last executing test programs: 10m41.423084315s ago: executing program 0 (id=156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m39.379302637s ago: executing program 0 (id=158): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 10m38.363176396s ago: executing program 0 (id=160): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x23, 0x3, 0x7ff) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r2, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000"], 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x80001) 10m34.800871575s ago: executing program 0 (id=166): socket$nl_xfrm(0x10, 0x3, 0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7b33da90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002868000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3a400000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000600)="d1", 0x1}], 0x1) dup3(r0, r2, 0x6700000000000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10m32.606013663s ago: executing program 0 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10m29.201615109s ago: executing program 0 (id=173): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x1d, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x5, '\x00', 0x33}, {0x9, 0xf, 0x57, '\x00', 0x9}, {0x2, 0x4, 0x1}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x8, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xf}, {0x7b, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x6, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x4}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 10m13.714317429s ago: executing program 32 (id=173): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x1d, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x5, '\x00', 0x33}, {0x9, 0xf, 0x57, '\x00', 0x9}, {0x2, 0x4, 0x1}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x8, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xf}, {0x7b, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x6, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x4}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 9m21.630699159s ago: executing program 2 (id=267): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 9m21.286460332s ago: executing program 2 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xf44}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 9m21.111322744s ago: executing program 2 (id=269): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002940)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xf44}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 9m20.370221222s ago: executing program 2 (id=272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 9m9.554774175s ago: executing program 2 (id=274): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x141601) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) msgget$private(0x0, 0x30c) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 9m8.488750646s ago: executing program 2 (id=278): ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bridge_slave_1\x00', 0x8000}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) prlimit64(r4, 0x7, &(0x7f0000000240)={0xe}, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 8m53.163165798s ago: executing program 33 (id=278): ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bridge_slave_1\x00', 0x8000}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) prlimit64(r4, 0x7, &(0x7f0000000240)={0xe}, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 7m38.051381038s ago: executing program 1 (id=414): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x1100, 0x50, 0x493, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0xfff0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6}]) dup3(r2, r0, 0x0) 7m37.672190664s ago: executing program 1 (id=417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x80000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xcbff9000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m36.624091184s ago: executing program 1 (id=419): socket$packet(0x11, 0x3, 0x300) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000480)='gfs2meta\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0xc000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x890d, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f0000000180)="d595", &(0x7f0000000680)=""/98, &(0x7f0000000880)="ce91773e07b1c65288445451d3243d5605208183dd87c538664f2306ba029f30cb778bd7932ebb3af3f7243dede2cbe5b5cc7f2365cdba5280e1dbefc1dd0491d96036371e683567c953a456248374811bb0b39888e420868d8616aa6e46dbeb051725d666c20d382d6355f7bb38a7f370a155b0b5fdcf9ec8dfd84f521bf61f22c1b3f17d91ea3117f1560ae196148995008da8aabb824cd542edb354d388723e6ab665f8a1a36503e8c57d156dd0e37f978603b4e5c280103ea73f06ab6a1c78b33000f996d2c228069a29b6bd6411623190e9c788a48fb6b86597e94c2a", &(0x7f0000000980)="96937f67751e71a3d273376cf7229c1b2a25ec71e6181ebb39f24eaa5daef674153e929c4bb586feebbc89bb31c260772180757b728dd1a9e2e087e04ce1bbd9d73fb49faf38", 0x3, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x29, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0xfe, 0x6}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 7m36.322327491s ago: executing program 1 (id=421): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000"], 0x4c}}, 0x40000) 7m35.120465042s ago: executing program 1 (id=422): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 7m33.779997401s ago: executing program 1 (id=424): socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0xc000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) pipe2$watch_queue(0x0, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8e, &(0x7f00000002c0)=""/142, 0x0, 0x20}, 0x94) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x890d, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f0000000180)="d595", &(0x7f0000000680)=""/98, &(0x7f0000000880)="ce91773e07b1c65288445451d3243d5605208183dd87c538664f2306ba029f30cb778bd7932ebb3af3f7243dede2cbe5b5cc7f2365cdba5280e1dbefc1dd0491d96036371e683567c953a456248374811bb0b39888e420868d8616aa6e46dbeb051725d666c20d382d6355f7bb38a7f370a155b0b5fdcf9ec8dfd84f521bf61f22c1b3f17d91ea3117f1560ae196148995008da8aabb824cd542edb354d388723e6ab665f8a1a36503e8c57d156dd0e37f978603b4e5c280103ea73f06ab6a1c78b33000f996d2c228069a29b6bd6411623190e9c788a48fb6b86597e94c2a", &(0x7f0000000980)="96937f67751e71a3d273376cf7229c1b2a25ec71e6181ebb39f24eaa5daef674153e929c4bb586feebbc89bb31c260772180757b728dd1a9e2e087e04ce1bbd9d73fb49faf38", 0x3, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x29, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0xfe, 0x6}]}, 0x10) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) 7m18.519966893s ago: executing program 34 (id=424): socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0xc000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) pipe2$watch_queue(0x0, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8e, &(0x7f00000002c0)=""/142, 0x0, 0x20}, 0x94) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x890d, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f0000000180)="d595", &(0x7f0000000680)=""/98, &(0x7f0000000880)="ce91773e07b1c65288445451d3243d5605208183dd87c538664f2306ba029f30cb778bd7932ebb3af3f7243dede2cbe5b5cc7f2365cdba5280e1dbefc1dd0491d96036371e683567c953a456248374811bb0b39888e420868d8616aa6e46dbeb051725d666c20d382d6355f7bb38a7f370a155b0b5fdcf9ec8dfd84f521bf61f22c1b3f17d91ea3117f1560ae196148995008da8aabb824cd542edb354d388723e6ab665f8a1a36503e8c57d156dd0e37f978603b4e5c280103ea73f06ab6a1c78b33000f996d2c228069a29b6bd6411623190e9c788a48fb6b86597e94c2a", &(0x7f0000000980)="96937f67751e71a3d273376cf7229c1b2a25ec71e6181ebb39f24eaa5daef674153e929c4bb586feebbc89bb31c260772180757b728dd1a9e2e087e04ce1bbd9d73fb49faf38", 0x3, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x29, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0xfe, 0x6}]}, 0x10) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) 8.299789524s ago: executing program 4 (id=1153): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="02", 0x1}], 0x1}}], 0x1, 0x24005805) 8.245319863s ago: executing program 4 (id=1154): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000080)={0x0, 0xce2, 0x7c, 0x101, 0x8, 0x7, 0xffff0000}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x10) open(0x0, 0x442, 0x2) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 6.083577667s ago: executing program 4 (id=1156): set_robust_list(&(0x7f0000000040)={0x0, 0x5829}, 0x18) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000240)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12, 0xc, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x61]}}, &(0x7f0000000580)=""/104, 0x2a, 0x68, 0x1, 0xe}, 0x28) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, 0x0, 0x86) dup3(0xffffffffffffffff, r3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="000126bd7000fddbdf250c0000000f000a00f92b8e6ff49809d743028f000800090001ac0f0010006e800400010004000100040002000500080001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x24004085) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x10}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r5, 0x48df, 0x0, 0x62, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5.51964471s ago: executing program 3 (id=1157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0x1) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "65410600"}]}}, 0x0}, 0x0) 4.631473813s ago: executing program 3 (id=1158): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002940)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xf44}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 4.469074333s ago: executing program 3 (id=1159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 4.301095085s ago: executing program 3 (id=1160): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x180, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.278416997s ago: executing program 4 (id=1161): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x281, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.517032823s ago: executing program 3 (id=1162): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) execve(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "65410600"}]}}, 0x0}, 0x0) 1.515060489s ago: executing program 4 (id=1163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window], 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 160.757618ms ago: executing program 3 (id=1164): set_robust_list(&(0x7f0000000040)={0x0, 0x5829}, 0x18) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000240)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12, 0xc, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x61]}}, &(0x7f0000000580)=""/104, 0x2a, 0x68, 0x1, 0xe}, 0x28) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, 0x0, 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="000126bd7000fddbdf250c0000000f000a00f92b8e6ff49809d743028f000800090001ac0f0010006e800400010004000100040002000500080001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x24004085) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x10}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r5, 0x48df, 0x0, 0x62, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 4 (id=1165): set_robust_list(&(0x7f0000000040)={0x0, 0x5829}, 0x18) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000240)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12, 0xc, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x61]}}, &(0x7f0000000580)=""/104, 0x2a, 0x68, 0x1, 0xe}, 0x28) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, 0x0, 0x86) dup3(0xffffffffffffffff, r3, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="000126bd7000fddbdf250c0000000f000a00f92b8e6ff49809d743028f000800090001ac0f0010006e800400010004000100040002000500080001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x24004085) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x10}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r5, 0x48df, 0x0, 0x62, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): erface: batadv_slave_0 [ 452.053053][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.053067][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.057197][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 452.083344][ T8070] ALSA: mixer_oss: invalid OSS volume '' [ 452.101024][ T8070] syz.4.513 (8070): drop_caches: 2 [ 452.209657][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.209668][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.209682][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.277992][ T7829] hsr_slave_0: entered promiscuous mode [ 453.291719][ T7829] hsr_slave_1: entered promiscuous mode [ 453.647409][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.647548][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.647806][ T7951] bridge_slave_0: entered allmulticast mode [ 453.650860][ T7951] bridge_slave_0: entered promiscuous mode [ 454.184949][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.185095][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.185299][ T7951] bridge_slave_1: entered allmulticast mode [ 454.188704][ T7951] bridge_slave_1: entered promiscuous mode [ 454.722476][ T49] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 454.874720][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 454.877195][ T49] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.877223][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.877248][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.877271][ T49] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.877312][ T49] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.877334][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.004967][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.105210][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.156496][ T49] usb 4-1: usb_control_msg returned -32 [ 455.156544][ T49] usbtmc 4-1:16.0: can't read capabilities [ 455.212938][ T49] usb 4-1: USB disconnect, device number 15 [ 455.580605][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.021081][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.384434][ T7951] team0: Port device team_slave_0 added [ 456.721878][ T7951] team0: Port device team_slave_1 added [ 457.062978][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.596468][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.775166][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.813081][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.101817][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.298744][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.512085][ T8121] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 