last executing test programs: 45m4.259959846s ago: executing program 32 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0xe, 0x571, &(0x7f0000000e80)="$eJzs2sFqGl0UB/BjYjR8fFDXpYuBbroKaZ+gUgyECgWLi5YuOhC7cUph3IyufJA+QZ+nT+IqO0s7VmMIQok6tvn9QDzM/zqeyxWvwv345PPw6svo04fvX+P0ZRL1iDi6jmjFURxHqRYrtWjETdMAAP42vV7a3jyiua9W2JE8b6e1O1ey/62ShgAAAAAAAAAAALi3Pzn/f+T8PwD8E8rz/42q22CH8rydNha/39Y5/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABU53o+fzTf8Ki6PwBg+zbs/wu/R9arbRQA2Br//wHg4bH/A8DD8/bd+9ftbrfTS5LTiNm06Bf98rnMLy67nfPkl9bqVbOi6B8v8+dlnqznJ/HfIn9xZ96IZ0/L/Gf26k33Vt6Mq91PHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjhLFlq1ZZXZ0XRPy7z1YBWrOVldXHZ7ZwvBqzn9Xhc3988AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPsbjSfDNMsGuWIXRT0i9vBeZ/+Xq3myWNUt3bkZyysRtW3e+RCK+a0Pf0wPpLHDKKr7TgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKo1Gk+GaZYN8lHVnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh2I0ngzTLBvkOyyqniMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD79yMAAP//cPKI8w==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, '^', 0x3a, '!!\x00', 0x3a, './file0'}, 0x2b) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 35m43.773550979s ago: executing program 33 (id=1212): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000007280), 0x0, 0x1, 0x0) getpgrp(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xe, 0x2000) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000240)="80003792a88f13ce", 0x8, 0x800, &(0x7f0000000180)={0xa, 0xffef, 0x5, @remote}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000100)=0x800, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 30m48.942560387s ago: executing program 34 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) keyctl$session_to_parent(0x12) 30m3.501469031s ago: executing program 35 (id=1955): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000900)=ANY=[@ANYBLOB="6164696e6963622c696f636861727365743d6d61636963656c616e642c757466382c7569643d8cd2d2cee77f95a093f940ab4b6f388c204ffbc220c77d11b7a3d46009461eea4dc0004f3dd13e7dc69064a6eb6ed58018e63289c8c0df4983ae4c4248d630e5edd4c8dda6dd63452fd50b9f210e75e6d383f8b71d3b6cdadd38c67fa991fa575ee829d75e5562d87d4048fca6f8a56c7c2fd1cf35b9a31ef30dc8215b990895d3e5", @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=macinuit,mode=00000000000000000010000,iocharset=iso8859-2,adinicb,volume=00000000000000000001,umask=00000000000000000000000,gid=forget,unhide,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f2, &(0x7f0000000ac0)="$eJzs3U9sHFcZAPBv1mt7N1Udt03TIFWqaVFBWCSxLRfMJQYhZKQKqiDB2WqcxsrmD7aL3B6wC0hcOXBFKgdzgRMIISEhRSpnuFXcLE4VSFx6Snpg0Pxbr93d9TquvS78ftFk3rw3780338y+2V3J2gD+by1NR/1BNGNp+tXNbHt3Z661uzN3pyjXWhExHhG1iHpHr+S9iMUolvhMVlE19DrOL1YXrr//4e4HxVa9XGpR/NfsHWB9kLPYLpeYioiRcn0M+8Z7/fHGG98rJu3MZAl7qUocDNtoRKT7/ODiXks36UjHRs/XO/DpkRTPzQ7F638y4lxENKoH2nbRWDv9CA91pLlo++TiAAAAgDPj/MOtiM2YGHYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GlS/v5/Ui6PqvJUJNXv/3+uY/exIYbaX//IGlXhQe00ggEAAAAAAACAk/XCw/jN9TSdqLbTJGrfGyk3muX6zViPlXrE5diM5diIjViLmYiY7BhobHN5Y2NtJl7Mty58lKZpPFH0jLV9PWe79pwdMODmcc8YAAAAAAAAAP6nXJsfz9c/jqWYGHYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQKYkYKVb5cqEqT0atHhGNiBjL9tuO+FtVPkPqR+3w4GTiAAAAgCEb3bd1/mE8jM2YqLbTJP/MfzH/3N+IN+NubMRqbEQrVuJG/l1A8am/truzNb27M3cnW8phv/Nke9yv/XvvGL+fODSofMQovnvofuRL+R7NuBmrec3leD3uRStuRC3vmblUxdMRV4d3spiSa4U0jfFB0nWjXGdn/vNyfSqah+0wmWdktJ2Rq1lsSZHHp/pnovPqDODgkWai1v7m50LvI7W/jKlyfq3vUZL/pGlROlfVRDzxrb45z++X0SOdzLEczMRsx913sX/OIz7/h99+/1br7u1byfb0qd1Gj+WF7tXj/6iuUJWJwnasxFxHJp4bOBM31894Jnra/01jLZ5tl5fim/HdmI6peC3WYjV+GMuxESsxFd/IS8vl/Zz9P9k/U4v7tl47LKax8rqMHIjps+eLdb+YXsz7TsRqfDvuxY1YiVfyf7MxE1+O+ZiPhY4r/OwAM22ty6v+j72Df+kLZSGb+H62NwGe4qu7lyyvT3XktXPOnczbOmtqkZZPlqeP8DzqPzdW9h5Z2ZX4ScdrcPjamWhE+ylRRfdMlYHRrpn4VT6trLfu3l67tXz/wLjJdvfjvRz7T//sTCTZ/fJ0e47Yf3dkbc90bZvJ2y6022oH237dbLcd9kodK9/DfXyk2bztuYj4ZRlt1pbJ5vCs7VJHv+z9ViNv+yhN0+L9FgBn3rkvnhtr/qv51+a7zZ82bzVfbXx9/Cvjz4/F6F9Gv1q/OvJy7fnkd/Fu/CgO/4QOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcav2tt28vt1orawcKaZpu9Wg6kULUI/bV/PlPHfvkvzUWEYMPmO29WIvIa+pRFgbo/s+IKGu2Hu903nncJPy9vCankvA+hWTgnRs975+ycO/J8nQepWl66qdT/VbbkbunpaFdgk+4UP1E1seaknpEj15DmY6AU3Rl4879K+tvvf2l1TvLb6y8sXJ3YX5+4erC/CtzV26uthrDDg84QfmzPn+fM+xIAAAAAAAAAAAAgEEN9sc5ye3lKGrq3f6K4LDuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMewNB31B5HEzNXLV7Pt3Z25VrZU5Ww9ku/5KCJqEZFMRSTvRSxGscRkx3BJr+NsR1x//8PdD4qternk+9eOfxbb5RJTZbhT3fdrdKtMt3qNl+Tj3O893oCSchlp1yweazz4hPw3AAD//xEwCSs=") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) readv(r2, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r2, 0x5502) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 29m53.441941075s ago: executing program 36 (id=1997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 25m18.711567349s ago: executing program 37 (id=2461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 25m16.780724857s ago: executing program 38 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23m59.418910383s ago: executing program 39 (id=2630): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") 15m44.660277302s ago: executing program 0 (id=3741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r4}, 0x38) 15m43.586226892s ago: executing program 0 (id=3745): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x90}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 15m42.344163753s ago: executing program 0 (id=3746): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r4, @in={{0x2, 0x4e24, @empty}}, 0x22b9, 0x1ff}, 0x90) 15m41.923867609s ago: executing program 0 (id=3749): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) open(0x0, 0x145142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 15m40.846324152s ago: executing program 0 (id=3752): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) 15m39.754891532s ago: executing program 0 (id=3757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15m38.381407646s ago: executing program 40 (id=3757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11m2.070945627s ago: executing program 6 (id=4342): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000940)='./file1\x00', 0x0, 0x40090, 0x0) r4 = memfd_secret(0x0) fchmod(r4, 0x134) openat(r4, 0x0, 0x0, 0xd5) 11m0.816996344s ago: executing program 6 (id=4344): socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_open_procfs(0x0, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2ce}, 0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10m50.237555212s ago: executing program 6 (id=4365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000140)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache']) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) 10m47.645889838s ago: executing program 6 (id=4370): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x3) r5 = socket(0x28, 0x5, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) listen(r5, 0x8b) 10m45.961396624s ago: executing program 6 (id=4374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10m45.017637678s ago: executing program 6 (id=4376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xb70, &(0x7f0000000300)={0x0, 0x679a, 0x0, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x52, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 10m29.102834341s ago: executing program 41 (id=4376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xb70, &(0x7f0000000300)={0x0, 0x679a, 0x0, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x52, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) 10m29.079486992s ago: executing program 4 (id=4401): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m24.047115973s ago: executing program 4 (id=4411): syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x23, &(0x7f0000001140)=""/35}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 10m18.623739983s ago: executing program 4 (id=4421): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) sched_setscheduler(0x0, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 10m15.297129853s ago: executing program 4 (id=4426): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) open(0x0, 0x145142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 10m12.383474761s ago: executing program 4 (id=4429): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x49f, &(0x7f0000001000)={0x0, 0x54e9, 0x0, 0x7, 0x40024f}, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x800) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x2, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc6042, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10m9.618976733s ago: executing program 4 (id=4436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 10m6.899998071s ago: executing program 42 (id=4436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 6m34.923029564s ago: executing program 5 (id=4800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 6m32.616372532s ago: executing program 5 (id=4802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x800}}}}}}}, 0x0) 6m31.982341198s ago: executing program 5 (id=4803): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m21.970423098s ago: executing program 5 (id=4812): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) open(0x0, 0x145142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m20.770788951s ago: executing program 5 (id=4814): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 6m17.471837796s ago: executing program 5 (id=4820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x800}}}}}}}, 0x0) 6m15.84879507s ago: executing program 43 (id=4820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x800}}}}}}}, 0x0) 1m47.706780581s ago: executing program 9 (id=5297): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 1m47.36829825s ago: executing program 9 (id=5298): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000000)={&(0x7f0000000440)=""/176, 0xb0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 1m46.153738856s ago: executing program 9 (id=5302): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r2 = epoll_create(0x10000e9) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcb`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x30000009}) r6 = syz_io_uring_setup(0x112, &(0x7f00000003c0)={0x0, 0xfded}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) socket(0x10, 0x2, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1m44.618663921s ago: executing program 9 (id=5305): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1m41.620384828s ago: executing program 9 (id=5312): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f000004aec0), 0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f000004af00)={0x0, 'ip6gre0\x00', 0x2}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f000004ac80)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) semget(0x3, 0x4, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, 0x0, 0x21e) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 1m38.610395838s ago: executing program 9 (id=5317): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x408, 0x3}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x4c, r11, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x800}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYBLOB='\b\x002\x00\x00\x00'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002c090f00"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x28, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, r3, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c8}, 0x24008051) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m15.228525742s ago: executing program 3 (id=5360): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1m14.968958476s ago: executing program 3 (id=5361): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m14.329842093s ago: executing program 3 (id=5362): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 1m12.427561211s ago: executing program 3 (id=5364): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001055f104000002000004050000000000", @ANYRES32=0x0, @ANYBLOB="0380000010e3040008000500", @ANYRES32, @ANYBLOB="140012800b0001006970766c616e000055fe028008000a00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 1m3.919223023s ago: executing program 3 (id=5375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x1, 0x6, @multicast}, 0x14) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x44889}, 0x20000804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) 1m2.300305188s ago: executing program 3 (id=5379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0xc, 0x80000001) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="dc20000190780000080a0000090a000002000022047f21050a0000000200000002fe04f989000000"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000240), 0x4003) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 46.664903794s ago: executing program 44 (id=5379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0xc, 0x80000001) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="dc20000190780000080a0000090a000002000022047f21050a0000000200000002fe04f989000000"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000240), 0x4003) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 14.819238712s ago: executing program 8 (id=5464): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 14.474595524s ago: executing program 8 (id=5465): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 14.20828344s ago: executing program 8 (id=5466): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000180)=ANY=[@ANYBLOB="52abf0bc0e73752ab0e4cf14f177186cb4f67b683ecda9ffff0b"]) 10.422109838s ago: executing program 7 (id=5474): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r3 = gettid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) 9.662655999s ago: executing program 1 (id=5478): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 8.728068467s ago: executing program 8 (id=5480): socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x29, 0x2120, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x541b, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000280)=""/97, 0x61}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 6.493750434s ago: executing program 1 (id=5483): syz_io_uring_setup(0xcd9, 0x0, &(0x7f0000000340), &(0x7f0000000300)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b31", 0x27}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000840)=""/114, 0x72}, 0x9}, {{&(0x7f00000008c0)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/117, 0x75}, {&(0x7f0000000180)=""/60, 0x3c}], 