.127561][ T8952] random: crng reseeded on system resumption [ 766.229419][ T5879] usb 2-1: USB disconnect, device number 9 [ 766.300218][ T8959] sctp: failed to load transform for md5: -2 [ 766.361621][ T5865] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 766.509197][ T5865] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 766.522872][ T5865] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 766.807457][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.005411][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.631966][ T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 767.647829][ T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 767.661950][ T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 767.673890][ T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 767.901308][ T5865] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 769.190870][ T8909] team0: Port device team_slave_0 added [ 769.221336][ T5865] usb 1-1: device descriptor read/64, error -32 [ 770.263946][ T8909] team0: Port device team_slave_1 added [ 772.100349][ T5865] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 772.241173][ T5865] usb 1-1: device descriptor read/64, error -32 [ 772.302167][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 772.532224][ T5865] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 772.632287][ T5865] usb 1-1: device descriptor read/8, error -32 [ 772.684169][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.691709][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.718558][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.033533][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.042277][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.072415][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.179703][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.7.677'. [ 773.655783][ T7713] usb 1-1: USB disconnect, device number 7 [ 774.212638][ T8909] hsr_slave_0: entered promiscuous mode [ 774.223225][ T8909] hsr_slave_1: entered promiscuous mode [ 774.234452][ T8909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.243436][ T8909] Cannot create hsr debugfs directory [ 775.455726][ T9005] sctp: failed to load transform for md5: -2 [ 775.493927][ T4133] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.807928][ T4133] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.073383][ T4133] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.091358][ T7713] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 776.365114][ T4133] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.131219][ T4133] bridge_slave_1: left allmulticast mode [ 777.137190][ T4133] bridge_slave_1: left promiscuous mode [ 777.144241][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.172411][ T4133] bridge_slave_0: left allmulticast mode [ 777.178341][ T4133] bridge_slave_0: left promiscuous mode [ 777.185337][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.292938][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.689'. [ 778.277828][ T4133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.504674][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038f53600: rx timeout, send abort [ 778.514959][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888038f53c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 778.732917][ T4133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.769801][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 778.836999][ T4133] bond0 (unregistering): Released all slaves [ 779.011620][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 779.017123][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038f53600: abort rx timeout. Force session deactivation [ 779.155330][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.168054][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.178837][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 779.192727][ T5865] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 779.202826][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.074642][ T5865] usb 2-1: config 0 descriptor?? [ 782.126320][ T7713] usb 1-1: device descriptor read/64, error -110 [ 782.402801][ T5865] usb 2-1: can't set config #0, error -71 [ 782.561975][ T5865] usb 2-1: USB disconnect, device number 10 [ 782.575123][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.583056][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.993647][ T4133] hsr_slave_0: left promiscuous mode [ 783.033367][ T4133] hsr_slave_1: left promiscuous mode [ 783.041980][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.049873][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.115313][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.123419][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.334121][ T4133] veth1_macvtap: left promiscuous mode [ 783.340057][ T4133] veth0_macvtap: left promiscuous mode [ 783.347685][ T4133] veth1_vlan: left promiscuous mode [ 783.353799][ T4133] veth0_vlan: left promiscuous mode [ 786.677263][ T4133] team0 (unregistering): Port device team_slave_1 removed [ 786.905157][ T4133] team0 (unregistering): Port device team_slave_0 removed [ 787.335977][ T8909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 787.833545][ T8909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 787.983519][ T8909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.125198][ T8909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 