458.513459][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.785219][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.800969][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.800985][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.801011][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.967756][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.258139][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.305075][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.305092][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.305118][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.764708][ T8123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.800399][ T8123] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 460.803358][ T8123] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 461.108289][ T7951] hsr_slave_0: entered promiscuous mode [ 461.109171][ T7951] hsr_slave_1: entered promiscuous mode [ 461.109749][ T7951] debugfs: 'hsr0' already exists in 'hsr' [ 461.109765][ T7951] Cannot create hsr debugfs directory [ 461.172459][ T5908] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 461.322472][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 461.334742][ T5908] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 461.334797][ T5908] usb 5-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.334838][ T5908] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 461.334859][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.388610][ T5908] hub 5-1:32.0: bad descriptor, ignoring hub [ 461.388650][ T5908] hub 5-1:32.0: probe with driver hub failed with error -5 [ 461.440615][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'. [ 461.580782][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.713119][ T49] usb 5-1: USB disconnect, device number 13 [ 461.882622][ T5978] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 462.047580][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 462.049884][ T5978] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 462.049926][ T5978] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 462.049948][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.250088][ T7712] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.294531][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.294683][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.297186][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.299829][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.623651][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.661743][ T43] bridge_slave_1: left allmulticast mode [ 462.661771][ T43] bridge_slave_1: left promiscuous mode [ 462.661987][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.784676][ T43] bridge_slave_0: left allmulticast mode [ 462.784743][ T43] bridge_slave_0: left promiscuous mode [ 462.785079][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.883492][ T5978] usb 4-1: string descriptor 0 read error: -71 [ 462.885544][ T5978] hub 4-1:32.0: bad descriptor, ignoring hub [ 462.885566][ T5978] hub 4-1:32.0: probe with driver hub failed with error -5 [ 462.925750][ T43] bridge_slave_1: left allmulticast mode [ 462.925778][ T43] bridge_slave_1: left promiscuous mode [ 462.925972][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.983723][ T5978] usb 4-1: USB disconnect, device number 16 [ 463.006745][ T43] bridge_slave_0: left allmulticast mode [ 463.006772][ T43] bridge_slave_0: left promiscuous mode [ 463.007005][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.165084][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.477951][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.665677][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.667054][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.668531][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.670432][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.708256][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.778679][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.832929][ T5978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 470.871064][ T43] bond0 (unregistering): Released all slaves [ 471.004459][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 471.059677][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.060155][ T5978] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 471.060457][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.068933][ T5978] usb 5-1: config 0 descriptor?? [ 472.077768][ T5978] usb 5-1: can't set config #0, error -71 [ 472.124368][ T5117] Bluetooth: hci0: command tx timeout [ 472.128955][ T5978] usb 5-1: USB disconnect, device number 14 [ 474.262542][ T5117] Bluetooth: hci0: command tx timeout [ 474.655812][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.673281][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.873169][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.951108][ T43] bond0 (unregistering): Released all slaves [ 475.237225][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.262484][ T5787] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 475.373120][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.422465][ T5787] usb 5-1: Using ep0 maxpacket: 8 [ 475.424923][ T5787] usb 5-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.424970][ T5787] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 475.424992][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.469901][ T8226] ALSA: mixer_oss: invalid OSS volume '' [ 475.479439][ T8226] syz.3.545 (8226): drop_caches: 2 [ 475.721534][ T5787] usb 5-1: string descriptor 0 read error: -71 [ 475.722276][ T5787] hub 5-1:32.0: bad descriptor, ignoring hub [ 475.735241][ T5787] hub 5-1:32.0: probe with driver hub failed with error -5 [ 476.063892][ T5787] usb 5-1: USB disconnect, device number 15 [ 476.131239][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.149225][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.150378][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.151818][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.172511][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.343688][ T61] Bluetooth: hci0: command tx timeout [ 476.634109][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.043822][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.701171][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.739690][ T43] hsr_slave_0: left promiscuous mode [ 477.752669][ T43] hsr_slave_1: left promiscuous mode [ 477.753600][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.775766][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.872583][ T43] hsr_slave_0: left promiscuous mode [ 477.894974][ T43] hsr_slave_1: left promiscuous mode [ 477.895910][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.923612][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.243463][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.352467][ T61] Bluetooth: hci6: command tx timeout [ 478.386917][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.422603][ T61] Bluetooth: hci0: command tx timeout [ 478.537859][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.673203][ T43] team0 (unregistering): Port device team_slave_1 removed [ 478.704906][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.774731][ T43] team0 (unregistering): Port device team_slave_0 removed [ 479.002297][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 479.452507][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.655365][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.723459][ T8258] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 479.723494][ T8258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.549'. [ 479.749509][ T43] team0 (unregistering): Port device team_slave_1 removed [ 479.843625][ T43] team0 (unregistering): Port device team_slave_0 removed [ 479.866803][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.029257][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.095560][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.216680][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.422508][ T61] Bluetooth: hci6: command tx timeout [ 480.688495][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.047535][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.458666][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.887617][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.913572][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.507557][ T61] Bluetooth: hci6: command tx timeout [ 482.735697][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.442454][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 483.592447][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 484.087164][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 484.087210][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 484.087233][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.662620][ T61] Bluetooth: hci6: command tx timeout [ 485.402815][ T9] usb 4-1: string descriptor 0 read error: -71 [ 485.414738][ T9] hub 4-1:32.0: bad descriptor, ignoring hub [ 485.414781][ T9] hub 4-1:32.0: probe with driver hub failed with error -5 [ 485.573432][ T9] usb 4-1: USB disconnect, device number 17 [ 485.641022][ T8293] netlink: 'syz.4.556': attribute type 4 has an invalid length. [ 485.641058][ T8293] netlink: 152 bytes leftover after parsing attributes in process `syz.4.556'. [ 486.242493][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.281222][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.550957][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.632682][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.933717][ T8183] chnl_net:caif_netlink_parms(): no params data found [ 487.128064][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.688217][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.984779][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 488.312863][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 488.315948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.315993][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 488.316014][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.398601][ T9] usb 4-1: config 0 descriptor?? [ 489.262937][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.263081][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.263285][ T8183] bridge_slave_0: entered allmulticast mode [ 489.305251][ T8183] bridge_slave_0: entered promiscuous mode [ 489.469111][ T8330] netlink: 'syz.4.560': attribute type 4 has an invalid length. [ 489.469371][ T8330] netlink: 152 bytes leftover after parsing attributes in process `syz.4.560'. [ 489.583303][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.583576][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.583921][ T8183] bridge_slave_1: entered allmulticast mode [ 489.586513][ T8183] bridge_slave_1: entered promiscuous mode [ 489.953718][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.960358][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 489.960483][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 489.992946][ T9] usb 4-1: USB disconnect, device number 18 [ 490.145666][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 490.200456][ T8183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.276530][ T8183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.658838][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.744331][ T8183] team0: Port device team_slave_0 added [ 491.789725][ T8183] team0: Port device team_slave_1 added [ 491.962466][ T5808] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 492.112511][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 492.114507][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.114534][ T5808] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 492.114547][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.174110][ T5808] usb 4-1: config 0 descriptor?? [ 492.302288][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.306075][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.308202][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.311664][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.317388][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.872555][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 492.892204][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.892215][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.892231][ T8183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.907862][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.908063][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.908302][ T8231] bridge_slave_0: entered allmulticast mode [ 492.911183][ T8231] bridge_slave_0: entered promiscuous mode [ 493.042922][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 493.051991][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.052019][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.052095][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.052121][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.052162][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 493.052181][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.237307][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.237325][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.237353][ T8183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.240623][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.240822][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.241094][ T8231] bridge_slave_1: entered allmulticast mode [ 493.247265][ T8231] bridge_slave_1: entered promiscuous mode [ 493.348148][ T9] usb 5-1: usb_control_msg returned -32 [ 493.348196][ T9] usbtmc 5-1:16.0: can't read capabilities [ 493.369549][ T9] usb 5-1: USB disconnect, device number 16 [ 493.715807][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.824304][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.168365][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.472589][ T61] Bluetooth: hci1: command tx timeout [ 494.589596][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.710968][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.712775][ T5808] usbhid 4-1:0.0: can't add hid device: -71 [ 494.713860][ T5808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 494.733751][ T5808] usb 4-1: USB disconnect, device number 19 [ 495.170807][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.272719][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.331892][ T8183] hsr_slave_0: entered promiscuous mode [ 495.340947][ T8183] hsr_slave_1: entered promiscuous mode [ 495.341699][ T8183] debugfs: 'hsr0' already exists in 'hsr' [ 495.341716][ T8183] Cannot create hsr debugfs directory [ 495.739385][ T8231] team0: Port device team_slave_0 added [ 496.024926][ T8231] team0: Port device team_slave_1 added [ 496.504666][ T61] Bluetooth: hci1: command tx timeout [ 496.692854][ T5865] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 497.312565][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 497.314505][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.314551][ T5865] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 497.314573][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.321708][ T5865] usb 5-1: config 0 descriptor?? [ 497.661823][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.661863][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.661910][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.749317][ T5865] elo 0003:04E7:0009.