0x3, &(0x7f0000000ac0)=""/239, 0xef}, 0x1}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/199, 0xc7}, {0x0}, {&(0x7f0000000d40)=""/237, 0xed}, {&(0x7f0000000e40)=""/169, 0xa9}], 0x5, &(0x7f0000000f80)=""/182, 0xb6}, 0x80}, {{&(0x7f0000001040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001380)=[{&(0x7f00000010c0)=""/85, 0x55}, {&(0x7f0000001140)=""/152, 0x98}, {&(0x7f0000001200)=""/54, 0x36}, {&(0x7f0000001240)=""/52, 0x34}, {&(0x7f0000001280)=""/3, 0x3}, {&(0x7f00000012c0)}, {0x0}], 0x7, &(0x7f0000001540)=""/134, 0x86}, 0x9}], 0x4, 0x2003, 0x0) 5.158291741s ago: executing program 2 (id=5485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8b35, 0x0) 5.156683557s ago: executing program 1 (id=5486): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x7, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 4.11929198s ago: executing program 7 (id=5487): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 4.000565851s ago: executing program 2 (id=5488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r1, 0x7, 0xffffffff, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4, 0x34}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.756598169s ago: executing program 2 (id=5489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 3.715772043s ago: executing program 7 (id=5490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.262245087s ago: executing program 2 (id=5491): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.165215459s ago: executing program 1 (id=5492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 2.859423021s ago: executing program 2 (id=5493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40080) lsm_set_self_attr(0x0, 0x0, 0x3e, 0x0) 2.728866663s ago: executing program 1 (id=5494): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 2.572314057s ago: executing program 7 (id=5495): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x6, 0xd12e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.860968377s ago: executing program 8 (id=5496): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000000040)=[0x8, 0x5, 0x5, 0x1], &(0x7f0000000080), &(0x7f0000000140), 0x0}) 1.250057161s ago: executing program 2 (id=5497): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r2 = epoll_create(0x10000e9) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcb`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x30000009}) r6 = syz_io_uring_setup(0x112, &(0x7f00000003c0)={0x0, 0xfded}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) socket(0x10, 0x2, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.116001631s ago: executing program 8 (id=5498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 1.098333397s ago: executing program 1 (id=5499): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x8, {}, {0xffffffffffffffff}, 0x1ffc0000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 130.573704ms ago: executing program 7 (id=5500): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 0s ago: executing program 7 (id=5501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) kernel console output (not intermixed with test programs): h-speed USB device number 15 using dummy_hcd [ 2228.631253][T14545] usb 5-1: Using ep0 maxpacket: 8 [ 2228.731633][T23074] loop9: detected capacity change from 0 to 32768 [ 2228.788674][T14545] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2228.795932][T23074] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2228.845640][T14545] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2228.876479][T14545] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2228.876902][T23074] loop2: detected capacity change from 0 to 7 [ 2228.886728][T14545] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.904178][T23074] Dev loop2: unable to read RDB block 7 [ 2228.906222][T14545] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2228.911080][T23074] loop2: AHDI p1 p2 p3 [ 2228.920489][T14545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.926217][T23074] loop2: partition table partially beyond EOD, truncated [ 2228.940921][T23074] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2228.947903][T23074] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2229.438799][T14545] usb 5-1: GET_CAPABILITIES returned 0 [ 2229.451727][T14545] usbtmc 5-1:16.0: can't read capabilities [ 2229.468239][ T5228] Dev loop2: unable to read RDB block 7 [ 2229.509498][ T5228] loop2: AHDI p1 p2 p3 [ 2230.467351][ T5228] loop2: partition table partially beyond EOD, truncated [ 2230.766432][ T5228] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2230.822528][T22416] usb 5-1: USB disconnect, device number 15 [ 2230.836822][ T5228] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2231.008515][T14953] ocfs2: Unmounting device (7,9) on (node local) [ 2231.347008][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2235.007181][T14545] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2235.215635][T23112] loop1: detected capacity change from 0 to 2048 [ 2235.228624][T23112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2235.241197][T14545] usb 3-1: Using ep0 maxpacket: 16 [ 2236.710665][T14545] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 2236.761490][T14545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.830743][T14545] usb 3-1: Product: syz [ 2236.851393][T14545] usb 3-1: Manufacturer: syz [ 2236.856027][T14545] usb 3-1: SerialNumber: syz [ 2237.170669][T23121] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4406'. [ 2237.499606][T14545] usb 3-1: config 0 descriptor?? [ 2237.887075][T14545] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2238.261751][T14545] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2239.102318][T14545] usb 3-1: USB disconnect, device number 27 [ 2239.323153][T20300] udevd[20300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2240.705842][T23139] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2240.721075][T23139] block device autoloading is deprecated and will be removed. [ 2241.182524][T22502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2241.199760][T22502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2241.219399][T22502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2241.250324][T19439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.268946][T22502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2241.284747][T22502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2241.437979][T19439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.481311][T14545] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2241.658741][T19439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.765193][T14545] usb 10-1: Using ep0 maxpacket: 8 [ 2241.844775][T14545] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2241.954206][T14545] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2242.245035][T14545] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2242.273520][T19439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.113065][T14545] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2243.235754][T14545] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2243.292851][T14545] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.344560][T22502] Bluetooth: hci5: command tx timeout [ 2244.296730][T14545] usb 10-1: usb_control_msg returned -71 [ 2244.317677][T14545] usbtmc 10-1:16.0: can't read capabilities [ 2244.457181][T14545] usb 10-1: USB disconnect, device number 34 [ 2244.482515][T23164] loop2: detected capacity change from 0 to 2048 [ 2244.536983][T23164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2245.788356][T13162] Bluetooth: hci5: command tx timeout [ 2245.834918][T19439] bridge_slave_1: left allmulticast mode [ 2246.658138][T19439] bridge_slave_1: left promiscuous mode [ 2246.684453][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.936559][T19439] bridge_slave_0: left allmulticast mode [ 2247.231432][T19439] bridge_slave_0: left promiscuous mode [ 2247.506301][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.657716][T23186] loop5: detected capacity change from 0 to 2048 [ 2247.705034][T23186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2247.881467][T22502] Bluetooth: hci5: command tx timeout [ 2248.892335][T23194] loop4: detected capacity change from 0 to 32768 [ 2248.962646][T23194] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2249.212916][T23194] loop2: detected capacity change from 0 to 7 [ 2249.221539][T23194] Dev loop2: unable to read RDB block 7 [ 2249.227092][T23194] loop2: AHDI p1 p2 p3 [ 2249.231306][T23194] loop2: partition table partially beyond EOD, truncated [ 2249.238487][T23194] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2249.245462][T23194] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2249.493821][ T5228] Dev loop2: unable to read RDB block 7 [ 2249.540475][ T5228] loop2: AHDI p1 p2 p3 [ 2249.662338][ T5228] loop2: partition table partially beyond EOD, truncated [ 2249.694485][ T5228] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2249.723696][ T5228] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2249.989862][T22502] Bluetooth: hci5: command tx timeout [ 2251.045229][T23212] sctp: failed to load transform for md5: -2 [ 2251.779534][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4431'. [ 2251.876743][T20963] ocfs2: Unmounting device (7,4) on (node local) [ 2251.991842][T10360] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2252.269455][T10360] usb 3-1: Using ep0 maxpacket: 8 [ 2252.316355][T10360] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2252.328662][T10360] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2252.350518][T10360] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2252.379887][T10360] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2252.401788][T10360] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2252.411090][T10360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.728923][T10360] usb 3-1: GET_CAPABILITIES returned 0 [ 2252.747169][T10360] usbtmc 3-1:16.0: can't read capabilities [ 2252.984895][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2252.997316][T21010] usb 3-1: USB disconnect, device number 28 [ 2253.165208][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2253.211832][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2253.244844][T19439] bond0 (unregistering): Released all slaves [ 2253.710325][T23229] loop9: detected capacity change from 0 to 2048 [ 2253.726405][T23229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2254.583789][T23232] loop2: detected capacity change from 0 to 16 [ 2254.608329][T23232] erofs (device loop2): mounted with root inode @ nid 36. [ 2254.970654][T23234] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2254.979209][T23234] erofs (device loop2): readahead error at folio 47 @ nid 36 [ 2254.986791][T23234] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2254.995265][T23234] erofs (device loop2): readahead error at folio 46 @ nid 36 [ 2255.003184][T23234] erofs (device loop2): readahead error at folio 45 @ nid 36 [ 2255.011601][T23234] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2255.020146][T23234] erofs (device loop2): readahead error at folio 43 @ nid 36 [ 2255.027876][T23234] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2255.037823][T23234] erofs (device loop2): readahead error at folio 42 @ nid 36 [ 2255.045801][T23234] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2255.054404][T23234] erofs (device loop2): readahead error at folio 41 @ nid 36 [ 2255.061961][T23234] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2255.070355][T23234] erofs (device loop2): readahead error at folio 40 @ nid 36 [ 2255.077993][T23234] erofs (device loop2): readahead error at folio 39 @ nid 36 [ 2255.085547][T23234] erofs (device loop2): readahead error at folio 38 @ nid 36 [ 2255.093894][T23234] erofs (device loop2): readahead error at folio 36 @ nid 36 [ 2255.102562][T23234] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 2255.111046][T23234] erofs (device loop2): readahead error at folio 31 @ nid 36 [ 2255.119473][T23234] erofs (device loop2): readahead error at folio 25 @ nid 36 [ 2255.172174][T23234] erofs (device loop2): readahead error at folio 24 @ nid 36 [ 2255.180537][T23234] erofs (device loop2): readahead error at folio 19 @ nid 36 [ 2255.189955][T23234] syz.2.4437: attempt to access beyond end of device [ 2255.189955][T23234] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 2255.205532][T23234] syz.2.4437: attempt to access beyond end of device [ 2255.205532][T23234] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 2255.222007][T23234] syz.2.4437: attempt to access beyond end of device [ 2255.222007][T23234] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 2255.237147][T23234] syz.2.4437: attempt to access beyond end of device [ 2255.237147][T23234] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 2256.502174][T23238] loop9: detected capacity change from 0 to 2048 [ 2256.522496][T23238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2260.613391][T23261] sctp: failed to load transform for md5: -2 [ 2261.187881][ T30] audit: type=1326 audit(1758373325.306:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.2.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e498ec29 code=0x7ffc0000 [ 2261.394196][T23277] fuse: Bad value for 'fd' [ 2262.042714][T23280] fuse: Unknown parameter '0xffffffffffffffff' [ 2262.253264][ T30] audit: type=1326 audit(1758373325.306:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.2.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e498ec29 code=0x7ffc0000 [ 2262.352157][ T30] audit: type=1326 audit(1758373325.306:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.2.