791.755426][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 792.382551][ T5900] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 792.699516][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 792.968323][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.980549][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.992299][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 793.005847][ T5900] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 793.015601][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.510620][ T5900] usb 3-1: config 0 descriptor?? [ 793.876630][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.183904][ T5900] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 794.191418][ T5900] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 794.198877][ T5900] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 794.206957][ T5900] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 794.214452][ T5900] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 794.377051][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.435812][ T5900] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 794.438797][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.451493][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.560121][ T5900] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 794.572506][ T5900] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 794.624851][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.632570][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.154382][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 795.251674][ T9111] block nbd7: NBD_DISCONNECT [ 795.392290][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 795.525410][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 795.535561][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.544176][ T9] usb 1-1: Product: syz [ 795.548808][ T9] usb 1-1: Manufacturer: syz [ 795.554041][ T9] usb 1-1: SerialNumber: syz [ 795.612224][ T5879] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 795.662548][ T5879] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 795.732669][ T5879] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 795.744940][ T5900] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 795.791579][ T5879] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 795.821410][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 795.828050][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 795.931673][ T5900] usb 3-1: device descriptor read/64, error -32 [ 796.099340][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 796.111721][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 796.234048][ T9] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 799.073521][ T7733] usb 3-1: USB disconnect, device number 4 [ 799.855200][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 799.855271][ T30] audit: type=1800 audit(1752333959.924:27): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.712" name="/" dev="9p" ino=2 res=0 errno=0 [ 800.657853][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 800.822131][ T9148] binder: 9147:9148 ioctl 4018620d 0 returned -22 [ 800.883109][ T9148] binder: 9147:9148 ioctl c0306201 0 returned -14 [ 800.904768][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.038381][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.715'. [ 802.234969][ T9165] syz_tun: entered allmulticast mode [ 802.327830][ T9163] syz_tun: left allmulticast mode [ 802.641233][ T7713] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 802.881422][ T7713] usb 8-1: Using ep0 maxpacket: 16 [ 802.933825][ T7713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.945043][ T7713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.959666][ T7713] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 802.978532][ T7713] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 802.988981][ T7713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.238685][ T7713] usb 8-1: config 0 descriptor?? [ 803.732186][ T7713] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 803.739890][ T7713] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 803.747498][ T7713] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 803.754917][ T7713] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 803.762233][ T7713] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 803.950508][ T7713] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 804.124494][ T7713] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 804.133935][ T7713] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 804.626427][ T8909] veth0_vlan: entered promiscuous mode [ 804.926631][ T8909] veth1_vlan: entered promiscuous mode [ 805.242162][ T5865] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 805.254420][ T5865] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 805.266273][ T5865] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 805.278038][ T5865] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 805.422214][ T7713] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 805.601456][ T7713] usb 8-1: device descriptor read/64, error -32 [ 805.609570][ T8909] veth0_macvtap: entered promiscuous mode [ 805.812833][ T8909] veth1_macvtap: entered promiscuous mode [ 805.962032][ T7713] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 806.145636][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.266327][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.438850][ T8909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.451273][ T8909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.460349][ T8909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.469985][ T8909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.748749][ T24] usb 8-1: USB disconnect, device number 6 [ 806.854340][ T9200] netlink: 100 bytes leftover after parsing attributes in process `syz.0.725'. [ 808.306540][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 808.628319][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'. [ 813.441156][ T9242] overlayfs: overlapping lowerdir path [ 815.161860][ T8420] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 816.152148][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 816.161515][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 816.221197][ T8420] usb 8-1: Using ep0 maxpacket: 16 [ 817.075287][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 817.247457][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 817.272047][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 817.442577][ T9261] team_slave_1: entered promiscuous mode [ 818.171711][ T8420] usb 8-1: device descriptor read/all, error -71 [ 819.352672][ T5110] Bluetooth: hci1: command tx timeout [ 820.565452][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.740'. [ 820.666927][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 820.712335][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 820.721814][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 820.782208][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 820.856501][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 821.540842][ T5826] Bluetooth: hci1: command tx timeout [ 821.879725][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 822.586674][ T4133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.712664][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 822.764966][ T4133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.923000][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 823.016693][ T24] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 823.026372][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.035075][ T24] usb 3-1: Product: syz [ 823.044443][ T24] usb 3-1: Manufacturer: syz [ 823.049302][ T24] usb 3-1: SerialNumber: syz [ 823.054813][ T5826] Bluetooth: hci5: command tx timeout [ 823.127712][ T4133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.430033][ T24] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 823.469332][ T4133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.591461][ T5826] Bluetooth: hci1: command tx timeout [ 825.158566][ T5826] Bluetooth: hci5: command tx timeout [ 825.207174][ T24] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 825.220168][ T9280] chnl_net:caif_netlink_parms(): no params data found [ 825.675562][ T5826] Bluetooth: hci1: command tx timeout [ 826.326243][ T8420] usb 3-1: USB disconnect, device number 5 [ 826.717429][ T4133] bridge_slave_1: left allmulticast mode [ 826.725447][ T4133] bridge_slave_1: left promiscuous mode [ 826.732429][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.753946][ T4133] bridge_slave_0: left allmulticast mode [ 826.759905][ T4133] bridge_slave_0: left promiscuous mode [ 826.768427][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.171285][ T7713] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 827.191495][ T5826] Bluetooth: hci5: command tx timeout [ 828.388685][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 828.421788][ T4133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.534434][ T4133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.633573][ T4133] bond0 (unregistering): Released all slaves [ 829.292212][ T5826] Bluetooth: hci5: command tx timeout [ 829.411286][ T7713] usb 1-1: Using ep0 maxpacket: 16 [ 829.493293][ T7713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.505282][ T7713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.515590][ T7713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 829.529398][ T7713] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 829.538919][ T7713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.863395][ T7713] usb 1-1: config 0 descriptor?? [ 830.018237][ T7713] usb 1-1: can't set config #0, error -71 [ 830.036138][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.043960][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.052042][ T9258] bridge_slave_0: entered allmulticast mode [ 830.053223][ T7713] usb 1-1: USB disconnect, device number 11 [ 830.061967][ T9258] bridge_slave_0: entered promiscuous mode [ 830.180576][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.188336][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.196738][ T9258] bridge_slave_1: entered allmulticast mode [ 830.314547][ T9258] bridge_slave_1: entered promiscuous mode [ 831.316489][ T4133] hsr_slave_0: left promiscuous mode [ 831.338308][ T4133] hsr_slave_1: left promiscuous mode [ 831.347049][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.356692][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.439729][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.447885][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.644512][ T4133] veth1_macvtap: left promiscuous mode [ 831.650463][ T4133] veth0_macvtap: left promiscuous mode [ 831.656755][ T4133] veth1_vlan: left promiscuous mode [ 831.662517][ T4133] veth0_vlan: left promiscuous mode [ 832.341987][ T4133] team0 (unregistering): Port device team_slave_1 removed [ 832.502355][ T4133] team0 (unregistering): Port device team_slave_0 removed [ 832.919722][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.101823][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.109571][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.119414][ T9280] bridge_slave_0: entered allmulticast mode [ 833.129081][ T9280] bridge_slave_0: entered promiscuous mode [ 833.171446][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.195605][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.204692][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.212618][ T9280] bridge_slave_1: entered allmulticast mode [ 833.222047][ T9280] bridge_slave_1: entered promiscuous mode [ 833.569225][ T9258] team0: Port device team_slave_0 added [ 833.799583][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.898125][ T9258] team0: Port device team_slave_1 added [ 834.039758][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.687752][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.695465][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.723955][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.979106][ T4133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.084760][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.092091][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.118801][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.153425][ T9280] team0: Port device team_slave_0 added [ 835.190381][ T4133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.304538][ T7713] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 835.317199][ T9280] team0: Port device team_slave_1 added [ 835.430307][ T4133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.536586][ T7713] usb 3-1: Using ep0 maxpacket: 16 [ 835.573452][ T7713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.585784][ T7713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.596571][ T7713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 835.611793][ T7713] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 835.622560][ T7713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.717512][ T7713] usb 3-1: config 0 descriptor?? [ 835.863669][ T4133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.169547][ T9380] random: crng reseeded on system resumption [ 836.368514][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.377258][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.404400][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.617862][ T9258] hsr_slave_0: entered promiscuous mode [ 836.631225][ T9258] hsr_slave_1: entered promiscuous mode [ 836.642380][ T9258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.650392][ T9258] Cannot create hsr debugfs directory [ 836.680131][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.687610][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.714459][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.386405][ T4133] bridge_slave_1: left allmulticast mode [ 837.392731][ T4133] bridge_slave_1: left promiscuous mode [ 837.400010][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.519741][ T4133] bridge_slave_0: left allmulticast mode [ 837.526409][ T4133] bridge_slave_0: left promiscuous mode [ 837.533978][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.231428][ T4133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.305528][ T4133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.360408][ T4133] bond0 (unregistering): Released all slaves [ 838.556283][ T7713] usbhid 3-1:0.0: can't add hid device: -71 [ 838.563184][ T7713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 838.577959][ T7713] usb 3-1: USB disconnect, device number 6 [ 838.846502][ T9408] team_slave_1: entered promiscuous mode [ 838.959803][ T4133] hsr_slave_0: left promiscuous mode [ 838.988159][ T4133] hsr_slave_1: left promiscuous mode [ 838.996923][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.005248][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.063655][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.072315][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.203329][ T4133] veth1_macvtap: left promiscuous mode [ 839.209189][ T4133] veth0_macvtap: left promiscuous mode [ 839.217540][ T4133] veth1_vlan: left promiscuous mode [ 839.223696][ T4133] veth0_vlan: left promiscuous mode [ 840.415654][ T9425] input: syz1 as /devices/virtual/input/input13 [ 840.741299][ T4133] team0 (unregistering): Port device team_slave_1 removed [ 840.775222][ T4133] team0 (unregistering): Port device team_slave_0 removed [ 841.704934][ T9280] hsr_slave_0: entered promiscuous mode [ 841.713864][ T9280] hsr_slave_1: entered promiscuous mode [ 841.721753][ T9280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.729455][ T9280] Cannot create hsr debugfs directory [ 842.137315][ T5826] Bluetooth: hci7: Unable to find connection with handle 0x00c9 [ 844.240591][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.247494][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.667952][ T9458] process 'syz.2.776' launched './file0' with NULL argv: empty string added [ 845.187265][ T9258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 845.422560][ T9258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 845.502769][ T9258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 