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 497.797922][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.797934][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.797949][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.582470][ T61] Bluetooth: hci1: command tx timeout [ 498.786381][ T8377] 8021q: adding VLAN 0 to HW filter on device  [ 498.803226][ T8377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.951290][ T8231] hsr_slave_0: entered promiscuous mode [ 498.952249][ T8231] hsr_slave_1: entered promiscuous mode [ 498.956500][ T8231] debugfs: 'hsr0' already exists in 'hsr' [ 498.956525][ T8231] Cannot create hsr debugfs directory [ 499.156088][ T9] usb 5-1: USB disconnect, device number 17 [ 499.379725][ T43] bridge_slave_1: left allmulticast mode [ 499.379753][ T43] bridge_slave_1: left promiscuous mode [ 499.379990][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.524134][ T43] bridge_slave_0: left allmulticast mode [ 500.524163][ T43] bridge_slave_0: left promiscuous mode [ 500.524426][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.594305][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.768426][ T61] Bluetooth: hci1: command tx timeout [ 500.813268][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.853054][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.930815][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.962608][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.062577][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.164110][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.191614][ T43] bridge_slave_1: left allmulticast mode [ 501.191643][ T43] bridge_slave_1: left promiscuous mode [ 501.216329][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.263431][ T43] bridge_slave_0: left allmulticast mode [ 501.263452][ T43] bridge_slave_0: left promiscuous mode [ 501.263601][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.713439][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.804406][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.868444][ T43] bond0 (unregistering): Released all slaves [ 502.752258][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.715174][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.318237][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.362608][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.738841][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.738913][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.363064][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.015819][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.175726][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.289547][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.525535][ T8442] ALSA: mixer_oss: invalid OSS volume '' [ 509.560665][ T43] bond0 (unregistering): Released all slaves [ 510.496771][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.952760][ T43] hsr_slave_0: left promiscuous mode [ 510.992581][ T43] hsr_slave_1: left promiscuous mode [ 510.993718][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.050164][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.229361][ T43] hsr_slave_0: left promiscuous mode [ 511.272593][ T43] hsr_slave_1: left promiscuous mode [ 511.273546][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.308192][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.332632][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 511.484240][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 511.487915][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.487947][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.487969][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.488010][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.488031][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.501143][ T9] usb 5-1: config 0 descriptor?? [ 512.126006][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 512.126134][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 512.162503][ T9] usb 5-1: USB disconnect, device number 18 [ 512.197403][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.283192][ T43] team0 (unregistering): Port device team_slave_1 removed [ 512.363903][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.433623][ T43] team0 (unregistering): Port device team_slave_0 removed [ 512.581648][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.746563][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.872601][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.932772][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.986701][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.020262][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.336840][ T8456] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 513.336853][ T8456] netlink: 152 bytes leftover after parsing attributes in process `syz.4.594'. [ 513.413895][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.814413][ T43] team0 (unregistering): Port device team_slave_1 removed [ 513.932991][ T43] team0 (unregistering): Port device team_slave_0 removed [ 514.052730][ T49] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 514.222587][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 514.248652][ T49] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 514.248694][ T49] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 514.248707][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.349553][ T49] usb 4-1: string descriptor 0 read error: -71 [ 515.350232][ T49] hub 4-1:32.0: bad descriptor, ignoring hub [ 515.350267][ T49] hub 4-1:32.0: probe with driver hub failed with error -5 [ 515.403818][ T49] usb 4-1: USB disconnect, device number 20 [ 515.712028][ T8346] chnl_net:caif_netlink_parms(): no params data found [ 517.642905][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.643041][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.643274][ T8346] bridge_slave_0: entered allmulticast mode [ 517.646061][ T8346] bridge_slave_0: entered promiscuous mode [ 518.200763][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.200970][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.201212][ T8346] bridge_slave_1: entered allmulticast mode [ 518.204703][ T8346] bridge_slave_1: entered promiscuous mode [ 518.559611][ T8346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.566980][ T8346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.874387][ T8183] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 518.925508][ T8346] team0: Port device team_slave_0 added [ 518.926908][ T8183] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 518.960388][ T8346] team0: Port device team_slave_1 added [ 518.961555][ T8183] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 519.182624][ T8183] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 519.529096][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.529114][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.529139][ T8346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.547723][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.547741][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.547767][ T8346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.884150][ T8231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 520.475743][ T8281] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 520.650910][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.732434][ T8281] usb 4-1: Using ep0 maxpacket: 32 [ 520.734336][ T8281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.734366][ T8281] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 520.734377][ T8281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.738096][ T8281] usb 4-1: config 0 descriptor?? [ 520.759766][ T8231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.826489][ T8346] hsr_slave_0: entered promiscuous mode [ 520.827757][ T8346] hsr_slave_1: entered promiscuous mode [ 520.831926][ T8231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.863413][ T8231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 522.761041][ T8281] usbhid 4-1:0.0: can't add hid device: -71 [ 522.761171][ T8281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 522.798392][ T8281] usb 4-1: USB disconnect, device number 21 [ 523.002032][ T8183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.111949][ T8183] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.193274][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.193422][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.286374][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.286519][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.353634][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.671822][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.788727][ T43] bridge_slave_1: left allmulticast mode [ 523.788747][ T43] bridge_slave_1: left promiscuous mode [ 523.788914][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.812502][ T49] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 523.865255][ T43] bridge_slave_0: left allmulticast mode [ 523.865275][ T43] bridge_slave_0: left promiscuous mode [ 523.865436][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.962783][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 523.966082][ T49] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 523.966108][ T49] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 523.966120][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.896540][ T49] usb 5-1: string descriptor 0 read error: -71 [ 524.904280][ T49] hub 5-1:32.0: bad descriptor, ignoring hub [ 524.904318][ T49] hub 5-1:32.0: probe with driver hub failed with error -5 [ 525.304842][ T49] usb 5-1: USB disconnect, device number 19 [ 526.256923][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.353473][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.437334][ T43] bond0 (unregistering): Released all slaves [ 527.181900][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.182043][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.512666][ T43] hsr_slave_0: left promiscuous mode [ 527.532600][ T43] hsr_slave_1: left promiscuous mode [ 527.533282][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.573888][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.836815][ T8535] fuse: Unknown parameter 'group_id00000000000000000000' [ 529.434955][ T43] team0 (unregistering): Port device team_slave_1 removed [ 529.498921][ T8550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.501394][ T8550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.506055][ T8550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.509096][ T8550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.527578][ T8550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.613111][ T43] team0 (unregistering): Port device team_slave_0 removed [ 530.109696][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.109896][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.622807][ T8550] Bluetooth: hci4: command tx timeout [ 531.791381][ T8281] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 531.960191][ T8281] usb 5-1: Using ep0 maxpacket: 32 [ 531.964877][ T8281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.964923][ T8281] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 531.964944][ T8281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.977468][ T8281] usb 5-1: config 0 descriptor?? [ 532.443044][ T8281] elo 0003:04E7:0009.0007: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 533.702423][ T8550] Bluetooth: hci4: command tx timeout [ 533.758061][ T5865] usb 5-1: USB disconnect, device number 20 [ 534.454605][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 534.454627][ T37] audit: type=1326 audit(2000000392.470:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31681defc9 code=0x7ffc0000 [ 534.454676][ T37] audit: type=1326 audit(2000000392.470:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31681defc9 code=0x7ffc0000 [ 534.516586][ T8346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.776109][ T8346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.865216][ T8346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 535.419057][ T8346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 535.782476][ T8550] Bluetooth: hci4: command tx timeout [ 535.911683][ T8547] chnl_net:caif_netlink_parms(): no params data found [ 536.904434][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.623'. [ 537.500653][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.525646][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.530346][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.548644][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.570560][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.872758][ T61] Bluetooth: hci4: command tx timeout [ 539.126044][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'. [ 539.649414][ T61] Bluetooth: hci0: command tx timeout [ 539.700139][ T37] audit: type=1326 audit(2000000397.760:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 539.708239][ T37] audit: type=1326 audit(2000000397.770:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.3.