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f26e498ec29 code=0x7ffc0000 [ 2262.506631][T22502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2262.522134][T22502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2262.531536][T22502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2262.594799][T23148] chnl_net:caif_netlink_parms(): no params data found [ 2262.619157][T23286] loop1: detected capacity change from 0 to 2048 [ 2262.632509][T23286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2262.732667][T22502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2262.743614][T22502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2263.613260][T23292] loop5: detected capacity change from 0 to 16 [ 2263.649452][T23292] erofs (device loop5): mounted with root inode @ nid 36. [ 2263.738693][T23292] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2263.795857][T23292] erofs (device loop5): failed to decompress -29 in[58, 4038] out[1851] [ 2263.805627][T23292] erofs (device loop5): read error -117 @ 43 of nid 36 [ 2263.856806][T23292] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2263.861305][T12386] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2263.881682][T23292] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2263.890398][T23292] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 2263.907179][T23292] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2263.915725][T23292] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 2263.923425][T23292] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2263.933330][T23292] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 2263.940892][T23292] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 2263.951194][T23292] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 2263.960564][T23292] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 2263.973478][T23292] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 2263.983083][T23292] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 2263.991719][T23292] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 2263.999487][T23292] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 2264.017407][T23292] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 2264.035225][T23292] syz.5.4451: attempt to access beyond end of device [ 2264.035225][T23292] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 2264.093996][T23292] syz.5.4451: attempt to access beyond end of device [ 2264.093996][T23292] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 2264.113633][T23292] syz.5.4451: attempt to access beyond end of device [ 2264.113633][T23292] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 2264.139605][T23292] erofs (device loop5): failed to decompress -29 in[58, 4038] out[2639] [ 2264.149227][T23292] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2264.160107][T23292] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 2264.167692][T23292] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2264.175336][T19439] hsr_slave_0: left promiscuous mode [ 2264.181996][T23292] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 2264.191464][T23292] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 2264.206659][T23292] syz.5.4451: attempt to access beyond end of device [ 2264.206659][T23292] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 2264.231692][T23292] erofs (device loop5): failed to decompress -29 in[58, 4038] out[3537] [ 2264.308362][T19439] hsr_slave_1: left promiscuous mode [ 2264.383075][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2264.487273][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2264.727603][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2264.751895][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2264.861935][T13162] Bluetooth: hci1: command tx timeout [ 2265.551838][T12386] usb 10-1: Using ep0 maxpacket: 16 [ 2265.562138][T12386] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.573155][T12386] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.583045][T12386] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2265.593795][T12386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.603157][T23301] loop1: detected capacity change from 0 to 2048 [ 2265.616587][T12386] usb 10-1: config 0 descriptor?? [ 2265.624048][T23301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2266.480269][T23291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2266.728649][T23291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2266.751241][T12386] hid_parser_main: 22 callbacks suppressed [ 2266.751269][T12386] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2266.798687][T12386] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2266.822892][T19439] veth1_macvtap: left promiscuous mode [ 2266.828506][T12386] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2266.841935][T19439] veth0_macvtap: left promiscuous mode [ 2266.847492][T12386] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2266.855064][T19439] veth1_vlan: left promiscuous mode [ 2266.866667][T12386] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2266.878127][T19439] veth0_vlan: left promiscuous mode [ 2266.910471][T12386] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 2266.961222][T13162] Bluetooth: hci1: command tx timeout [ 2267.163126][T12386] usb 10-1: USB disconnect, device number 35 [ 2269.032975][T13162] Bluetooth: hci1: command tx timeout [ 2269.392839][T23322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2269.401946][T23322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2269.411585][T23322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2269.419975][T23322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2269.429974][T23322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2269.494850][T23322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2269.508802][T23328] fuse: Unknown parameter '0x000000000000000f' [ 2269.722167][T14545] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2269.906690][T14545] usb 10-1: Using ep0 maxpacket: 8 [ 2269.919768][T14545] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2269.950058][T14545] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.981518][T14545] usb 10-1: Product: syz [ 2269.985811][T14545] usb 10-1: Manufacturer: syz [ 2270.006171][T14545] usb 10-1: SerialNumber: syz [ 2270.034359][T14545] usb 10-1: config 0 descriptor?? [ 2270.046277][T14545] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2270.906668][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2270.992364][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2271.000751][T23337] loop1: detected capacity change from 0 to 2048 [ 2271.022893][T23337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2271.121299][T13162] Bluetooth: hci1: command tx timeout [ 2272.564638][T14545] gspca_sonixj: reg_r err -71 [ 2272.572398][T14545] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 2272.592288][T14545] usb 10-1: USB disconnect, device number 36 [ 2274.791176][T23362] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4469'. [ 2275.032850][T23148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.040093][T23148] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.111110][T23148] bridge_slave_0: entered allmulticast mode [ 2275.431703][T23148] bridge_slave_0: entered promiscuous mode [ 2275.471920][T23368] fuse: Unknown parameter '0x000000000000000f' [ 2276.238863][T23148] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.261359][T23148] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.291781][T23148] bridge_slave_1: entered allmulticast mode [ 2276.389717][T23148] bridge_slave_1: entered promiscuous mode [ 2276.990205][T23148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2277.979553][T23148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.060702][T23382] loop5: detected capacity change from 0 to 2048 [ 2278.121671][T23383] 9pnet_fd: Insufficient options for proto=fd [ 2278.129167][T23382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2279.025193][T23148] team0: Port device team_slave_0 added [ 2279.102479][T23148] team0: Port device team_slave_1 added [ 2279.504892][T23148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2279.513429][T23148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.590937][T23148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2279.764720][T19439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.811325][ T5950] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2279.847005][T23148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2279.871205][T23148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.897116][ C1] vkms_vblank_simulate: vblank timer overrun [ 2279.935002][T23148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2280.001334][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 2280.008411][ T5950] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2280.035340][ T5950] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2280.075575][ T5950] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2280.101203][ T5950] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2280.104355][T19439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.142783][ T5950] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2280.181344][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.427009][ T5950] usb 3-1: GET_CAPABILITIES returned 0 [ 2280.491998][ T5950] usbtmc 3-1:16.0: can't read capabilities [ 2280.549032][T23394] loop5: detected capacity change from 0 to 2048 [ 2280.606720][T19439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.620230][T23394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2280.642804][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2280.676983][ T5950] usb 3-1: USB disconnect, device number 29 [ 2282.000579][T23148] hsr_slave_0: entered promiscuous mode [ 2282.192914][T23148] hsr_slave_1: entered promiscuous mode [ 2282.221624][T23148] debugfs: 'hsr0' already exists in 'hsr' [ 2282.237547][T23148] Cannot create hsr debugfs directory [ 2283.658100][T23417] netlink: 'syz.2.4483': attribute type 10 has an invalid length. [ 2284.164798][T23418] sctp: failed to load transform for md5: -2 [ 2284.343416][T19439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.674726][T23417] team0: Device hsr_slave_0 failed to register rx_handler [ 2285.326896][T23434] loop2: detected capacity change from 0 to 2048 [ 2285.357601][T23434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2287.317999][T23282] chnl_net:caif_netlink_parms(): no params data found [ 2288.851650][T19439] bridge_slave_1: left allmulticast mode [ 2288.857347][T19439] bridge_slave_1: left promiscuous mode [ 2289.703745][T23460] loop5: detected capacity change from 0 to 32768 [ 2289.781472][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.934495][T23460] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2289.963285][T19439] bridge_slave_0: left allmulticast mode [ 2290.024579][T19439] bridge_slave_0: left promiscuous mode [ 2290.036734][T23459] loop2: detected capacity change from 0 to 7 [ 2290.056178][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.225126][T23459] Dev loop2: unable to read RDB block 7 [ 2290.230750][T23459] loop2: AHDI p1 p2 p3 [ 2290.511710][T23459] loop2: partition table partially beyond EOD, truncated [ 2290.792121][T23459] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2290.798949][T23459] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2291.272625][ T30] audit: type=1326 audit(1758373355.386:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2291.420259][ T30] audit: type=1326 audit(1758373355.396:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2291.493263][ T30] audit: type=1326 audit(1758373355.406:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2291.689979][ T30] audit: type=1326 audit(1758373355.406:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2291.870424][T23478] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4498'. [ 2292.051272][ T30] audit: type=1326 audit(1758373355.406:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2292.191234][ T30] audit: type=1326 audit(1758373355.436:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2292.230036][T19400] ocfs2: Unmounting device (7,5) on (node local) [ 2292.341257][T12386] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2292.363234][ T30] audit: type=1326 audit(1758373355.436:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2292.470198][ T30] audit: type=1326 audit(1758373355.436:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2292.601305][ T30] audit: type=1326 audit(1758373355.436:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2292.736493][ T30] audit: type=1326 audit(1758373355.436:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7d8ec29 code=0x7ffc0000 [ 2292.790007][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2293.155489][T12386] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2293.333925][T12386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.456244][T12386] usb 10-1: config 0 descriptor?? [ 2294.248770][T23489] netlink: 'syz.5.4501': attribute type 2 has an invalid length. [ 2295.151374][T23489] netlink: 'syz.5.4501': attribute type 11 has an invalid length. [ 2295.206778][T23489] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4501'. [ 2295.681630][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2295.761487][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2295.901882][T19439] bond0 (unregistering): Released all slaves [ 2295.967118][T23282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.008056][T23282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.069668][T23282] bridge_slave_0: entered allmulticast mode [ 2296.116939][T23282] bridge_slave_0: entered promiscuous mode [ 2296.182695][T23282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.204671][T23282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.230782][T23282] bridge_slave_1: entered allmulticast mode [ 2296.263549][T23282] bridge_slave_1: entered promiscuous mode [ 2297.039326][T23282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2297.116504][T23282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2298.551566][T12386] usb 10-1: can't set config #0, error -110 [ 2298.646977][T22416] usb 10-1: USB disconnect, device number 37 [ 2298.815310][T22502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2298.838095][T22502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2298.854889][T22502] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2298.878766][T22502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2298.901407][T22502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2299.647191][T23518] 9pnet_fd: Insufficient options for proto=fd [ 2299.846857][T23282] team0: Port device team_slave_0 added [ 2299.982633][T23282] team0: Port device team_slave_1 added [ 2301.083076][T22502] Bluetooth: hci6: command tx timeout [ 2301.447073][T23282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2301.512749][T23282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2301.547907][T23282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2301.734613][T23282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2301.792511][T23282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2301.933910][T23282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2303.246437][T22502] Bluetooth: hci6: command tx timeout [ 2303.698274][T23282] hsr_slave_0: entered promiscuous mode [ 2304.076673][T23542] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4516'. [ 2304.241566][T23282] hsr_slave_1: entered promiscuous mode [ 2304.361891][T23282] debugfs: 'hsr0' already exists in 'hsr' [ 2304.372262][T23282] Cannot create hsr debugfs directory [ 2304.671411][ T5950] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2304.806494][T21010] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2305.167795][T21010] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 2305.177608][T21010] usb 3-1: config 0 has no interface number 0 [ 2305.190696][T21010] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2305.201893][T21010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.210829][ T5950] usb 10-1: Using ep0 maxpacket: 8 [ 2305.218552][T21010] usb 3-1: Product: syz [ 2305.244425][T21010] usb 3-1: Manufacturer: syz [ 2305.261553][T22502] Bluetooth: hci6: command tx timeout [ 2305.267089][T21010] usb 3-1: SerialNumber: syz [ 2305.280223][ T5950] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2305.283201][T21010] usb 3-1: config 0 descriptor?? [ 2305.381536][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2305.437051][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2305.451110][ T5950] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2305.482060][ T5950] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2305.527070][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.592775][T19439] hsr_slave_0: left promiscuous mode [ 2305.613808][T19439] hsr_slave_1: left promiscuous mode [ 2305.639458][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2305.677192][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2305.688582][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2305.720330][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2305.818374][ T5950] usb 10-1: GET_CAPABILITIES returned 0 [ 2305.824807][ T5950] usbtmc 10-1:16.0: can't read capabilities [ 2305.830087][T19439] veth1_macvtap: left promiscuous mode [ 2305.862939][T19439] veth0_macvtap: left promiscuous mode [ 2305.868888][T19439] veth1_vlan: left promiscuous mode [ 2305.879843][T19439] veth0_vlan: left promiscuous mode [ 2305.939251][T21010] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2305.981453][T21010] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2306.013732][T21010] asix 3-1:0.251: probe with driver asix failed with error -71 [ 2306.052652][T21010] usb 3-1: USB disconnect, device number 30 [ 2306.080199][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2306.105176][ T5950] usb 10-1: USB disconnect, device number 38 [ 2306.759232][T23557] 9pnet_fd: Insufficient options for proto=fd [ 2307.911246][T22502] Bluetooth: hci6: command tx timeout [ 2309.414180][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2309.757745][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2312.514168][T23592] sctp: failed to load transform for md5: -2 [ 2312.862956][T23599] loop9: detected capacity change from 0 to 2048 [ 2312.913548][T23599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2315.083941][ T5950] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2315.411229][ T5950] usb 10-1: Using ep0 maxpacket: 8 [ 2315.418845][ T5950] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2315.437108][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2315.481062][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2315.501440][ T5950] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2315.576286][ T5950] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2315.601234][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.906615][ T5950] usb 10-1: GET_CAPABILITIES returned 0 [ 2315.913925][ T5950] usbtmc 10-1:16.0: can't read capabilities [ 2316.134218][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2316.165402][T12386] usb 10-1: USB disconnect, device number 39 [ 2319.303937][T23511] chnl_net:caif_netlink_parms(): no params data found [ 2319.517802][T23635] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4542'. [ 2320.626644][T23642] loop9: detected capacity change from 0 to 2048 [ 2320.660545][T23642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2322.137146][T19439] bridge_slave_1: left allmulticast mode [ 2322.893136][T19439] bridge_slave_1: left promiscuous mode [ 2322.912091][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2322.992217][T19439] bridge_slave_0: left allmulticast mode [ 2323.038521][T19439] bridge_slave_0: left promiscuous mode [ 2323.091009][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.095676][T23659] loop9: detected capacity change from 0 to 32768 [ 2324.124889][T23659] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2324.133223][T22502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2324.148960][T22502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2324.159890][T22502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2324.168545][T22502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2324.176616][T22502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2324.183521][T23659] loop2: detected capacity change from 0 to 7 [ 2324.194317][T23659] Dev loop2: unable to read RDB block 7 [ 2324.199933][T23659] loop2: AHDI p1 p2 p3 [ 2324.204184][T23659] loop2: partition table partially beyond EOD, truncated [ 2324.211521][T23659] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2324.218309][T23659] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2324.731911][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2325.237967][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2325.257668][T14953] ocfs2: Unmounting device (7,9) on (node local) [ 2325.400889][T19439] bond0 (unregistering): Released all slaves [ 2326.401495][T22502] Bluetooth: hci5: command tx timeout [ 2326.469481][T23650] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 2326.481256][T23650] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 2326.788425][T23511] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.809262][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.829124][T23511] bridge_slave_0: entered allmulticast mode [ 2326.837303][T23511] bridge_slave_0: entered promiscuous mode [ 2326.846264][T23511] bridge0: port 2(bridge_slave_1) entered blocking state [ 2326.853531][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.860691][T23511] bridge_slave_1: entered allmulticast mode [ 2327.047406][T23511] bridge_slave_1: entered promiscuous mode [ 2327.707387][T23689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4555'. [ 2328.509579][T13162] Bluetooth: hci5: command tx timeout [ 2328.632388][T23684] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2328.638950][T23684] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2328.824521][T23684] vhci_hcd vhci_hcd.0: Device attached [ 2328.852696][T23695] vhci_hcd: connection closed [ 2328.860398][ T6005] vhci_hcd: stop threads [ 2329.706180][ T5957] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 2329.731018][ T6005] vhci_hcd: release socket [ 2329.769632][ T6005] vhci_hcd: disconnect device [ 2330.551375][T13162] Bluetooth: hci5: command tx timeout [ 2330.703539][T23511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2330.883275][T23511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2331.563095][T19439] hsr_slave_0: left promiscuous mode [ 2331.706821][T19439] hsr_slave_1: left promiscuous mode [ 2331.762056][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2331.848932][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2332.621436][T13162] Bluetooth: hci5: command tx timeout [ 2334.335657][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2334.419447][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2335.441606][ T5957] vhci_hcd: vhci_device speed not set [ 2335.537049][T23723] netdevsim netdevsim9: Direct firmware load for lookup_extent_enter failed with error -2 [ 2335.540011][T23511] team0: Port device team_slave_0 added [ 2335.547347][T23723] netdevsim netdevsim9: Falling back to sysfs fallback for: lookup_extent_enter [ 2335.556158][T23511] team0: Port device team_slave_1 added [ 2336.813407][T23736] sctp: failed to load transform for md5: -2 [ 2337.037600][T23750] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4569'. [ 2337.531885][T23511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2337.574722][T23511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2337.655109][T23511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2337.710384][T23511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2337.722072][T23511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2337.748767][T23511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2337.841462][T21010] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2338.001362][T21010] usb 2-1: Using ep0 maxpacket: 8 [ 2338.031311][T21066] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2338.772408][T21066] usb 10-1: Using ep0 maxpacket: 32 [ 2339.238776][T23511] hsr_slave_0: entered promiscuous mode [ 2339.308961][T21010] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2339.345494][T23511] hsr_slave_1: entered promiscuous mode [ 2339.357052][T21066] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2339.376144][T21010] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2339.405344][T21066] usb 10-1: config 0 has no interface number 0 [ 2339.406405][T23511] debugfs: 'hsr0' already exists in 'hsr' [ 2339.419046][T21010] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2339.477432][T21066] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2339.487550][T23511] Cannot create hsr debugfs directory [ 2339.533278][T21010] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2339.565794][T21066] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2339.584770][T21010] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2339.593903][T21066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.602043][T21010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.610494][T21066] usb 10-1: Product: syz [ 2339.618510][T21066] usb 10-1: Manufacturer: syz [ 2339.699453][T21066] usb 10-1: SerialNumber: syz [ 2340.057414][T21066] usb 10-1: config 0 descriptor?? [ 2340.092838][T21010] usb 2-1: usb_control_msg returned -32 [ 2340.098443][T21010] usbtmc 2-1:16.0: can't read capabilities [ 2340.111363][T21066] smsc75xx v1.0.0 [ 2340.115200][T21066] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2340.248034][T21066] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 2340.271283][T21010] usb 2-1: USB disconnect, device number 25 [ 2340.918823][T23760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2340.926125][T23760] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2341.114054][T23760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2341.148809][T23760] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2341.217852][T23760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2341.229281][T23760] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2341.288578][T23760] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2341.308483][T23760] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2341.338371][T19441] bridge_slave_1: left allmulticast mode [ 2341.560768][T19441] bridge_slave_1: left promiscuous mode [ 2341.578042][T23760] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2341.585200][T23760] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2341.586583][T19441] bridge0: port 2(bridge_slave_1) entered disabled state [ 2342.226452][T19441] bridge_slave_0: left allmulticast mode [ 2342.233086][T19441] bridge_slave_0: left promiscuous mode [ 2342.252083][T19441] bridge0: port 1(bridge_slave_0) entered disabled state [ 2342.609604][T19441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2342.641962][T19441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2342.665186][T19441] bond0 (unregistering): Released all slaves [ 2342.709534][T23661] chnl_net:caif_netlink_parms(): no params data found [ 2343.983021][T22416] usb 10-1: USB disconnect, device number 40 [ 2344.877913][T23798] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4583'. [ 2345.540654][T23805] sctp: failed to load transform for md5: -2 [ 2348.027081][T19441] hsr_slave_0: left promiscuous mode [ 2348.111751][T19441] hsr_slave_1: left promiscuous mode [ 2348.129690][T19441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2348.202396][T19441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2348.490456][T22416] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2349.331307][T22416] usb 2-1: Using ep0 maxpacket: 8 [ 2349.338361][T22416] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2349.360884][T22416] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2349.421188][T22416] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2349.441802][T22416] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2349.471418][T22416] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2349.498713][T22416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.880590][T22416] usb 2-1: usb_control_msg returned -32 [ 2350.037409][T22416] usbtmc 2-1:16.0: can't read capabilities [ 2350.089898][T22416] usb 2-1: USB disconnect, device number 26 [ 2350.189133][T23841] 9pnet_fd: Insufficient options for proto=fd [ 2350.260051][T19441] team0 (unregistering): Port device team_slave_1 removed [ 2350.414256][T19441] team0 (unregistering): Port device team_slave_0 removed [ 2350.434253][T23843] loop5: detected capacity change from 0 to 16 [ 2350.470791][T23843] erofs (device loop5): mounted with root inode @ nid 36. [ 2350.549227][T23843] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2350.590582][T23843] erofs (device loop5): failed to decompress -29 in[58, 4038] out[1851] [ 2350.599403][T23843] erofs (device loop5): read error -117 @ 43 of nid 36 [ 2350.651644][T23843] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2350.670287][T23843] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2350.681003][T23843] erofs (device loop5): readahead error at folio 42 @ nid 36 [ 2350.720931][T23843] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2350.739857][T23843] erofs (device loop5): readahead error at folio 41 @ nid 36 [ 2350.753826][T23843] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2350.763786][T23843] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 