845.679628][ T9258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 845.833148][ T9280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 845.972228][ T9280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 846.042744][ T9280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 846.112760][ T9280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 847.285212][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.454981][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.589342][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.597015][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.614816][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.622507][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.331957][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.626369][ T9280] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.773010][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.780649][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.979883][ T7482] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.987655][ T7482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.598764][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.271737][ T9258] veth0_vlan: entered promiscuous mode [ 852.608500][ T9258] veth1_vlan: entered promiscuous mode [ 853.503931][ T9280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.666824][ T9258] veth0_macvtap: entered promiscuous mode [ 853.798281][ T9258] veth1_macvtap: entered promiscuous mode [ 854.086073][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.308859][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.460418][ T9258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.470382][ T9258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.480760][ T9258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.490257][ T9258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.861592][ T9561] loop7: detected capacity change from 0 to 2048 [ 859.042084][ T9567] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 859.245299][ T9561] overlayfs: upper fs does not support tmpfile. [ 859.386914][ T9561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 859.396076][ T9561] overlayfs: failed to set xattr on upper [ 859.402537][ T9561] overlayfs: ...falling back to redirect_dir=nofollow. [ 859.409605][ T9561] overlayfs: ...falling back to index=off. [ 859.415761][ T9561] overlayfs: ...falling back to uuid=null. [ 859.481984][ T9567] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 859.496035][ T9567] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 859.601988][ T9567] Remounting filesystem read-only [ 859.610395][ T9569] NILFS (loop7): mounting fs with errors [ 859.753162][ T9280] veth0_vlan: entered promiscuous mode [ 859.876947][ T9280] veth1_vlan: entered promiscuous mode [ 860.111334][ T9567] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 860.123655][ T9567] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 860.133372][ T9567] Remounting filesystem read-only [ 860.251462][ T7632] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 860.321502][ T9280] veth0_macvtap: entered promiscuous mode [ 860.478323][ T9280] veth1_macvtap: entered promiscuous mode [ 860.754330][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.903980][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.077781][ T9280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.087063][ T9280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.096360][ T9280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.105551][ T9280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.282987][ T9640] loop7: detected capacity change from 0 to 2048 [ 867.530739][ T9651] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.743787][ T9640] overlayfs: upper fs does not support tmpfile. [ 867.783587][ T9640] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 867.793969][ T9640] overlayfs: failed to set xattr on upper [ 867.799923][ T9640] overlayfs: ...falling back to redirect_dir=nofollow. [ 867.807525][ T9640] overlayfs: ...falling back to index=off. [ 867.813695][ T9640] overlayfs: ...falling back to uuid=null. [ 867.946348][ T9651] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 867.958261][ T9651] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 868.075349][ T9651] Remounting filesystem read-only [ 868.141266][ T9656] NILFS (loop7): mounting fs with errors [ 868.406344][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.414737][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.657608][ T9651] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 868.669625][ T9651] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 868.679410][ T9651] Remounting filesystem read-only [ 868.763577][ T7491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.772884][ T7491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.825318][ T7632] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 870.022815][ T9684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 870.213007][ T9687] vivid-007: disconnect [ 870.314484][ T9689] netlink: 'syz.7.815': attribute type 10 has an invalid length. [ 870.342962][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.369924][ T9689] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 870.918675][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 871.137727][ T9684] team0 (unregistering): Port device team_slave_0 removed [ 871.184763][ T9684] team0 (unregistering): Port device team_slave_1 removed [ 871.445285][ T9683] vivid-007: reconnect [ 876.108503][ T9723] loop2: detected capacity change from 0 to 2048 [ 876.567840][ T9741] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 876.818344][ T9723] overlayfs: upper fs does not support tmpfile. [ 876.944013][ T9723] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 876.951633][ T9723] overlayfs: failed to set xattr on upper [ 876.957720][ T9723] overlayfs: ...falling back to redirect_dir=nofollow. [ 876.966350][ T9723] overlayfs: ...falling back to index=off. [ 876.973533][ T9723] overlayfs: ...falling back to uuid=null. [ 877.105501][ T9741] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 877.118655][ T9741] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 877.298211][ T9741] Remounting filesystem read-only [ 877.345953][ T9746] NILFS (loop2): mounting fs with errors [ 877.567071][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.596490][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.609575][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.675281][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.716579][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.091531][ T9741] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 878.104588][ T9741] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 878.114998][ T9741] Remounting filesystem read-only [ 878.252410][ T8159] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 879.851969][ T5826] Bluetooth: hci2: command tx timeout [ 881.911669][ T5826] Bluetooth: hci2: command tx timeout [ 882.537157][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 882.686219][ T7485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.927762][ T7485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.330321][ T7485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.920339][ T7485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.013257][ T5826] Bluetooth: hci2: command tx timeout [ 884.130788][ T9798] loop0: detected capacity change from 0 to 2048 [ 884.318604][ T9809] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 884.518778][ T9798] overlayfs: upper fs does not support tmpfile. [ 884.602164][ T9809] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 884.605895][ T9798] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 884.614087][ T9809] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 884.621424][ T9798] overlayfs: failed to set xattr on upper [ 884.637687][ T9798] overlayfs: ...falling back to redirect_dir=nofollow. [ 884.645896][ T9798] overlayfs: ...falling back to index=off. [ 884.652239][ T9798] overlayfs: ...falling back to uuid=null. [ 884.765494][ T7485] bridge_slave_1: left allmulticast mode [ 884.773271][ T7485] bridge_slave_1: left promiscuous mode [ 884.779950][ T9809] Remounting filesystem read-only [ 884.780031][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.839226][ T9813] NILFS (loop0): mounting fs with errors [ 884.868807][ T7485] bridge_slave_0: left allmulticast mode [ 884.882433][ T7485] bridge_slave_0: left promiscuous mode [ 884.892498][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.566463][ T9809] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 885.578712][ T9809] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 885.588479][ T9809] Remounting filesystem read-only [ 885.623792][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.714735][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.743254][ T8098] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 885.767074][ T7485] bond0 (unregistering): Released all slaves [ 886.071785][ T5826] Bluetooth: hci2: command tx timeout [ 886.080516][ T9817] sctp: failed to load transform for md5: -2 [ 886.249238][ T7485] hsr_slave_0: left promiscuous mode [ 886.287207][ T7485] hsr_slave_1: left promiscuous mode [ 886.295665][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.303649][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.444557][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.452362][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.612465][ T7485] veth1_macvtap: left promiscuous mode [ 886.618216][ T7485] veth0_macvtap: left promiscuous mode [ 886.624174][ T7485] veth1_vlan: left promiscuous mode [ 886.631972][ T7485] veth0_vlan: left promiscuous mode [ 887.777959][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 887.881862][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 888.608431][ T9839] tipc: Enabling of bearer rejected, failed to enable media [ 889.573830][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.581859][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.589589][ T9750] bridge_slave_0: entered allmulticast mode [ 889.603475][ T9750] bridge_slave_0: entered promiscuous mode [ 889.751359][ T30] audit: type=1326 audit(1752334049.774:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.774535][ T30] audit: type=1326 audit(1752334049.824:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.797495][ T30] audit: type=1326 audit(1752334049.864:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.824226][ T30] audit: type=1326 audit(1752334049.864:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.847711][ T30] audit: type=1326 audit(1752334049.864:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.870659][ T30] audit: type=1326 audit(1752334049.914:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.893409][ T30] audit: type=1326 audit(1752334049.914:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.918057][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.918460][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.919118][ T9750] bridge_slave_1: entered allmulticast mode [ 889.926479][ T30] audit: type=1326 audit(1752334049.934:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9a738e929 code=0x7ffc0000 [ 889.937663][ T9750] bridge_slave_1: entered promiscuous mode [ 890.685559][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.835118][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.996954][ T9866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.326299][ T9750] team0: Port device team_slave_0 added [ 891.435042][ T9750] team0: Port device team_slave_1 added [ 891.523291][ T9870] loop2: detected capacity change from 0 to 2048 [ 891.763019][ T9874] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.971099][ T9870] overlayfs: upper fs does not support tmpfile. [ 891.999513][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.007689][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.034278][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.111497][ T9870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 892.111607][ T9874] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 892.118746][ T9870] overlayfs: failed to set xattr on upper [ 892.118803][ T9870] overlayfs: ...falling back to redirect_dir=nofollow. [ 892.118861][ T9870] overlayfs: ...falling back to index=off. [ 892.118917][ T9870] overlayfs: ...falling back to uuid=null. [ 892.159158][ T9874] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 892.319336][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.327419][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.354579][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.414976][ T9874] Remounting filesystem read-only [ 892.427819][ T9876] NILFS (loop2): mounting fs with errors [ 892.740293][ T9750] hsr_slave_0: entered promiscuous mode [ 892.749645][ T9750] hsr_slave_1: entered promiscuous mode [ 892.757590][ T9750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.765370][ T9750] Cannot create hsr debugfs directory [ 892.877746][ T9874] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 892.889650][ T9874] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 892.899260][ T9874] Remounting filesystem read-only [ 893.052226][ T8159] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 893.611398][ T5872] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 893.826638][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 893.931657][ T5872] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 893.941428][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.949723][ T5872] usb 1-1: Product: syz [ 893.954672][ T5872] usb 1-1: Manufacturer: syz [ 893.959531][ T5872] usb 1-1: SerialNumber: syz [ 894.175456][ T5872] r8152-cfgselector 1-1: Unknown version 0x0000 [ 894.182506][ T5872] r8152-cfgselector 1-1: config 0 descriptor?? [ 894.468554][ T5872] r8152-cfgselector 1-1: Unknown version 0x0000 [ 894.475487][ T5872] r8152-cfgselector 1-1: bad CDC descriptors [ 894.523388][ T5872] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 894.543342][ T9886] sctp: failed to load transform for md5: -2 [ 894.736012][ T9895] binder_alloc: 9893: binder_alloc_buf, no vma [ 896.176951][ T9750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.358387][ T9750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 896.502797][ T9750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 896.643751][ T9750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 898.014515][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.245812][ T9750] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.326133][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.333910][ T7361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.388445][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.396247][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.786578][ T5900] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 899.972208][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 900.121872][ T5900] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 900.131579][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.139910][ T5900] usb 3-1: Product: syz [ 900.146787][ T5900] usb 3-1: Manufacturer: syz [ 900.153079][ T5900] usb 3-1: SerialNumber: syz [ 900.584310][ T5900] r8152-cfgselector 3-1: Unknown version 0x0000 [ 900.591308][ T5900] r8152-cfgselector 3-1: config 0 descriptor?? [ 901.076639][ T5900] r8152-cfgselector 3-1: Unknown version 0x0000 [ 901.083603][ T5900] r8152-cfgselector 3-1: bad CDC descriptors [ 901.255804][ T5900] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 901.435091][ T9750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.272307][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 904.393446][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 905.381867][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.388687][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.768030][ T9750] veth0_vlan: entered promiscuous mode [ 905.841676][T10000] smc: net device bond0 applied user defined pnetid SYZ2 [ 905.908279][ T9750] veth1_vlan: entered promiscuous mode [ 905.920070][T10000] netlink: 14 bytes leftover after parsing attributes in process `syz.7.881'. [ 905.957941][T10000] smc: removing