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 540.280092][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.280454][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.280699][ T8547] bridge_slave_0: entered allmulticast mode [ 540.285253][ T8547] bridge_slave_0: entered promiscuous mode [ 540.486906][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.487044][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.487269][ T8547] bridge_slave_1: entered allmulticast mode [ 540.491324][ T8547] bridge_slave_1: entered promiscuous mode [ 541.268570][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.353171][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.762890][ T61] Bluetooth: hci0: command tx timeout [ 542.022654][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 542.224034][ T8547] team0: Port device team_slave_0 added [ 542.243509][ T8547] team0: Port device team_slave_1 added [ 542.245559][ T43] bridge_slave_1: left allmulticast mode [ 542.245584][ T43] bridge_slave_1: left promiscuous mode [ 542.245824][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.989134][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 542.993908][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 542.993954][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 542.993966][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.084340][ T43] bridge_slave_0: left allmulticast mode [ 543.084360][ T43] bridge_slave_0: left promiscuous mode [ 543.084925][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.375756][ T9] usb 4-1: string descriptor 0 read error: -71 [ 543.376389][ T9] hub 4-1:32.0: bad descriptor, ignoring hub [ 543.376418][ T9] hub 4-1:32.0: probe with driver hub failed with error -5 [ 543.966035][ T61] Bluetooth: hci0: command tx timeout [ 544.053620][ T9] usb 4-1: USB disconnect, device number 22 [ 544.236319][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.636'. [ 544.723547][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.119679][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.706794][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 545.862458][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 545.864446][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.864491][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 545.864520][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.882402][ T37] audit: type=1326 audit(2000000403.940:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.882457][ T37] audit: type=1326 audit(2000000403.940:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.882499][ T37] audit: type=1326 audit(2000000403.940:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.882539][ T37] audit: type=1326 audit(2000000403.940:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.922402][ T37] audit: type=1326 audit(2000000403.940:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.922453][ T37] audit: type=1326 audit(2000000403.940:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.922501][ T37] audit: type=1326 audit(2000000403.940:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.928974][ T37] audit: type=1326 audit(2000000403.940:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.931511][ T37] audit: type=1326 audit(2000000403.940:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6181c2efc9 code=0x7ffc0000 [ 545.931979][ T37] audit: type=1326 audit(2000000403.950:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6181c2f003 code=0x7ffc0000 [ 545.956502][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.022587][ T61] Bluetooth: hci0: command tx timeout [ 546.227061][ T9] usb 5-1: config 0 descriptor?? [ 546.271905][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.750920][ T9] elo 0003:04E7:0009.0008: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 547.768470][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.195295][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.678367][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.705779][ T5908] usb 5-1: USB disconnect, device number 21 [ 549.742632][ T5908] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 549.883318][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.892733][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 549.920222][ T5908] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 549.920268][ T5908] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 549.920289][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.163282][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.211994][ T43] bond0 (unregistering): Released all slaves [ 550.323888][ T5908] usb 5-1: string descriptor 0 read error: -71 [ 550.324571][ T5908] hub 5-1:32.0: bad descriptor, ignoring hub [ 550.324606][ T5908] hub 5-1:32.0: probe with driver hub failed with error -5 [ 550.451520][ T5908] usb 5-1: USB disconnect, device number 22 [ 550.616948][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.616962][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.616976][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.044964][ T43] hsr_slave_0: left promiscuous mode [ 552.113159][ T43] hsr_slave_1: left promiscuous mode [ 552.114306][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.163306][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.175802][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.512124][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 552.512143][ T37] audit: type=1326 audit(2000000410.570:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31681defc9 code=0x7ffc0000 [ 552.518538][ T37] audit: type=1326 audit(2000000410.580:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31681defc9 code=0x7ffc0000 [ 553.012714][ T5978] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 553.212638][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 553.215098][ T5978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.215123][ T5978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 553.215147][ T5978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.215169][ T5978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.215210][ T5978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 553.215230][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.308181][ T8550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 553.318892][ T8550] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 553.320220][ T8550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 553.549634][ T5978] usb 4-1: usb_control_msg returned -32 [ 553.549683][ T5978] usbtmc 4-1:16.0: can't read capabilities [ 553.593682][ T5978] usb 4-1: USB disconnect, device number 23 [ 553.596958][ T8550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.185215][ T8550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.263846][ T8550] Bluetooth: hci5: command tx timeout [ 557.869725][ T37] audit: type=1326 audit(2000000415.920:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31681defc9 code=0x7ffc0000 [ 557.869785][ T37] audit: type=1326 audit(2000000415.920:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31681defc9 code=0x7ffc0000 [ 557.953090][ T43] team0 (unregistering): Port device team_slave_1 removed [ 558.267280][ T43] team0 (unregistering): Port device team_slave_0 removed [ 558.436891][ T8550] Bluetooth: hci5: command tx timeout [ 560.512943][ T8550] Bluetooth: hci5: command tx timeout [ 562.612630][ T8550] Bluetooth: hci5: command tx timeout [ 563.357915][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.357933][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.357960][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.505374][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.991528][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.124883][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.537773][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.781447][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.897635][ T8547] hsr_slave_0: entered promiscuous mode [ 564.899212][ T8547] hsr_slave_1: entered promiscuous mode [ 564.900245][ T8547] debugfs: 'hsr0' already exists in 'hsr' [ 564.900268][ T8547] Cannot create hsr debugfs directory [ 566.408798][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.549984][ T8784] syz.4.667 uses obsolete (PF_INET,SOCK_PACKET) [ 566.868833][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 567.076343][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.533677][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.227892][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.227964][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.411621][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.641924][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.642159][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.642968][ T8607] bridge_slave_0: entered allmulticast mode [ 568.647797][ T8607] bridge_slave_0: entered promiscuous mode [ 568.719475][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.719631][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.719941][ T8607] bridge_slave_1: entered allmulticast mode [ 568.729149][ T8607] bridge_slave_1: entered promiscuous mode [ 570.316678][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.501287][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.785141][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.615724][ T8607] team0: Port device team_slave_0 added [ 572.619710][ T8607] team0: Port device team_slave_1 added [ 572.620507][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 574.114226][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.286770][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.389342][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.984163][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.054870][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.682'. [ 576.081787][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.081799][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.081814][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.343783][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.402620][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.490328][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.587783][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.632469][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.777299][ T8860] netlink: 'syz.4.683': attribute type 4 has an invalid length. [ 576.777312][ T8860] netlink: 152 bytes leftover after parsing attributes in process `syz.4.683'. [ 576.946991][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.002218][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.002229][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.002244][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.917054][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.352465][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.393898][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.449512][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.652510][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.686309][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.048248][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.099416][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.099755][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.099948][ T8711] bridge_slave_0: entered allmulticast mode [ 579.106383][ T8711] bridge_slave_0: entered promiscuous mode [ 581.128240][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.179601][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.263001][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.263164][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.263390][ T8711] bridge_slave_1: entered allmulticast mode [ 581.264981][ T8711] bridge_slave_1: entered promiscuous mode [ 581.277643][ T8607] hsr_slave_0: entered promiscuous mode [ 581.278934][ T8607] hsr_slave_1: entered promiscuous mode [ 581.279845][ T8607] debugfs: 'hsr0' already exists in 'hsr' [ 581.279869][ T8607] Cannot create hsr debugfs directory [ 581.492474][ T5865] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 581.535099][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.642590][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 581.647583][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.647640][ T5865] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 581.647663][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.656850][ T5865] usb 5-1: config 0 descriptor?? [ 581.855671][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.365363][ T8547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 582.546080][ T8547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 582.575254][ T8711] team0: Port device team_slave_0 added [ 582.636627][ T8547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 582.683116][ T8711] team0: Port device team_slave_1 added [ 582.705276][ T8547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 583.217857][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.222263][ T5865] usbhid 5-1:0.0: can't add hid device: -71 [ 583.225210][ T5865] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 583.262742][ T5865] usb 5-1: USB disconnect, device number 23 [ 583.337043][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.840245][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.313049][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.492385][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.022786][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.663056][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.761900][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.761918][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.761943][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.783001][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.783017][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.783043][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.832427][ T5787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 585.982655][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 585.988350][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.988397][ T5787] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 585.988420][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.028126][ T5787] usb 4-1: config 0 descriptor?? [ 586.071731][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.931283][ T8711] hsr_slave_0: entered promiscuous mode [ 586.934207][ T8711] hsr_slave_1: entered promiscuous mode [ 586.937735][ T8711] debugfs: 'hsr0' already exists in 'hsr' [ 586.937762][ T8711] Cannot create hsr debugfs directory [ 587.819980][ T5787] usbhid 4-1:0.0: can't add hid device: -71 [ 587.820092][ T5787] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 587.831826][ T5787] usb 4-1: USB disconnect, device number 24 [ 588.628456][ T8930] fuse: Bad value for 'fd' [ 589.217958][ T43] bridge_slave_1: left allmulticast mode [ 589.217988][ T43] bridge_slave_1: left promiscuous mode [ 589.218233][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.331602][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.344004][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.345572][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.346892][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.347734][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.394035][ T43] bridge_slave_0: left allmulticast mode [ 589.394063][ T43] bridge_slave_0: left promiscuous mode [ 589.394318][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.920716][ T43] bridge_slave_1: left allmulticast mode [ 589.920746][ T43] bridge_slave_1: left promiscuous mode [ 589.921000][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.985224][ T43] bridge_slave_0: left allmulticast mode [ 589.985252][ T43] bridge_slave_0: left promiscuous mode [ 589.985502][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.722607][ T5908] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 590.892385][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 590.895822][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.895865][ T5908] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 590.895887][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.938935][ T5908] usb 4-1: config 0 descriptor?? [ 591.014660][ T8947] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 591.363365][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 591.365580][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 591.384354][ T61] Bluetooth: hci1: command tx timeout [ 591.532096][ T5908] usb 4-1: USB disconnect, device number 25 [ 591.761022][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.853813][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.914108][ T8953] fuse: Bad value for 'fd' [ 591.946062][ T43] bond0 (unregistering): Released all slaves [ 592.136672][ T8961] fuse: Bad value for 'rootmode' [ 593.472758][ T61] Bluetooth: hci1: command tx timeout [ 595.542508][ T61] Bluetooth: hci1: command tx timeout [ 595.625819][ T8980] fuse: Bad value for 'fd' [ 596.132409][ T5787] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 596.303003][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 596.308030][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.308070][ T5787] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 596.308084][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.311887][ T5787] usb 4-1: config 0 descriptor?? [ 596.741342][ T5787] usbhid 4-1:0.0: can't add hid device: -71 [ 596.741456][ T5787] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 596.783179][ T5787] usb 4-1: USB disconnect, device number 26 [ 597.416468][ T8988] netlink: 'syz.4.719': attribute type 4 has an invalid length. [ 597.416482][ T8988] netlink: 152 bytes leftover after parsing attributes in process `syz.4.719'. [ 597.477517][ T8550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 597.493709][ T8550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.494784][ T8550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 597.497397][ T8550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 597.498465][ T8550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 597.534225][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.573069][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.614697][ T43] bond0 (unregistering): Released all slaves [ 597.623667][ T8550] Bluetooth: hci1: command tx timeout [ 599.362908][ T6061] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 599.532629][ T6061] usb 4-1: Using ep0 maxpacket: 32 [ 599.534489][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.534534][ T6061] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 599.534553][ T6061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.537597][ T6061] usb 4-1: config 0 descriptor?? [ 599.542482][ T8550] Bluetooth: hci4: command tx timeout [ 600.241745][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.896544][ T6061] elo 0003:04E7:0009.0009: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 601.132791][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.193160][ T43] hsr_slave_0: left promiscuous mode [ 601.232415][ T43] hsr_slave_1: left promiscuous mode [ 601.233534][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.273832][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.439690][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.501408][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.502086][ T5787] usb 4-1: USB disconnect, device number 27 [ 601.590451][ T9011] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 601.592693][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.624292][ T8550] Bluetooth: hci4: command tx timeout [ 602.521791][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.723015][ T43] hsr_slave_0: left promiscuous mode [ 602.782775][ T43] hsr_slave_1: left promiscuous mode [ 602.787104][ T9017] ALSA: mixer_oss: invalid OSS volume '' [ 602.790275][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.813224][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.020153][ T9017] syz.3.725 (9017): drop_caches: 2 [ 603.482936][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.682733][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.702450][ T8550] Bluetooth: hci4: command tx timeout [ 603.908489][ T9020] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 603.932989][ T43] team0 (unregistering): Port device team_slave_1 removed [ 604.083096][ T43] team0 (unregistering): Port device team_slave_0 removed [ 605.782528][ T8550] Bluetooth: hci4: command tx timeout [ 605.867652][ T9032] overlayfs: failed to resolve './file0': -2 [ 606.612779][ T6061] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 606.762712][ T6061] usb 5-1: Using ep0 maxpacket: 32 [ 606.784451][ T6061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.784688][ T6061] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 606.784739][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.278055][ T6061] usb 5-1: config 0 descriptor?? [ 607.344020][ T43] team0 (unregistering): Port device team_slave_1 removed [ 607.654177][ T43] team0 (unregistering): Port device team_slave_0 removed [ 607.796285][ T6061] elo 0003:04E7:0009.000A: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 609.227765][ T5908] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 609.352835][ T6061] usb 5-1: USB disconnect, device number 24 [ 609.393734][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 609.398831][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.398879][ T5908] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 609.398901][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.465302][ T5908] usb 4-1: config 0 descriptor?? [ 609.886269][ T5908] elo 0003:04E7:0009.000B: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 611.528988][ T9055] fuse: Unknown parameter 'user_i00000000000000000000' [ 611.686581][ T6061] usb 4-1: USB disconnect, device number 28 [ 612.704158][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.847522][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.517859][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.685069][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.250739][ T9074] overlayfs: failed to resolve './file0': -2 [ 614.299273][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 614.302008][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 614.333422][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 614.336113][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 614.337048][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 614.437947][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.847382][ T8550] Bluetooth: hci6: command tx timeout [ 624.684433][ T5865] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 624.739983][ T9100] fuse: Unknown parameter 'user_i00000000000000000000' [ 624.843933][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 624.845859][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.845904][ T5865] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 624.845926][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.851129][ T5865] usb 5-1: config 0 descriptor?? [ 624.916719][ T61] Bluetooth: hci6: command tx timeout [ 625.273590][ T5865] elo 0003:04E7:0009.000C: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 625.725229][ T8990] chnl_net:caif_netlink_parms(): no params data found [ 625.832209][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 626.383758][ T9070] chnl_net:caif_netlink_parms(): no params data found [ 626.694564][ T5787] usb 5-1: USB disconnect, device number 25 [ 627.034650][ T61] Bluetooth: hci6: command tx timeout [ 627.210329][ T9127] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 629.063694][ T8550] Bluetooth: hci6: command tx timeout [ 629.552771][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.552866][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.561336][ T9138] overlayfs: failed to resolve './file0': -2 [ 629.804371][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.804508][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.804712][ T8990] bridge_slave_0: entered allmulticast mode [ 629.807778][ T8990] bridge_slave_0: entered promiscuous mode [ 629.924777][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.924854][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.924984][ T8990] bridge_slave_1: entered allmulticast mode [ 629.926528][ T8990] bridge_slave_1: entered promiscuous mode [ 629.961732][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.961831][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.962024][ T8935] bridge_slave_0: entered allmulticast mode [ 629.984609][ T8935] bridge_slave_0: entered promiscuous mode [ 630.101540][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.101642][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.101795][ T8935] bridge_slave_1: entered allmulticast mode [ 630.130966][ T8935] bridge_slave_1: entered promiscuous mode [ 630.460199][ T9143] fuse: Unknown parameter 'user_i00000000000000000000' [ 631.110969][ T8990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.432097][ T8990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.438076][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.438314][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.438525][ T9070] bridge_slave_0: entered allmulticast mode [ 632.441207][ T9070] bridge_slave_0: entered promiscuous mode [ 632.451217][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.012751][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.012891][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.013134][ T9070] bridge_slave_1: entered allmulticast mode [ 633.019489][ T9070] bridge_slave_1: entered promiscuous mode [ 633.065993][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.794242][ T8990] team0: Port device team_slave_0 added [ 634.159135][ T8990] team0: Port device team_slave_1 added [ 634.173063][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.195444][ T8935] team0: Port device team_slave_0 added [ 634.509650][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.523162][ T8935] team0: Port device team_slave_1 added [ 634.949490][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.949506][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.949531][ T8990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.120952][ T9175] overlayfs: failed to resolve './file0': -2 [ 635.453917][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.453932][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.453946][ T8990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.509202][ T9070] team0: Port device team_slave_0 added [ 635.510351][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.510365][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.510389][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.562480][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.562494][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.562515][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.573394][ T9070] team0: Port device team_slave_1 added [ 637.444828][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.444839][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.444853][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.624434][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.624452][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.624477][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.630735][ T8990] hsr_slave_0: entered promiscuous mode [ 637.631765][ T8990] hsr_slave_1: entered promiscuous mode [ 637.664123][ T8935] hsr_slave_0: entered promiscuous mode [ 637.665628][ T8935] hsr_slave_1: entered promiscuous mode [ 637.666718][ T8935] debugfs: 'hsr0' already exists in 'hsr' [ 637.666742][ T8935] Cannot create hsr debugfs directory [ 638.150418][ T9070] hsr_slave_0: entered promiscuous mode [ 638.151574][ T9070] hsr_slave_1: entered promiscuous mode [ 638.152194][ T9070] debugfs: 'hsr0' already exists in 'hsr' [ 638.152210][ T9070] Cannot create hsr debugfs directory [ 640.033007][ T43] bridge_slave_1: left allmulticast mode [ 640.033035][ T43] bridge_slave_1: left promiscuous mode [ 640.033273][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.377243][ T43] bridge_slave_0: left allmulticast mode [ 640.377274][ T43] bridge_slave_0: left promiscuous mode [ 640.377501][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.435199][ T9199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.772'. [ 641.190213][ T43] bridge_slave_1: left allmulticast mode [ 641.190251][ T43] bridge_slave_1: left promiscuous mode [ 641.190496][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.274246][ T43] bridge_slave_0: left allmulticast mode [ 641.274274][ T43] bridge_slave_0: left promiscuous mode [ 641.274520][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.345665][ T43] bridge_slave_1: left allmulticast mode [ 641.345685][ T43] bridge_slave_1: left promiscuous mode [ 641.347097][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.619086][ T43] bridge_slave_0: left allmulticast mode [ 641.619116][ T43] bridge_slave_0: left promiscuous mode [ 641.619356][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.592556][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.696712][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.754249][ T43] bond0 (unregistering): Released all slaves [ 643.942954][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.033189][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.104626][ T43] bond0 (unregistering): Released all slaves [ 644.353025][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.432944][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.494245][ T43] bond0 (unregistering): Released all slaves [ 644.573735][ T9223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.092469][ T43] hsr_slave_0: left promiscuous mode [ 648.132524][ T43] hsr_slave_1: left promiscuous mode [ 648.136976][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.183563][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.332631][ T43] hsr_slave_0: left promiscuous mode [ 649.372752][ T43] hsr_slave_1: left promiscuous mode [ 649.376356][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.403058][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.573808][ T43] hsr_slave_0: left promiscuous mode [ 649.592474][ T43] hsr_slave_1: left promiscuous mode [ 649.593517][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.634069][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.448120][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.589520][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.590857][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.608065][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.609595][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 651.313208][ T43] team0 (unregistering): Port device team_slave_1 removed [ 651.453201][ T43] team0 (unregistering): Port device team_slave_0 removed [ 653.092041][ T61] Bluetooth: hci0: command tx timeout [ 653.403184][ T43] team0 (unregistering): Port device team_slave_1 removed [ 653.522960][ T43] team0 (unregistering): Port device team_slave_0 removed [ 654.473435][ T43] team0 (unregistering): Port device team_slave_1 removed [ 654.603701][ T43] team0 (unregistering): Port device team_slave_0 removed [ 654.891972][ T9282] overlayfs: failed to clone upperpath [ 655.140797][ T9253] 8021q: adding VLAN 0 to HW filter on device  [ 655.143708][ T61] Bluetooth: hci0: command tx timeout [ 655.172902][ T9253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.494954][ T9298] fuse: Unknown parameter 'user_id00000000000000000000' [ 656.625429][ T9300] netlink: 'syz.3.803': attribute type 4 has an invalid length. [ 656.625443][ T9300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.803'. [ 656.803918][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 657.066063][ T9070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 657.222678][ T61] Bluetooth: hci0: command tx timeout [ 657.394267][ T9070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 657.716664][ T8550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 657.719971][ T8550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 657.723915][ T8550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.725072][ T8550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.725800][ T8550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.481588][ T9070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 658.675921][ T9070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 659.730113][ T8550] Bluetooth: hci0: command tx timeout [ 659.789801][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.790007][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.790137][ T9258] bridge_slave_0: entered allmulticast mode [ 659.791693][ T9258] bridge_slave_0: entered promiscuous mode [ 659.795558][ T8550] Bluetooth: hci1: command tx timeout [ 659.824240][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.824368][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.824972][ T9258] bridge_slave_1: entered allmulticast mode [ 659.827861][ T9258] bridge_slave_1: entered promiscuous mode [ 660.135828][ T9331] overlayfs: failed to clone upperpath [ 660.236757][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.255015][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.695093][ T9338] fuse: Unknown parameter 'user_id00000000000000000000' [ 660.907277][ T9258] team0: Port device team_slave_0 added [ 661.209324][ T9258] team0: Port device team_slave_1 added [ 661.230878][ T9342] fuse: Bad value for 'fd' [ 661.645771][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.645789][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.645816][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.754504][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.754522][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.754549][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.862376][ T8550] Bluetooth: hci1: command tx timeout [ 662.868566][ T9258] hsr_slave_0: entered promiscuous mode [ 662.870161][ T9258] hsr_slave_1: entered promiscuous mode [ 662.871291][ T9258] debugfs: 'hsr0' already exists in 'hsr' [ 662.871315][ T9258] Cannot create hsr debugfs directory [ 663.085282][ T9359] fuse: Bad value for 'fd' [ 663.318907][ T9363] fuse: Unknown parameter '0x0000000000000003' [ 663.919924][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 663.942724][ T8550] Bluetooth: hci1: command tx timeout [ 665.611692][ T9385] fuse: Bad value for 'fd' [ 665.630695][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.630841][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.631075][ T9310] bridge_slave_0: entered allmulticast mode [ 665.636887][ T9310] bridge_slave_0: entered promiscuous mode [ 665.690341][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.690481][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.690680][ T9310] bridge_slave_1: entered allmulticast mode [ 665.700562][ T9310] bridge_slave_1: entered promiscuous mode [ 665.730415][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.770917][ T9387] fuse: Unknown parameter '0x0000000000000003' [ 666.236119][ T8550] Bluetooth: hci1: command tx timeout [ 666.488735][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.913537][ T9258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 667.135562][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.213412][ T9258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 667.436142][ T9258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 667.579212][ T9258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 667.775851][ T9310] team0: Port device team_slave_0 added [ 667.777295][ T6905] bridge_slave_1: left allmulticast mode [ 667.777319][ T6905] bridge_slave_1: left promiscuous mode [ 667.777559][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.824059][ T6905] bridge_slave_0: left allmulticast mode [ 668.824089][ T6905] bridge_slave_0: left promiscuous mode [ 668.824376][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.909117][ T6905] bridge_slave_1: left allmulticast mode [ 668.909152][ T6905] bridge_slave_1: left promiscuous mode [ 668.909393][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.113382][ T9413] fuse: Unknown parameter '0x0000000000000003' [ 669.487524][ T6905] bridge_slave_0: left allmulticast mode [ 669.487849][ T6905] bridge_slave_0: left promiscuous mode [ 669.534395][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.423164][ T6905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.523051][ T6905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.586412][ T6905] bond0 (unregistering): Released all slaves [ 671.844077][ T6905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.924788][ T6905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.985557][ T6905] bond0 (unregistering): Released all slaves [ 672.052373][ T9426] 8021q: adding VLAN 0 to HW filter on device  [ 672.082961][ T9426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.088435][ T9310] team0: Port device team_slave_1 added [ 672.396060][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.556779][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.556795][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.556811][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.742811][ T6905] hsr_slave_0: left promiscuous mode [ 672.772465][ T6905] hsr_slave_1: left promiscuous mode [ 672.773072][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.795799][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.952596][ T6905] hsr_slave_0: left promiscuous mode [ 672.972811][ T6905] hsr_slave_1: left promiscuous mode [ 672.973624][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.013229][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.275163][ T9453] fuse: Unknown parameter '0x0000000000000003' [ 674.974041][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 674.987112][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 674.988653][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 674.994531][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 674.998759][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 675.463129][ T6905] team0 (unregistering): Port device team_slave_1 removed [ 675.681124][ T6905] team0 (unregistering): Port device team_slave_0 removed [ 677.693249][ T9465] Bluetooth: hci4: command tx timeout [ 677.886928][ T9485] fuse: Unknown parameter '0x0000000000000003' [ 678.273742][ T6905] team0 (unregistering): Port device team_slave_1 removed [ 678.354640][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.861'. [ 679.333021][ T6905] team0 (unregistering): Port device team_slave_0 removed [ 679.785090][ T9465] Bluetooth: hci4: command tx timeout [ 680.298574][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.298591][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.298618][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.306644][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.307964][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.454284][ T9465] Bluetooth: hci4: command tx timeout [ 682.755698][ T9513] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 682.755714][ T9513] netlink: 152 bytes leftover after parsing attributes in process `syz.4.868'. [ 682.757973][ T9310] hsr_slave_0: entered promiscuous mode [ 682.759379][ T9310] hsr_slave_1: entered promiscuous mode [ 684.575244][ T9465] Bluetooth: hci4: command tx timeout [ 686.547879][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 688.493434][ T9548] overlayfs: failed to clone upperpath [ 688.591668][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.743238][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.743774][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.744059][ T9460] bridge_slave_0: entered allmulticast mode [ 688.748082][ T9460] bridge_slave_0: entered promiscuous mode [ 688.977259][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.977389][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.977699][ T9460] bridge_slave_1: entered allmulticast mode [ 688.979384][ T9460] bridge_slave_1: entered promiscuous mode [ 689.438991][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.492027][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.910174][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.831214][ T9558] syz.3.879 (9558) used greatest stack depth: 16088 bytes left [ 691.074434][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.074508][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.299339][ T9460] team0: Port device team_slave_0 added [ 691.338929][ T9460] team0: Port device team_slave_1 added [ 691.566634][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.566718][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.571368][ T9310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 691.615073][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.616497][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.616527][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.618803][ T9310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 691.712354][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.712371][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.712396][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.723783][ T9310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 691.788050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.788393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.840248][ T9310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 692.411773][ T9460] hsr_slave_0: entered promiscuous mode [ 692.414902][ T9460] hsr_slave_1: entered promiscuous mode [ 692.415809][ T9460] debugfs: 'hsr0' already exists in 'hsr' [ 692.415832][ T9460] Cannot create hsr debugfs directory [ 692.739043][ T6905] bridge_slave_1: left allmulticast mode [ 692.739070][ T6905] bridge_slave_1: left promiscuous mode [ 692.739333][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.554002][ T9582] overlayfs: failed to clone upperpath [ 693.623320][ T6905] bridge_slave_0: left allmulticast mode [ 693.623339][ T6905] bridge_slave_0: left promiscuous mode [ 693.623493][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.729263][ T9465] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 698.853301][ T6905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.935593][ T6905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.995180][ T6905] bond0 (unregistering): Released all slaves [ 699.059479][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 699.474886][ T6905] hsr_slave_0: left promiscuous mode [ 699.512612][ T6905] hsr_slave_1: left promiscuous mode [ 699.513560][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.563374][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.564477][ T9465] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 700.303607][ T6905] team0 (unregistering): Port device team_slave_1 removed [ 700.467539][ T6905] team0 (unregistering): Port device team_slave_0 removed [ 700.756117][ T9465] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 700.756376][ T9632] netlink: 'syz.4.904': attribute type 4 has an invalid length. [ 700.756389][ T9632] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.904'. [ 700.757174][ T9465] Bluetooth: hci3: Injecting HCI hardware error event [ 700.759757][ T5117] Bluetooth: hci3: hardware error 0x00 [ 700.877573][ T9635] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 704.098409][ T5117] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 705.082708][ T9649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.247669][ T5117] Bluetooth: hci2: unexpected event for opcode 0x0009 [ 705.671330][ T9661] fuse: Unknown parameter 'fd0x0000000000000003' [ 706.799046][ T9680] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 707.806720][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.846314][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.088166][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.116379][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.150682][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.194015][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.194163][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.299577][ T9696] 8021q: adding VLAN 0 to HW filter on device  [ 709.314348][ T9696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.397654][ T9460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 710.501051][ T9460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 710.583518][ T9460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 710.627772][ T9460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 710.814795][ T9720] fuse: Unknown parameter 'fd0x0000000000000003' [ 711.707756][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.775992][ T9465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.785352][ T9465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.807018][ T9465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.811355][ T9465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 711.813212][ T9465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.428391][ T9753] overlayfs: failed to clone upperpath [ 713.967805][ T5117] Bluetooth: hci0: command tx timeout [ 715.327975][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.559707][ T9310] veth0_vlan: entered promiscuous mode [ 716.007913][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 716.024135][ T5117] Bluetooth: hci0: command tx timeout [ 716.170826][ T9310] veth1_vlan: entered promiscuous mode [ 716.203523][ T8652] bridge_slave_1: left allmulticast mode [ 716.203544][ T8652] bridge_slave_1: left promiscuous mode [ 716.203711][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.274257][ T8652] bridge_slave_0: left allmulticast mode [ 716.274278][ T8652] bridge_slave_0: left promiscuous mode [ 716.275586][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.340005][ T9805] netlink: 'syz.3.933': attribute type 4 has an invalid length. [ 716.340020][ T9805] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.933'. [ 716.617240][ T9809] overlayfs: failed to clone upperpath [ 717.843031][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.903949][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.926086][ T8652] bond0 (unregistering): Released all slaves [ 718.102392][ T5117] Bluetooth: hci0: command tx timeout [ 718.107776][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.412446][ T8652] hsr_slave_0: left promiscuous mode [ 718.460122][ T8652] hsr_slave_1: left promiscuous mode [ 718.461238][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.763511][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.796386][ T9465] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 718.876453][ T9825] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 719.815621][ T9465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 719.838915][ T9465] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 719.851040][ T9465] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 719.860918][ T9465] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 720.299395][ T5117] Bluetooth: hci0: command tx timeout [ 722.412437][ T5117] Bluetooth: hci5: command tx timeout [ 722.670400][ T9849] overlayfs: failed to clone upperpath [ 724.442289][ T5117] Bluetooth: hci5: command tx timeout [ 724.624758][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 725.182805][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 726.023318][ T9880] overlayfs: failed to clone upperpath [ 726.503724][ T5117] Bluetooth: hci5: command tx timeout [ 728.590228][ T5117] Bluetooth: hci5: command tx timeout [ 732.069961][ T9912] overlayfs: failed to clone upperpath [ 732.920248][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.920468][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.027499][ T9925] netlink: 'syz.4.968': attribute type 4 has an invalid length. [ 734.027514][ T9925] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.968'. [ 734.253902][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.254053][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.254255][ T9738] bridge_slave_0: entered allmulticast mode [ 734.293221][ T9738] bridge_slave_0: entered promiscuous mode [ 734.308271][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.308520][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.323229][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.323366][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.323550][ T9738] bridge_slave_1: entered allmulticast mode [ 734.326265][ T9738] bridge_slave_1: entered promiscuous mode [ 734.658876][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.681723][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.691600][ T9738] team0: Port device team_slave_0 added [ 735.755357][ T9465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.774137][ T9465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.776138][ T9465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.778912][ T9465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.780697][ T9465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.914334][ T9738] team0: Port device team_slave_1 added [ 736.224009][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.224026][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.224052][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.298179][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.298196][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.298221][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.348947][ T9953] overlayfs: failed to clone upperpath [ 738.048649][ T9465] Bluetooth: hci1: command tx timeout [ 739.707981][ T9738] hsr_slave_0: entered promiscuous mode [ 739.709501][ T9738] hsr_slave_1: entered promiscuous mode [ 739.710561][ T9738] debugfs: 'hsr0' already exists in 'hsr' [ 739.710585][ T9738] Cannot create hsr debugfs directory [ 740.102426][ T9465] Bluetooth: hci1: command tx timeout [ 741.700674][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 742.182617][ T9465] Bluetooth: hci1: command tx timeout [ 742.490932][T10040] overlayfs: failed to clone upperpath [ 743.108131][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.109238][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.109479][ T9823] bridge_slave_0: entered allmulticast mode [ 743.138319][ T9823] bridge_slave_0: entered promiscuous mode [ 743.468504][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.468618][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.468788][ T9823] bridge_slave_1: entered allmulticast mode [ 743.470636][ T9823] bridge_slave_1: entered promiscuous mode [ 744.267296][ T9465] Bluetooth: hci1: command tx timeout [ 744.865974][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 745.444927][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.490360][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.148490][ T9823] team0: Port device team_slave_0 added [ 747.631703][ T9823] team0: Port device team_slave_1 added [ 748.466556][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.466573][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.466600][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.470580][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.470713][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.470927][ T9944] bridge_slave_0: entered allmulticast mode [ 748.496797][ T9944] bridge_slave_0: entered promiscuous mode [ 748.506256][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.506272][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.506296][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.512174][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.513332][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.513546][ T9944] bridge_slave_1: entered allmulticast mode [ 748.516197][ T9944] bridge_slave_1: entered promiscuous mode [ 748.767071][T10081] overlayfs: failed to clone upperpath [ 748.961081][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.047613][ T9823] hsr_slave_0: entered promiscuous mode [ 749.048761][ T9823] hsr_slave_1: entered promiscuous mode [ 749.049321][ T9823] debugfs: 'hsr0' already exists in 'hsr' [ 749.049337][ T9823] Cannot create hsr debugfs directory [ 749.091664][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.340643][ T9738] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 749.560561][ T9738] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.604444][ T9944] team0: Port device team_slave_0 added [ 749.752908][ T9738] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 749.799456][ T9944] team0: Port device team_slave_1 added [ 749.819037][ T9738] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.184362][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.184379][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.184405][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.268131][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.268147][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.268172][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.758822][ T8652] bridge_slave_1: left allmulticast mode [ 750.758851][ T8652] bridge_slave_1: left promiscuous mode [ 750.759114][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.818328][ T8652] bridge_slave_0: left allmulticast mode [ 751.818356][ T8652] bridge_slave_0: left promiscuous mode [ 751.818588][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.923658][ T8652] bridge_slave_1: left allmulticast mode [ 751.923689][ T8652] bridge_slave_1: left promiscuous mode [ 751.923945][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.143243][ T8652] bridge_slave_0: left allmulticast mode [ 752.143263][ T8652] bridge_slave_0: left promiscuous mode [ 752.143417][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.428932][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.429006][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.079092][T10118] overlayfs: failed to clone upperpath [ 754.310684][T10125] overlayfs: failed to clone lowerpath [ 755.707637][T10132] overlayfs: missing 'workdir' [ 755.863016][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.002869][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.066565][ T8652] bond0 (unregistering): Released all slaves [ 759.793339][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.873560][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.894997][ T8652] bond0 (unregistering): Released all slaves [ 760.196884][ T9944] hsr_slave_0: entered promiscuous mode [ 760.198300][ T9944] hsr_slave_1: entered promiscuous mode [ 760.199180][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 760.199201][ T9944] Cannot create hsr debugfs directory [ 760.932655][ T8652] hsr_slave_0: left promiscuous mode [ 760.972384][ T8652] hsr_slave_1: left promiscuous mode [ 760.973156][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.003815][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.162388][ T8652] hsr_slave_0: left promiscuous mode [ 761.182457][ T8652] hsr_slave_1: left promiscuous mode [ 761.183084][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.233123][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.378385][ T8652] veth1_vlan: left promiscuous mode [ 761.378495][ T8652] veth0_vlan: left promiscuous mode [ 762.134425][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 762.284125][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 766.474509][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 766.713191][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 769.490399][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.519434][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.551714][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.551857][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.693047][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.693191][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.249073][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.826846][ T9823] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 770.886897][ T9823] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 770.933681][ T9823] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 771.056962][ T9823] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 771.512652][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 771.519221][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 771.524813][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 771.527958][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 771.529331][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 771.658915][ T9944] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 771.697858][ T9944] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 771.741574][ T9944] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 771.930176][ T9944] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 774.384564][ T9465] Bluetooth: hci0: command tx timeout [ 775.565977][T10263] overlayfs: failed to clone upperpath [ 776.272086][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.367939][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.391855][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.392169][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.427099][ T9465] Bluetooth: hci0: command tx timeout [ 776.468196][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.468310][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.521602][T10225] chnl_net:caif_netlink_parms(): no params data found [ 778.176142][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.506703][ T9465] Bluetooth: hci0: command tx timeout [ 779.249984][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.250632][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.250823][T10225] bridge_slave_0: entered allmulticast mode [ 779.274628][T10225] bridge_slave_0: entered promiscuous mode [ 779.278250][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.278446][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.278621][T10225] bridge_slave_1: entered allmulticast mode [ 779.280090][T10225] bridge_slave_1: entered promiscuous mode [ 779.389328][ T8652] bridge_slave_1: left allmulticast mode [ 779.389356][ T8652] bridge_slave_1: left promiscuous mode [ 779.389602][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.485248][ T8652] bridge_slave_0: left allmulticast mode [ 779.485279][ T8652] bridge_slave_0: left promiscuous mode [ 779.485507][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.152799][ T9465] Bluetooth: hci0: command tx timeout [ 782.785586][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 782.788482][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 782.790424][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 782.791565][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 782.792409][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.522999][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.593079][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.615780][ T8652] bond0 (unregistering): Released all slaves [ 784.822617][ T9465] Bluetooth: hci4: command tx timeout [ 785.138273][T10225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.143512][T10225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.148388][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.420375][ T8652] hsr_slave_0: left promiscuous mode [ 786.562547][ T8652] hsr_slave_1: left promiscuous mode [ 786.563241][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.916309][ T9465] Bluetooth: hci4: command tx timeout [ 786.973881][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.805112][T10351] overlayfs: failed to clone upperpath [ 788.982363][ T9465] Bluetooth: hci4: command tx timeout [ 791.062399][ T9465] Bluetooth: hci4: command tx timeout [ 791.773830][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 791.984181][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 796.791488][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 796.822420][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 796.823637][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 796.825234][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 796.826510][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 798.650214][T10225] team0: Port device team_slave_0 added [ 798.927953][ T9465] Bluetooth: hci5: command tx timeout [ 799.177131][T10225] team0: Port device team_slave_1 added [ 799.710468][T10225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.710484][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.710499][T10225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.774281][T10225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.774298][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.774325][T10225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.582490][ T5117] Bluetooth: hci5: command tx timeout [ 802.667729][T10225] hsr_slave_0: entered promiscuous mode [ 802.669109][T10225] hsr_slave_1: entered promiscuous mode [ 803.622432][ T5117] Bluetooth: hci5: command tx timeout [ 806.406394][ T9465] Bluetooth: hci5: command tx timeout [ 806.722576][T10402] chnl_net:caif_netlink_parms(): no params data found [ 806.764833][T10304] chnl_net:caif_netlink_parms(): no params data found [ 808.075797][T10483] fuse: Bad value for 'group_id' [ 808.075810][T10483] fuse: Bad value for 'group_id' [ 810.255258][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.255396][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.255639][T10402] bridge_slave_0: entered allmulticast mode [ 810.267609][T10402] bridge_slave_0: entered promiscuous mode [ 810.305745][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.305878][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.306121][T10304] bridge_slave_0: entered allmulticast mode [ 810.308982][T10304] bridge_slave_0: entered promiscuous mode [ 810.330817][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.330952][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.331271][T10402] bridge_slave_1: entered allmulticast mode [ 810.340230][T10402] bridge_slave_1: entered promiscuous mode [ 810.344146][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.344272][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.345720][T10304] bridge_slave_1: entered allmulticast mode [ 810.354094][T10304] bridge_slave_1: entered promiscuous mode [ 810.793632][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.812967][T10304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.815984][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.820572][T10304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.067410][T10514] fuse: Bad value for 'group_id' [ 811.067429][T10514] fuse: Bad value for 'group_id' [ 811.400244][T10402] team0: Port device team_slave_0 added [ 811.588847][T10304] team0: Port device team_slave_0 added [ 811.630487][T10402] team0: Port device team_slave_1 added [ 811.640017][T10304] team0: Port device team_slave_1 added [ 812.069472][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.069489][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.069514][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.121956][T10304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.121971][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.121994][T10304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.135313][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.135329][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.135354][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.183827][T10304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.183845][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.183872][T10304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.003412][T10225] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 813.034222][T10304] hsr_slave_0: entered promiscuous mode [ 813.035648][T10304] hsr_slave_1: entered promiscuous mode [ 813.036665][T10304] debugfs: 'hsr0' already exists in 'hsr' [ 813.036687][T10304] Cannot create hsr debugfs directory [ 813.076751][T10402] hsr_slave_0: entered promiscuous mode [ 813.078093][T10402] hsr_slave_1: entered promiscuous mode [ 813.079070][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 813.079093][T10402] Cannot create hsr debugfs directory [ 813.080741][T10225] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 813.121065][T10225] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 813.483265][T10225] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 814.762669][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.762744][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.926716][T10536] fuse: Bad value for 'group_id' [ 814.926735][T10536] fuse: Bad value for 'group_id' [ 815.185577][ T37] audit: type=1800 audit(2000000673.240:297): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1120" name="nullb0" dev="tmpfs" ino=2370 res=0 errno=0 [ 817.784978][ T8652] bridge_slave_1: left allmulticast mode [ 817.784998][ T8652] bridge_slave_1: left promiscuous mode [ 817.785184][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.844859][ T8652] bridge_slave_0: left allmulticast mode [ 817.844889][ T8652] bridge_slave_0: left promiscuous mode [ 817.845161][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.271927][ T8652] bridge_slave_1: left allmulticast mode [ 818.271957][ T8652] bridge_slave_1: left promiscuous mode [ 818.287771][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.415676][ T8652] bridge_slave_0: left allmulticast mode [ 818.415697][ T8652] bridge_slave_0: left promiscuous mode [ 818.415850][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.223086][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.313274][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.364159][ T8652] bond0 (unregistering): Released all slaves [ 824.683036][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.742907][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.764795][ T8652] bond0 (unregistering): Released all slaves [ 824.822458][T10601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 827.312795][ T8652] hsr_slave_0: left promiscuous mode [ 827.352558][ T8652] hsr_slave_1: left promiscuous mode [ 827.353367][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.377680][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.523636][T10627] ======================================================= [ 827.523636][T10627] WARNING: The mand mount option has been deprecated and [ 827.523636][T10627] and is ignored by this kernel. Remove the mand [ 827.523636][T10627] option from the mount to silence this warning. [ 827.523636][T10627] ======================================================= [ 827.584101][ T8652] hsr_slave_0: left promiscuous mode [ 827.932644][ T8652] hsr_slave_1: left promiscuous mode [ 827.934825][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.973003][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.975468][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 829.209302][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 829.355427][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 831.293456][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 831.442831][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 832.568880][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 832.579204][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 832.581307][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 832.586173][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 832.587055][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.173011][T10633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.662584][ T9465] Bluetooth: hci1: command tx timeout [ 836.742345][ T9465] Bluetooth: hci1: command tx timeout [ 836.753221][T10658] chnl_net:caif_netlink_parms(): no params data found [ 838.202088][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.210251][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.210494][T10658] bridge_slave_0: entered allmulticast mode [ 838.247094][T10658] bridge_slave_0: entered promiscuous mode [ 838.308798][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.308953][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.309153][T10658] bridge_slave_1: entered allmulticast mode [ 838.343206][T10658] bridge_slave_1: entered promiscuous mode [ 838.822693][ T9465] Bluetooth: hci1: command tx timeout [ 838.873891][T10732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.016325][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.197643][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.198798][T10304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 839.752311][T10304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 839.984804][T10304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 840.100949][T10658] team0: Port device team_slave_0 added [ 840.415600][T10658] team0: Port device team_slave_1 added [ 840.902468][ T9465] Bluetooth: hci1: command tx timeout [ 842.472458][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.472474][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of b[ 842.472474][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.472498][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.498547][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 842.506415][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 842.522369][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 842.523679][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 842.525244][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 842.541308][ T26] ================================================================== [ 842.541322][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 842.541355][ T26] Read of size 8 at addr ffffc9000c699090 by task irq_work/1/26 [ 842.541370][ T26] [ 842.541391][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 842.541412][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 842.541431][ T26] Call Trace: [ 842.541440][ T26] [ 842.541448][ T26] dump_stack_lvl+0x189/0x250 [ 842.541468][ T26] ? run_irq_workd+0x116/0x190 [ 842.541487][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.541506][ T26] ? __pfx__printk+0x10/0x10 [ 842.541528][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 842.541547][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 842.541566][ T26] print_report+0xca/0x240 [ 842.541589][ T26] ? run_irq_workd+0x116/0x190 [ 842.541605][ T26] kasan_report+0x118/0x150 [ 842.541624][ T26] ? run_irq_workd+0x116/0x190 [ 842.541643][ T26] run_irq_workd+0x116/0x190 [ 842.541661][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 842.541680][ T26] ? schedule+0x91/0x360 [ 842.541705][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 842.541723][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 842.541738][ T26] smpboot_thread_fn+0x542/0xa60 [ 842.541755][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 842.541773][ T26] kthread+0x711/0x8a0 [ 842.541794][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 842.541811][ T26] ? __pfx_kthread+0x10/0x10 [ 842.541826][ T26] ? rt_spin_unlock+0x150/0x200 [ 842.541850][ T26] ? rt_spin_unlock+0x161/0x200 [ 842.541870][ T26] ? __pfx_kthread+0x10/0x10 [ 842.541889][ T26] ret_from_fork+0x4bc/0x870 [ 842.541914][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 842.541941][ T26] ? __switch_to_asm+0x39/0x70 [ 842.541962][ T26] ? __switch_to_asm+0x33/0x70 [ 842.541982][ T26] ? __pfx_kthread+0x10/0x10 [ 842.542001][ T26] ret_from_fork_asm+0x1a/0x30 [ 842.542027][ T26] [ 842.542033][ T26] [ 842.542037][ T26] The buggy address belongs to a vmalloc virtual mapping [ 842.542064][ T26] Memory state around the buggy address: [ 842.542075][ T26] ffffc9000c698f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 842.542086][ T26] ffffc9000c699000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 842.542096][ T26] >ffffc9000c699080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 842.542106][ T26] ^ [ 842.542115][ T26] ffffc9000c699100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 842.542124][ T26] ffffc9000c699180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 842.542131][ T26] ================================================================== [ 842.542831][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 842.542846][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 842.542865][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 842.542875][ T26] Call Trace: [ 842.542881][ T26] [ 842.542888][ T26] dump_stack_lvl+0x99/0x250 [ 842.542910][ T26] ? __asan_memcpy+0x40/0x70 [ 842.542932][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.542948][ T26] ? __pfx__printk+0x10/0x10 [ 842.542969][ T26] vpanic+0x237/0x6d0 [ 842.542985][ T26] ? __pfx_vpanic+0x10/0x10 [ 842.543000][ T26] ? preempt_schedule+0xae/0xc0 [ 842.543023][ T26] ? __pfx_preempt_schedule+0x10/0x10 [ 842.543049][ T26] panic+0xb9/0xc0 [ 842.543063][ T26] ? __pfx_panic+0x10/0x10 [ 842.543081][ T26] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 842.543108][ T26] ? run_irq_workd+0x116/0x190 [ 842.543123][ T26] check_panic_on_warn+0x89/0xb0 [ 842.543146][ T26] ? run_irq_workd+0x116/0x190 [ 842.543164][ T26] end_report+0x78/0x160 [ 842.543177][ T26] kasan_report+0x129/0x150 [ 842.543193][ T26] ? run_irq_workd+0x116/0x190 [ 842.543213][ T26] run_irq_workd+0x116/0x190 [ 842.543231][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 842.543247][ T26] ? schedule+0x91/0x360 [ 842.543269][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 842.543296][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 842.543312][ T26] smpboot_thread_fn+0x542/0xa60 [ 842.543328][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 842.543348][ T26] kthread+0x711/0x8a0 [ 842.543370][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 842.543386][ T26] ? __pfx_kthread+0x10/0x10 [ 842.543404][ T26] ? rt_spin_unlock+0x150/0x200 [ 842.543427][ T26] ? rt_spin_unlock+0x161/0x200 [ 842.543445][ T26] ? __pfx_kthread+0x10/0x10 [ 842.543465][ T26] ret_from_fork+0x4bc/0x870 [ 842.543490][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 842.543518][ T26] ? __switch_to_asm+0x39/0x70 [ 842.543538][ T26] ? __switch_to_asm+0x33/0x70 [ 842.543559][ T26] ? __pfx_kthread+0x10/0x10 [ 842.543579][ T26] ret_from_fork_asm+0x1a/0x30 [ 842.543610][ T26] [ 842.543872][ T26] Kernel Offset: disabled