2350.777761][T23843] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 2350.792444][T23843] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 2350.805736][T23843] erofs (device loop5): readahead error at folio 36 @ nid 36 [ 2350.819552][T23843] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 2350.830404][T23843] erofs (device loop5): readahead error at folio 31 @ nid 36 [ 2350.839755][T23843] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 2350.850074][T23843] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 2350.860899][T23843] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 2350.870396][T23843] syz.5.4593: attempt to access beyond end of device [ 2350.870396][T23843] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 2350.887120][T23843] syz.5.4593: attempt to access beyond end of device [ 2350.887120][T23843] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 2350.918948][T23843] syz.5.4593: attempt to access beyond end of device [ 2350.918948][T23843] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 2350.939472][T23843] erofs (device loop5): failed to decompress -29 in[58, 4038] out[2639] [ 2350.950342][T23843] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2350.967674][T23843] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 2350.979179][T23843] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2350.999860][T23843] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 2351.016054][T23843] erofs (device loop5): readahead error at folio 45 @ nid 36 [ 2351.027194][T23843] syz.5.4593: attempt to access beyond end of device [ 2351.027194][T23843] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 2351.044816][T23843] erofs (device loop5): failed to decompress -29 in[58, 4038] out[3537] [ 2351.126073][T23661] bridge0: port 1(bridge_slave_0) entered blocking state [ 2351.159706][T23661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2351.189444][T23661] bridge_slave_0: entered allmulticast mode [ 2351.205480][T23661] bridge_slave_0: entered promiscuous mode [ 2351.360091][T23661] bridge0: port 2(bridge_slave_1) entered blocking state [ 2351.373137][T23661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2351.380316][T23661] bridge_slave_1: entered allmulticast mode [ 2351.407198][T23661] bridge_slave_1: entered promiscuous mode [ 2351.854515][T23850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2351.861052][T23850] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2352.520914][T23862] sctp: failed to load transform for md5: -2 [ 2352.733267][T23850] vhci_hcd vhci_hcd.0: Device attached [ 2352.817063][T23859] vhci_hcd: connection closed [ 2352.822366][ T6005] vhci_hcd: stop threads [ 2352.882978][ T6005] vhci_hcd: release socket [ 2352.921459][ T6005] vhci_hcd: disconnect device [ 2352.935989][T12386] vhci_hcd: vhci_device speed not set [ 2353.538743][T23661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2353.583806][T23661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2354.197514][T23879] loop9: detected capacity change from 0 to 32768 [ 2354.226898][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2354.277295][T23879] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2354.363243][T23661] team0: Port device team_slave_0 added [ 2354.386673][T23879] loop2: detected capacity change from 0 to 7 [ 2354.403517][T23879] Dev loop2: unable to read RDB block 7 [ 2354.409405][T23879] loop2: AHDI p1 p2 p3 [ 2354.413637][T23879] loop2: partition table partially beyond EOD, truncated [ 2354.420939][T23879] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2354.427889][T23879] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2354.478425][T23661] team0: Port device team_slave_1 added [ 2354.937241][T23885] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4604'. [ 2354.960182][T23889] loop1: detected capacity change from 0 to 16 [ 2355.038632][T23889] erofs (device loop1): mounted with root inode @ nid 36. [ 2356.101513][T14953] ocfs2: Unmounting device (7,9) on (node local) [ 2356.170472][T23889] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2356.200999][T23661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2356.220966][T23661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2356.227237][T23896] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2356.247368][T23889] erofs (device loop1): failed to decompress -29 in[58, 4038] out[1851] [ 2356.255450][T23896] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2356.255490][T23896] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 2356.281662][T23889] erofs (device loop1): read error -117 @ 43 of nid 36 [ 2356.281669][T23896] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2356.281704][T23896] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 2356.304221][T23896] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2356.313666][T23896] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 2356.321051][T23896] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 2356.328452][T23896] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 2356.336120][T23896] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 2356.343884][T23896] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 2356.352300][T23896] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 2356.361881][T23896] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 2356.369268][T23896] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 2356.376899][T23896] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 2356.384843][T23896] syz.1.4606: attempt to access beyond end of device [ 2356.384843][T23896] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 2356.398702][T23896] syz.1.4606: attempt to access beyond end of device [ 2356.398702][T23896] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 2356.414239][T23896] syz.1.4606: attempt to access beyond end of device [ 2356.414239][T23896] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 2356.429101][T23896] erofs (device loop1): failed to decompress -29 in[58, 4038] out[2639] [ 2356.437643][T23896] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2356.446016][T23896] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 2356.453424][T23896] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2356.461769][T23896] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 2356.469219][T23896] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 2356.476895][T23896] syz.1.4606: attempt to access beyond end of device [ 2356.476895][T23896] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 2356.490534][T23896] erofs (device loop1): failed to decompress -29 in[58, 4038] out[3537] [ 2356.552410][T23661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2356.573914][T23661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2356.580967][T23661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2356.645418][T23898] 9pnet_fd: Insufficient options for proto=fd [ 2356.671830][T23661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2356.751567][T21010] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2356.931624][T21010] usb 6-1: Using ep0 maxpacket: 8 [ 2356.950945][T21010] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2357.010874][T21010] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2357.060531][T21010] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2357.091233][T21010] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2357.133337][T21010] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2357.157406][T21010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.633036][T23661] hsr_slave_0: entered promiscuous mode [ 2358.661687][T23661] hsr_slave_1: entered promiscuous mode [ 2358.709082][T23661] debugfs: 'hsr0' already exists in 'hsr' [ 2358.728969][T23661] Cannot create hsr debugfs directory [ 2358.811612][T21010] usb 6-1: usb_control_msg returned -32 [ 2358.844489][T21010] usbtmc 6-1:16.0: can't read capabilities [ 2358.906587][T21010] usb 6-1: USB disconnect, device number 46 [ 2360.322169][T23930] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2360.328733][T23930] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2360.434117][T23930] vhci_hcd vhci_hcd.0: Device attached [ 2360.756690][T23936] loop9: detected capacity change from 0 to 32768 [ 2360.805612][T23932] vhci_hcd: connection closed [ 2360.821676][T19439] vhci_hcd: stop threads [ 2360.861290][T19439] vhci_hcd: release socket [ 2360.863609][T23936] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2360.872216][T19439] vhci_hcd: disconnect device [ 2360.891365][T12386] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 2360.909865][T12386] usb 43-1: enqueue for inactive port 0 [ 2360.930710][T23936] loop2: detected capacity change from 0 to 7 [ 2360.951652][T23936] Dev loop2: unable to read RDB block 7 [ 2360.957218][T23936] loop2: AHDI p1 p2 p3 [ 2360.961756][T23936] loop2: partition table partially beyond EOD, truncated [ 2360.968965][T23936] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2360.975771][T23936] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2360.983988][T12386] vhci_hcd: vhci_device speed not set [ 2361.562307][T22502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2361.665228][T22502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2361.673504][T22502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2361.692885][T22502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2361.701454][T22502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2361.722973][T13162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2361.736320][T13162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2361.746662][T13162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2361.766358][T13162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2361.795236][T13162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2362.157037][T14953] ocfs2: Unmounting device (7,9) on (node local) [ 2362.910132][T23954] loop1: detected capacity change from 0 to 16 [ 2362.960075][T23954] erofs (device loop1): mounted with root inode @ nid 36. [ 2363.096279][T23661] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2363.111655][T23954] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2363.151282][T23954] erofs (device loop1): failed to decompress -29 in[58, 4038] out[1851] [ 2363.183275][T23954] erofs (device loop1): read error -117 @ 43 of nid 36 [ 2363.337266][T23956] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2363.346149][T23956] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2363.354554][T23956] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 2363.361975][T23956] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2363.370205][T23956] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 2363.378244][T23956] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2363.386506][T23956] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 2363.393929][T23956] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 2363.401348][T23956] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 2363.409008][T23956] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 2363.416806][T23956] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 2363.425179][T23956] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 2363.432835][T23956] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 2363.440214][T23956] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 2363.447861][T23956] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 2363.455724][T23956] syz.1.4621: attempt to access beyond end of device [ 2363.455724][T23956] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 2363.469664][T23956] syz.1.4621: attempt to access beyond end of device [ 2363.469664][T23956] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 2363.484885][T23956] syz.1.4621: attempt to access beyond end of device [ 2363.484885][T23956] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 2363.499703][T23956] erofs (device loop1): failed to decompress -29 in[58, 4038] out[2639] [ 2363.508314][T23956] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2363.516665][T23956] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 2363.524059][T23956] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2363.532415][T23956] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 2363.539862][T23956] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 2363.547423][T23956] syz.1.4621: attempt to access beyond end of device [ 2363.547423][T23956] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 2363.561047][T23956] erofs (device loop1): failed to decompress -29 in[58, 4038] out[3537] [ 2363.573705][T23661] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2363.832079][T13162] Bluetooth: hci1: command tx timeout [ 2364.291393][T23661] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2364.411556][T23661] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2365.921432][T13162] Bluetooth: hci1: command tx timeout [ 2367.317505][ T5950] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2367.843317][T19439] bridge_slave_1: left allmulticast mode [ 2367.858759][T19439] bridge_slave_1: left promiscuous mode [ 2367.981922][T22502] Bluetooth: hci1: command tx timeout [ 2367.991196][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 2368.005895][ T5950] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2368.019036][ T5950] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2368.101256][ T5950] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2368.111716][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2368.129868][ T5950] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2368.332678][T19439] bridge_slave_0: left allmulticast mode [ 2368.337675][ T5950] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2368.378053][T19439] bridge_slave_0: left promiscuous mode [ 2368.423582][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.431499][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2368.706087][T24001] loop9: detected capacity change from 0 to 2048 [ 2368.719128][T24001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2369.673046][ T5950] usb 2-1: usb_control_msg returned -32 [ 2369.700099][ T5950] usbtmc 2-1:16.0: can't read capabilities [ 2369.898091][ T5950] usb 2-1: USB disconnect, device number 27 [ 2370.071604][T22502] Bluetooth: hci1: command tx timeout [ 2370.192833][T24008] loop9: detected capacity change from 0 to 16 [ 