net device bond0 with user defined pnetid SYZ2 [ 905.990791][T10000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.072874][T10000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.141271][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 906.229032][T10000] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 906.332085][T10000] bond0 (unregistering): Released all slaves [ 906.462143][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 906.520075][ T5872] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 906.529677][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.538103][ T5872] usb 3-1: Product: syz [ 906.542643][ T5872] usb 3-1: Manufacturer: syz [ 906.547509][ T5872] usb 3-1: SerialNumber: syz [ 906.745532][ T5872] r8152-cfgselector 3-1: Unknown version 0x0000 [ 906.753083][ T5872] r8152-cfgselector 3-1: config 0 descriptor?? [ 907.013473][ T9750] veth0_macvtap: entered promiscuous mode [ 907.160178][ T9750] veth1_macvtap: entered promiscuous mode [ 907.232723][ T5872] r8152-cfgselector 3-1: Unknown version 0x0000 [ 907.239322][ T5872] r8152-cfgselector 3-1: bad CDC descriptors [ 907.332408][ T5872] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 907.518497][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.605713][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.688518][ T9750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.697814][ T9750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.707038][ T9750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.716299][ T9750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.039305][ T4133] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xd4 [ 909.048768][ T4133] ===================================================== [ 909.059140][ T4133] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2b0b/0x42b0 [ 909.068205][ T4133] nci_ntf_packet+0x2b0b/0x42b0 [ 909.073909][ T4133] nci_rx_work+0x403/0x750 [ 909.078591][ T4133] process_scheduled_works+0xb91/0x1d80 [ 909.084508][ T4133] worker_thread+0xedf/0x1590 [ 909.089481][ T4133] kthread+0xd59/0xf00 [ 909.093867][ T4133] ret_from_fork+0x1e0/0x310 [ 909.098684][ T4133] ret_from_fork_asm+0x1a/0x30 [ 909.103800][ T4133] [ 909.106260][ T4133] Uninit was created at: [ 909.110788][ T4133] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 909.117336][ T4133] kmalloc_reserve+0x13c/0x4b0 [ 909.122592][ T4133] __alloc_skb+0x347/0x7d0 [ 909.127257][ T4133] virtual_ncidev_write+0x6b/0x430 [ 909.132799][ T4133] vfs_write+0x463/0x1580 [ 909.137405][ T4133] __x64_sys_write+0x1fb/0x4d0 [ 909.142658][ T4133] x64_sys_call+0x38c3/0x3db0 [ 909.147626][ T4133] do_syscall_64+0xd9/0x210 [ 909.153786][ T4133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.160097][ T4133] [ 909.165358][ T4133] CPU: 0 UID: 0 PID: 4133 Comm: kworker/u8:26 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(none) [ 909.178620][ T4133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 909.189258][ T4133] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 909.196068][ T4133] ===================================================== [ 909.203346][ T4133] Disabling lock debugging due to kernel taint [ 909.209694][ T4133] Kernel panic - not syncing: kmsan.panic set ... [ 909.216317][ T4133] CPU: 0 UID: 0 PID: 4133 Comm: kworker/u8:26 Tainted: G B 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(none) [ 909.230397][ T4133] Tainted: [B]=BAD_PAGE [ 909.234689][ T4133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 909.244966][ T4133] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 909.250788][ T4133] Call Trace: [ 909.254201][ T4133] [ 909.257290][ T4133] __dump_stack+0x26/0x30 [ 909.261868][ T4133] dump_stack_lvl+0x53/0x270 [ 909.266700][ T4133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 909.272772][ T4133] dump_stack+0x1e/0x25 [ 909.277138][ T4133] panic+0x4bd/0xd50 [ 909.281334][ T4133] kmsan_report+0x31c/0x320 [ 909.286063][ T4133] ? __msan_warning+0x1b/0x30 [ 909.290961][ T4133] ? nci_ntf_packet+0x2b0b/0x42b0 [ 909.296195][ T4133] ? nci_rx_work+0x403/0x750 [ 909.301056][ T4133] ? process_scheduled_works+0xb91/0x1d80 [ 909.307052][ T4133] ? worker_thread+0xedf/0x1590 [ 909.312165][ T4133] ? kthread+0xd59/0xf00 [ 909.316604][ T4133] ? ret_from_fork+0x1e0/0x310 [ 909.321644][ T4133] ? ret_from_fork_asm+0x1a/0x30 [ 909.326824][ T4133] ? ret_from_fork_asm+0x1a/0x30 [ 909.332078][ T4133] ? vprintk_emit+0xab3/0xcd0 [ 909.336995][ T4133] ? vprintk_default+0x3f/0x50 [ 909.341962][ T4133] ? vprintk+0x36/0x50 [ 909.346261][ T4133] ? _printk+0x17e/0x1b0 [ 909.350773][ T4133] ? kmsan_get_metadata+0xfb/0x160 [ 909.356173][ T4133] __msan_warning+0x1b/0x30 [ 909.360908][ T4133] nci_ntf_packet+0x2b0b/0x42b0 [ 909.365985][ T4133] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 909.372281][ T4133] ? sk_skb_reason_drop+0x13f/0x440 [ 909.377751][ T4133] nci_rx_work+0x403/0x750 [ 909.382424][ T4133] ? __pfx_nci_rx_work+0x10/0x10 [ 909.387594][ T4133] process_scheduled_works+0xb91/0x1d80 [ 909.393441][ T4133] worker_thread+0xedf/0x1590 [ 909.398402][ T4133] kthread+0xd59/0xf00 [ 909.402657][ T4133] ? __pfx_worker_thread+0x10/0x10 [ 909.408033][ T4133] ? __pfx_kthread+0x10/0x10 [ 909.412849][ T4133] ret_from_fork+0x1e0/0x310 [ 909.417654][ T4133] ? __pfx_kthread+0x10/0x10 [ 909.422455][ T4133] ret_from_fork_asm+0x1a/0x30 [ 909.427485][ T4133] [ 909.431005][ T4133] Kernel Offset: disabled [ 909.435422][ T4133] Rebooting in 86400 seconds..