2370.230235][T24008] erofs (device loop9): mounted with root inode @ nid 36. [ 2370.300987][T24008] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2370.341336][T24008] erofs (device loop9): failed to decompress -29 in[58, 4038] out[1851] [ 2370.349757][T24008] erofs (device loop9): read error -117 @ 43 of nid 36 [ 2370.388116][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2370.419938][T24008] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2370.429301][T24008] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2370.437696][T24008] erofs (device loop9): readahead error at folio 42 @ nid 36 [ 2370.446126][T24008] erofs (device loop9): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2370.454410][T24008] erofs (device loop9): readahead error at folio 41 @ nid 36 [ 2370.461827][T24008] erofs (device loop9): bogus lookback distance 774 @ lcn 40 of nid 36 [ 2370.470152][T24008] erofs (device loop9): readahead error at folio 40 @ nid 36 [ 2370.477577][T24008] erofs (device loop9): readahead error at folio 39 @ nid 36 [ 2370.484985][T24008] erofs (device loop9): readahead error at folio 38 @ nid 36 [ 2370.492640][T24008] erofs (device loop9): readahead error at folio 36 @ nid 36 [ 2370.500279][T24008] erofs (device loop9): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 2370.508652][T24008] erofs (device loop9): readahead error at folio 31 @ nid 36 [ 2370.516279][T24008] erofs (device loop9): readahead error at folio 25 @ nid 36 [ 2370.523694][T24008] erofs (device loop9): readahead error at folio 24 @ nid 36 [ 2370.531317][T24008] erofs (device loop9): readahead error at folio 19 @ nid 36 [ 2370.539261][T24008] syz.9.4633: attempt to access beyond end of device [ 2370.539261][T24008] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 2370.554712][T24008] syz.9.4633: attempt to access beyond end of device [ 2370.554712][T24008] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 2370.569138][T24008] syz.9.4633: attempt to access beyond end of device [ 2370.569138][T24008] loop9: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 2370.583936][T24008] erofs (device loop9): failed to decompress -29 in[58, 4038] out[2639] [ 2370.592484][T24008] erofs (device loop9): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2370.600809][T24008] erofs (device loop9): readahead error at folio 47 @ nid 36 [ 2370.608213][T24008] erofs (device loop9): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 2370.616576][T24008] erofs (device loop9): readahead error at folio 46 @ nid 36 [ 2370.624057][T24008] erofs (device loop9): readahead error at folio 45 @ nid 36 [ 2370.631650][T24008] syz.9.4633: attempt to access beyond end of device [ 2370.631650][T24008] loop9: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 2370.645266][T24008] erofs (device loop9): failed to decompress -29 in[58, 4038] out[3537] [ 2370.729557][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2370.754182][T19439] bond0 (unregistering): Released all slaves [ 2372.636608][T23661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2372.722939][T24028] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 2372.729504][T24028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2372.810286][T24028] vhci_hcd vhci_hcd.0: Device attached [ 2373.067086][T23944] chnl_net:caif_netlink_parms(): no params data found [ 2373.074180][T24030] vhci_hcd: connection closed [ 2373.090882][T14640] vhci_hcd: stop threads [ 2373.308999][T14545] usb 51-1: new high-speed USB device number 3 using vhci_hcd [ 2374.011258][T14640] vhci_hcd: release socket [ 2374.030050][T14640] vhci_hcd: disconnect device [ 2374.054155][T23661] 8021q: adding VLAN 0 to HW filter on device team0 [ 2375.072391][T24047] overlayfs: missing 'lowerdir' [ 2376.171413][T24053] loop1: detected capacity change from 0 to 2048 [ 2376.198419][T24053] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2377.433112][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.440328][T14747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2378.166902][T24058] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 2378.180272][T24058] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 2378.470890][T14545] vhci_hcd: vhci_device speed not set [ 2379.037647][T19439] hsr_slave_0: left promiscuous mode [ 2379.103629][T19439] hsr_slave_1: left promiscuous mode [ 2379.531857][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2379.656206][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2383.424827][T24084] sctp: failed to load transform for md5: -2 [ 2383.953651][T13162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2383.965685][T13162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2383.974771][T13162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2383.988551][T13162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2384.011523][T13162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2384.726537][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2384.830841][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2385.999193][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.006411][ T8280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2386.293557][T23944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2386.321773][T23944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2386.328980][T23944] bridge_slave_0: entered allmulticast mode [ 2386.385593][T24105] loop2: detected capacity change from 0 to 2048 [ 2386.396101][T23944] bridge_slave_0: entered promiscuous mode [ 2386.414840][T24105] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2386.690974][T23944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.701383][T22502] Bluetooth: hci6: command tx timeout [ 2386.711107][T23944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2386.719374][T23944] bridge_slave_1: entered allmulticast mode [ 2387.535749][T23944] bridge_slave_1: entered promiscuous mode [ 2388.788061][T22502] Bluetooth: hci6: command tx timeout [ 2390.458909][T24120] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 2390.469041][T24120] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 2390.983232][T13162] Bluetooth: hci6: command tx timeout [ 2391.430590][T23944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2391.962867][T24136] sctp: failed to load transform for md5: -2 [ 2392.623187][T24145] loop9: detected capacity change from 0 to 2048 [ 2392.695183][T24145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2393.028905][T13162] Bluetooth: hci6: command tx timeout [ 2393.600736][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4668'. [ 2394.005510][T23944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2394.996410][T24157] loop9: detected capacity change from 0 to 2048 [ 2395.037235][T24157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2395.185325][T23944] team0: Port device team_slave_0 added [ 2396.170300][T23944] team0: Port device team_slave_1 added [ 2398.012254][T24169] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 2398.022354][T24169] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 2398.043723][T23944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2398.050666][T23944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2398.098950][T23944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2398.135880][T23944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2398.143309][T23944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2398.286689][T23944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2401.160983][T23944] hsr_slave_0: entered promiscuous mode [ 2401.168189][T21010] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2401.187793][T23944] hsr_slave_1: entered promiscuous mode [ 2401.202108][T23944] debugfs: 'hsr0' already exists in 'hsr' [ 2401.217579][T23944] Cannot create hsr debugfs directory [ 2401.331373][T21010] usb 3-1: Using ep0 maxpacket: 8 [ 2401.373986][T21010] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2401.574899][T21010] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2401.830810][T21010] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2401.959041][T21010] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2402.081202][T21010] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2402.091525][T21010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.311943][T21010] usb 3-1: GET_CAPABILITIES returned 0 [ 2402.317457][T21010] usbtmc 3-1:16.0: can't read capabilities [ 2402.635294][T21010] usb 3-1: USB disconnect, device number 31 [ 2404.376877][T24213] loop2: detected capacity change from 0 to 2048 [ 2404.424865][T24213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2405.453708][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2405.453737][ T30] audit: type=1326 audit(1758373468.626:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c58ec29 code=0x7ffc0000 [ 2405.762670][ T30] audit: type=1326 audit(1758373468.626:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c58ec29 code=0x7ffc0000 [ 2405.894195][ T30] audit: type=1326 audit(1758373468.626:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe75c58ec29 code=0x7ffc0000 [ 2406.282541][ T30] audit: type=1326 audit(1758373469.136:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c58ec29 code=0x7ffc0000 [ 2406.548844][ T30] audit: type=1326 audit(1758373469.136:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.4685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c58ec29 code=0x7ffc0000 [ 2407.195012][T24091] chnl_net:caif_netlink_parms(): no params data found [ 2407.307135][T19439] bridge_slave_1: left allmulticast mode [ 2407.328527][T19439] bridge_slave_1: left promiscuous mode [ 2407.369889][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2407.639154][T19439] bridge_slave_0: left allmulticast mode [ 2407.644924][T19439] bridge_slave_0: left promiscuous mode [ 2407.651669][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2408.630288][T24234] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2408.638497][T24234] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2408.645856][T24234] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2408.653201][T24234] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2408.660514][T24234] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2408.667881][T24234] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2411.239712][T21010] kernel write not supported for file bpf-prog (pid: 21010 comm: kworker/0:3) [ 2411.380758][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2412.460799][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2412.630947][T19439] bond0 (unregistering): Released all slaves [ 2415.436771][T24289] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4706'. [ 2416.122662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2416.222355][T24091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.241363][T24091] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.271193][T24091] bridge_slave_0: entered allmulticast mode [ 2416.313778][T24091] bridge_slave_0: entered promiscuous mode [ 2416.408709][T19439] hsr_slave_0: left promiscuous mode [ 2416.441566][T19439] hsr_slave_1: left promiscuous mode [ 2416.457850][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2416.497807][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2419.578404][T22502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2419.588648][T22502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2419.597984][T22502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2419.611518][T22502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2419.620263][T22502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2421.464641][T24327] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4717'. [ 2421.474129][T24327] openvswitch: netlink: Flow key attr not present in new flow. [ 2421.874316][T13162] Bluetooth: hci5: command tx timeout [ 2422.088998][T24331] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 2422.842181][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2422.971001][T24335] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4720'. [ 2423.810474][T24339] loop5: detected capacity change from 0 to 2048 [ 2423.829192][T24339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2424.045164][T13162] Bluetooth: hci5: command tx timeout [ 2424.112801][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2426.062863][T13162] Bluetooth: hci5: command tx timeout [ 2427.392167][T24356] loop1: detected capacity change from 0 to 2048 [ 2427.425725][T24356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2428.153625][T13162] Bluetooth: hci5: command tx timeout [ 2428.518402][T24091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.537740][T24091] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.557441][T24091] bridge_slave_1: entered allmulticast mode [ 2428.578388][T24091] bridge_slave_1: entered promiscuous mode [ 2428.603685][T24331] team0: Device hsr_slave_0 failed to register rx_handler [ 2428.727163][T24091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2429.154254][T24091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2431.396006][T24091] team0: Port device team_slave_0 added [ 2431.460019][T24091] team0: Port device team_slave_1 added [ 2431.511048][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bcf000: rx timeout, send abort [ 2431.520820][T24384] loop1: detected capacity change from 0 to 2048 [ 2431.521309][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057bcf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2431.541656][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057bcec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2431.585455][T24384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2431.823943][T24091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2431.895307][T24091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2432.626973][T24091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2432.704279][T24091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2432.725100][T24091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2432.792310][T24091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2432.829190][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bcd800: rx timeout, send abort [ 2432.837792][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057bcd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2432.852287][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b91b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2434.651450][T24401] netlink: 'syz.2.4739': attribute type 10 has an invalid length. [ 2435.401310][T24091] hsr_slave_0: entered promiscuous mode [ 2435.462473][T24091] hsr_slave_1: entered promiscuous mode [ 2435.469845][T24091] debugfs: 'hsr0' already exists in 'hsr' [ 2435.564263][T24091] Cannot create hsr debugfs directory [ 2435.616573][T24401] team0: Device hsr_slave_0 failed to register rx_handler [ 2437.770929][T24427] loop2: detected capacity change from 0 to 2048 [ 2437.844281][T24427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2440.850058][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b85f000: rx timeout, send abort [ 2440.858563][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b85f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2440.873035][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023fad400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2441.287034][T24312] chnl_net:caif_netlink_parms(): no params data found [ 2441.425317][T19439] bridge_slave_1: left allmulticast mode [ 2441.433155][T19439] bridge_slave_1: left promiscuous mode [ 2441.438881][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.573428][T19439] bridge_slave_0: left allmulticast mode [ 2441.579132][T19439] bridge_slave_0: left promiscuous mode [ 2441.673717][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.153540][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023fae000: rx timeout, send abort [ 2442.163957][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023fae000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2442.178412][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023fac000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2442.236477][T19439] bridge_slave_1: left allmulticast mode [ 2442.461259][T19439] bridge_slave_1: left promiscuous mode [ 2442.477269][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.487695][T22502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2442.500607][T22502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2442.512032][T22502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2442.525232][T22502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2442.604228][T22502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2442.814407][T19439] bridge_slave_0: left allmulticast mode [ 2442.838841][T19439] bridge_slave_0: left promiscuous mode [ 2443.508315][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.407258][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2444.574283][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2444.637593][T19439] bond0 (unregistering): Released all slaves [ 2444.701264][T13162] Bluetooth: hci1: command tx timeout [ 2447.072096][T13162] Bluetooth: hci1: command tx timeout [ 2447.184789][T24475] fuse: Bad value for 'fd' [ 2449.030168][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2449.065981][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2449.101384][T13162] Bluetooth: hci1: command tx timeout [ 2449.111110][T19439] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2449.140535][T19439] bond0 (unregistering): Released all slaves [ 2451.292423][T13162] Bluetooth: hci1: command tx timeout [ 2452.982363][T24312] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.989507][T24312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.071463][T24312] bridge_slave_0: entered allmulticast mode [ 2453.099876][T24312] bridge_slave_0: entered promiscuous mode [ 2453.149576][T24312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.189103][T24312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.238598][T24312] bridge_slave_1: entered allmulticast mode [ 2453.284524][T24312] bridge_slave_1: entered promiscuous mode [ 2453.401667][T24523] 9pnet_fd: Insufficient options for proto=fd [ 2454.285928][T24312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2454.492217][T24312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2456.792340][T24312] team0: Port device team_slave_0 added [ 2457.139855][T24544] fuse: Bad value for 'fd' [ 2459.422550][T19439] hsr_slave_0: left promiscuous mode [ 2459.501250][T19439] hsr_slave_1: left promiscuous mode [ 2459.522058][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2459.577252][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2459.991459][T19439] hsr_slave_0: left promiscuous mode [ 2460.013643][T19439] hsr_slave_1: left promiscuous mode [ 2460.175486][T19439] veth1_macvtap: left promiscuous mode [ 2460.185104][T19439] veth0_macvtap: left promiscuous mode [ 2460.193097][T19439] veth1_vlan: left promiscuous mode [ 2460.199416][T19439] veth0_vlan: left promiscuous mode [ 2460.310657][T24548] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4785'. [ 2460.481088][T24553] netlink: 'syz.1.4787': attribute type 10 has an invalid length. [ 2461.059904][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2461.116582][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2462.632143][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2462.706674][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2465.218026][T24312] team0: Port device team_slave_1 added [ 2465.241393][T24568] 9pnet_fd: Insufficient options for proto=fd [ 2465.263177][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4785'. [ 2465.338036][T24553] team0: Device hsr_slave_0 failed to register rx_handler [ 2466.009549][T24312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2466.054247][T24312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2466.189922][T24312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2466.234883][T24576] loop2: detected capacity change from 0 to 2048 [ 2466.253530][T24576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2466.285482][T24312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2466.295023][T24312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2466.330095][T24312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2469.156638][T24312] hsr_slave_0: entered promiscuous mode [ 2469.860070][T24312] hsr_slave_1: entered promiscuous mode [ 2469.899819][T24312] debugfs: 'hsr0' already exists in 'hsr' [ 2469.999702][T24312] Cannot create hsr debugfs directory [ 2471.781084][T24612] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4804'. [ 2472.637732][T24613] fuse: Bad value for 'fd' [ 2477.108514][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2478.427195][T24628] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4808'. [ 2478.436805][T24628] 0XD: renamed from macvtap0 (while UP) [ 2478.481404][T24628] 0XD: entered allmulticast mode [ 2478.492597][T24628] veth0_macvtap: entered allmulticast mode [ 2478.513295][T24628] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 2478.542103][T24444] chnl_net:caif_netlink_parms(): no params data found [ 2478.619757][T24628] hub 1-0:1.0: USB hub found [ 2478.636942][T24628] hub 1-0:1.0: 1 port detected [ 2481.081559][T24645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2481.093823][T24645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2481.120799][T24645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2481.138278][T24645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2481.174936][T24645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2481.704655][T24651] loop5: detected capacity change from 0 to 32768 [ 2481.772640][T24651] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2481.839281][T24651] loop2: detected capacity change from 0 to 7 [ 2481.853593][T24651] Dev loop2: unable to read RDB block 7 [ 2481.859511][T24651] loop2: AHDI p1 p2 p3 [ 2481.863853][T24651] loop2: partition table partially beyond EOD, truncated [ 2481.871036][T24651] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2481.877842][T24651] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2483.343087][T24645] Bluetooth: hci6: command tx timeout [ 2484.042450][T24444] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.153687][T19400] ocfs2: Unmounting device (7,5) on (node local) [ 2484.256918][T24444] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.271881][T24444] bridge_slave_0: entered allmulticast mode [ 2484.286328][T24444] bridge_slave_0: entered promiscuous mode [ 2484.540648][T24444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2484.576404][T24444] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.611482][T24444] bridge_slave_1: entered allmulticast mode [ 2484.621069][T24444] bridge_slave_1: entered promiscuous mode [ 2484.944020][T24669] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4817'. [ 2485.421396][T24645] Bluetooth: hci6: command tx timeout [ 2487.213821][T24444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2487.265261][T24444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2487.501716][T24645] Bluetooth: hci6: command tx timeout [ 2488.774433][T19439] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.153758][T24444] team0: Port device team_slave_0 added [ 2489.224331][T19439] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.294186][T24444] team0: Port device team_slave_1 added [ 2489.488343][T19439] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.611274][T24645] Bluetooth: hci6: command tx timeout [ 2491.001803][T24444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2491.092092][T24444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2491.228463][T24444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2491.271467][T24702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2491.278013][T24702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2491.727594][T24702] vhci_hcd vhci_hcd.0: Device attached [ 2491.793927][T13162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2491.806966][T13162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2491.817563][T13162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2491.856351][T13162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2491.872098][T13162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2491.941657][T24704] vhci_hcd: connection closed [ 2491.944679][T14747] vhci_hcd: stop threads [ 2491.981373][T12386] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 2492.031404][T14747] vhci_hcd: release socket [ 2492.056242][T14747] vhci_hcd: disconnect device [ 2492.075668][T19439] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.125656][T24715] loop9: detected capacity change from 0 to 2048 [ 2492.144724][T24715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2492.155821][T24444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2492.171352][T21066] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2492.404497][T24444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2493.185488][T24444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2493.246893][T21066] usb 2-1: Using ep0 maxpacket: 16 [ 2493.267980][T21066] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 2493.289310][T21066] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 2493.307566][T21066] usb 2-1: config 166 has no interface number 0 [ 2493.327826][T21066] usb 2-1: config 166 has no interface number 1 [ 2493.355221][T21066] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2493.398875][T21066] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2493.696340][T24444] hsr_slave_0: entered promiscuous mode [ 2493.701202][T21066] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2493.712486][T24444] hsr_slave_1: entered promiscuous mode [ 2493.753517][T21066] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2493.903555][T21066] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2493.922063][T24645] Bluetooth: hci3: command tx timeout [ 2494.012268][T21066] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2494.079753][T21066] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2494.130506][T21066] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2494.152784][T21066] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2494.168680][T21066] usb 2-1: config 166 interface 177 has no altsetting 0 [ 2494.182551][T21066] usb 2-1: config 166 interface 34 has no altsetting 0 [ 2494.309245][T21066] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2494.321703][T21066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.329803][T21066] usb 2-1: Product: syz [ 2494.334507][T21066] usb 2-1: Manufacturer: syz [ 2494.339108][T21066] usb 2-1: SerialNumber: syz [ 2494.404474][T24444] debugfs: 'hsr0' already exists in 'hsr' [ 2494.410325][T24444] Cannot create hsr debugfs directory [ 2494.655068][T21066] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 2495.050706][T21066] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 2495.279721][T21066] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 2495.433258][T21066] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 2495.444988][T21066] usb 2-1: No valid video chain found. [ 2495.515535][T24739] fuse: Invalid rootmode [ 2495.991554][T24645] Bluetooth: hci3: command tx timeout [ 2496.775546][T21066] usb 2-1: USB disconnect, device number 28 [ 2497.424500][T12386] vhci_hcd: vhci_device speed not set [ 2498.071246][T24645] Bluetooth: hci3: command tx timeout [ 2499.763892][T19439] bridge_slave_1: left allmulticast mode [ 2499.788168][T19439] bridge_slave_1: left promiscuous mode [ 2499.837226][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.936464][T19439] bridge_slave_0: left allmulticast mode [ 2499.956448][T19439] bridge_slave_0: left promiscuous mode [ 2499.970095][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.157415][T24645] Bluetooth: hci3: command tx timeout [ 2501.715647][T19439] bridge_slave_1: left allmulticast mode [ 2501.760261][T19439] bridge_slave_1: left promiscuous mode [ 2501.817029][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2501.901951][T19439] bridge_slave_0: left allmulticast mode [ 2501.949255][T19439] bridge_slave_0: left promiscuous mode [ 2501.987186][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2504.058899][T24757] loop1: detected capacity change from 0 to 2048 [ 2504.072152][T24757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2504.374780][T13162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2504.396600][T13162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2504.406073][T13162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2504.431809][T13162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2504.518256][T24761] udf: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 2504.668810][T13162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2505.618250][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2505.629445][T12386] kernel write not supported for file /uinput (pid: 12386 comm: kworker/0:2) [ 2505.646621][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2505.661073][T19439] bond0 (unregistering): Released all slaves [ 2506.707698][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2506.729246][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2506.742192][T19439] bond0 (unregistering): Released all slaves [ 2506.782896][T13162] Bluetooth: hci5: command tx timeout [ 2506.844146][T24774] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4843'. [ 2507.628782][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2507.654502][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2507.673397][T19439] bond0 (unregistering): Released all slaves [ 2508.911257][T13162] Bluetooth: hci5: command tx timeout [ 2509.170291][T21066] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2509.266971][T24643] chnl_net:caif_netlink_parms(): no params data found [ 2510.392391][T21066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2510.476801][T21066] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2510.533774][T21066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.582584][T21066] usb 10-1: Product: syz [ 2510.586848][T21066] usb 10-1: Manufacturer: syz [ 2510.624657][T21066] usb 10-1: SerialNumber: syz [ 2510.662532][T21066] usb 10-1: config 0 descriptor?? [ 2510.943570][T13162] Bluetooth: hci5: command tx timeout [ 2511.979329][T24800] loop2: detected capacity change from 0 to 2048 [ 2512.028151][T24800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2512.483608][T24803] udf: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 2513.021254][T13162] Bluetooth: hci5: command tx timeout [ 2513.586995][T24710] chnl_net:caif_netlink_parms(): no params data found [ 2515.343622][T21066] usb 10-1: USB disconnect, device number 41 [ 2515.511048][T24631] udevd[24631]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2515.626878][T24643] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.659104][T24643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2515.666465][T24643] bridge_slave_0: entered allmulticast mode [ 2515.676546][T24643] bridge_slave_0: entered promiscuous mode [ 2516.146118][T24643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2516.164532][T24643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2516.213008][T24830] fuse: Invalid rootmode [ 2517.194512][T24643] bridge_slave_1: entered allmulticast mode [ 2518.379184][T24643] bridge_slave_1: entered promiscuous mode [ 2521.941661][T24643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2523.495427][T24643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2525.386117][T24846] bridge0: port 2(bridge_slave_1) entered disabled state [ 2525.393457][T24846] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.154009][T24846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2526.176756][T24846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2526.888276][T24848] : entered promiscuous mode [ 2527.153076][T19439] hsr_slave_0: left promiscuous mode [ 2527.189887][T19439] hsr_slave_1: left promiscuous mode [ 2527.212075][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2527.367940][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2527.403973][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2527.472957][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2527.934640][T19439] hsr_slave_0: left promiscuous mode [ 2527.971203][T19439] hsr_slave_1: left promiscuous mode [ 2527.977266][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2528.028302][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2528.118348][T19439] hsr_slave_0: left promiscuous mode [ 2528.192248][T19439] hsr_slave_1: left promiscuous mode [ 2528.198098][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2528.270944][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2528.349373][T24886] 9pnet_fd: Insufficient options for proto=fd [ 2528.385237][T19439] veth1_macvtap: left promiscuous mode [ 2528.411049][T19439] veth0_macvtap: left promiscuous mode [ 2528.447880][T19439] veth1_vlan: left promiscuous mode [ 2528.485561][T19439] veth0_vlan: left promiscuous mode [ 2528.871292][T18739] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2529.043049][T18739] usb 2-1: Using ep0 maxpacket: 32 [ 2529.088016][T18739] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2529.111331][T18739] usb 2-1: config 0 has no interface number 0 [ 2529.143099][T18739] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.156344][T18739] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.172622][T18739] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2529.202879][T18739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.442948][T18739] usb 2-1: config 0 descriptor?? [ 2530.929123][T18739] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 2530.981633][T18739] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 2531.111322][T18739] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 2531.313776][T18739] ft260 0003:0403:6030.000E: failed to retrieve system status [ 2531.405787][T18739] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -71 [ 2531.489164][T18739] usb 2-1: USB disconnect, device number 29 [ 2531.718363][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2531.854702][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2533.513744][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2533.551974][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2534.325633][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2534.843367][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2535.024024][T24645] Bluetooth: hci1: command 0x1003 tx timeout [ 2535.032795][T13162] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2535.116339][T24925] 9pnet_fd: Insufficient options for proto=fd [ 2535.310805][T23747] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.320131][T23747] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.335376][T24710] bridge0: port 1(bridge_slave_0) entered blocking state [ 2535.381455][T24710] bridge0: port 1(bridge_slave_0) entered disabled state [ 2535.388646][T24710] bridge_slave_0: entered allmulticast mode [ 2535.414113][T24710] bridge_slave_0: entered promiscuous mode [ 2535.423216][T24710] bridge0: port 2(bridge_slave_1) entered blocking state [ 2535.430444][T24710] bridge0: port 2(bridge_slave_1) entered disabled state [ 2535.437824][T24710] bridge_slave_1: entered allmulticast mode [ 2535.446712][T24710] bridge_slave_1: entered promiscuous mode [ 2535.459109][T24643] team0: Port device team_slave_0 added [ 2535.475418][T24892] netlink: 75 bytes leftover after parsing attributes in process `syz.2.4872'. [ 2535.486413][T23747] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.743615][T24643] team0: Port device team_slave_1 added [ 2535.855389][T23747] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2535.875499][T24710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2535.909448][T24710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2536.053200][T24643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2536.060333][T24643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2536.087237][T24643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2536.654445][T24710] team0: Port device team_slave_0 added [ 2536.677685][T24643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2536.694671][T24643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2536.821306][T24643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2536.890800][T24871] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2536.995544][T24710] team0: Port device team_slave_1 added [ 2537.192356][T24948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2537.198914][T24948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2537.231218][T24871] usb 2-1: Using ep0 maxpacket: 32 [ 2537.246754][T24871] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2537.247174][T24710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2537.272413][T24948] vhci_hcd vhci_hcd.0: Device attached [ 2537.279063][T24871] usb 2-1: config 0 has no interface number 0 [ 2537.290171][T24710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2537.316718][T24871] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2537.339742][T24710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2537.370550][T24871] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2537.412542][T24871] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2537.423114][T24643] hsr_slave_0: entered promiscuous mode [ 2537.429775][T24643] hsr_slave_1: entered promiscuous mode [ 2537.451437][T24871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2537.466472][T24643] debugfs: 'hsr0' already exists in 'hsr' [ 2537.483869][T24643] Cannot create hsr debugfs directory [ 2537.496319][T24871] usb 2-1: config 0 descriptor?? [ 2537.521426][T22416] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 2537.596473][T24710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2537.635702][T24710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2537.789756][T24710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2537.817417][T24950] vhci_hcd: connection reset by peer [ 2537.840600][ T37] vhci_hcd: stop threads [ 2537.851429][ T37] vhci_hcd: release socket [ 2537.861333][ T37] vhci_hcd: disconnect device [ 2537.943765][T24871] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 2537.963462][T24871] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 2538.129927][T24871] ft260 0003:0403:6030.000F: chip code: 6424 8183 [ 2538.202289][T24710] hsr_slave_0: entered promiscuous mode [ 2538.219170][T24710] hsr_slave_1: entered promiscuous mode [ 2538.229001][T24710] debugfs: 'hsr0' already exists in 'hsr' [ 2538.248930][T24710] Cannot create hsr debugfs directory [ 2538.335324][T24871] ft260 0003:0403:6030.000F: failed to retrieve system status [ 2538.351441][T24871] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -71 [ 2538.393771][T24871] usb 2-1: USB disconnect, device number 30 [ 2538.400017][T24758] chnl_net:caif_netlink_parms(): no params data found [ 2538.548852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2539.478009][T19439] IPVS: stop unused estimator thread 0... [ 2539.576319][T24758] bridge0: port 1(bridge_slave_0) entered blocking state [ 2539.592199][T24758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2539.599379][T24758] bridge_slave_0: entered allmulticast mode [ 2539.621930][T24758] bridge_slave_0: entered promiscuous mode [ 2539.687534][T24758] bridge0: port 2(bridge_slave_1) entered blocking state [ 2539.697244][T24758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2539.712197][T24758] bridge_slave_1: entered allmulticast mode [ 2539.748547][T24758] bridge_slave_1: entered promiscuous mode [ 2539.831893][T24969] 9pnet_fd: Insufficient options for proto=fd [ 2540.215673][T19439] bridge_slave_1: left allmulticast mode [ 2540.247391][T19439] bridge_slave_1: left promiscuous mode [ 2541.497688][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.005177][T19439] bridge_slave_0: left allmulticast mode [ 2542.137668][T19439] bridge_slave_0: left promiscuous mode [ 2542.150845][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2542.364243][T24645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2542.375708][T24645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2542.385203][T24645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2542.393986][T24645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2542.407809][T24645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2543.318014][T22416] vhci_hcd: vhci_device speed not set [ 2543.539965][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2543.555780][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2543.615461][T19439] bond0 (unregistering): Released all slaves [ 2544.109225][T24758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2544.409236][T24758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2544.461296][T24645] Bluetooth: hci1: command tx timeout [ 2545.983190][T24758] team0: Port device team_slave_0 added [ 2545.994906][T25015] 9pnet_fd: Insufficient options for proto=fd [ 2546.018572][T19439] hsr_slave_0: left promiscuous mode [ 2546.037874][T19439] hsr_slave_1: left promiscuous mode [ 2546.051583][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2546.328714][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2546.735437][T24645] Bluetooth: hci1: command tx timeout [ 2547.329455][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2547.395639][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2548.621863][T24758] team0: Port device team_slave_1 added [ 2548.712445][T25024] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 2548.723255][T25024] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 2548.803381][T24758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2548.821408][T24645] Bluetooth: hci1: command tx timeout [ 2548.837380][T24758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2548.904751][T24758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2549.472343][T13162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2549.491440][T13162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2549.507733][T13162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2549.531419][T13162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2549.627998][T13162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2550.086929][T24758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2550.138242][T24758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2550.220548][T24758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2550.707750][T25055] netlink: 'syz.1.4919': attribute type 10 has an invalid length. [ 2550.861368][T13162] Bluetooth: hci1: command tx timeout [ 2551.206016][T25056] sctp: failed to load transform for md5: -2 [ 2551.232031][T25053] fuse: Unknown parameter 'use00000000000000000000' [ 2551.657920][T25055] team0: Device hsr_slave_0 failed to register rx_handler [ 2551.831305][T24645] Bluetooth: hci6: command tx timeout [ 2552.456014][T24758] hsr_slave_0: entered promiscuous mode [ 2552.526803][T24758] hsr_slave_1: entered promiscuous mode [ 2552.558215][T24758] debugfs: 'hsr0' already exists in 'hsr' [ 2552.570392][T24758] Cannot create hsr debugfs directory [ 2552.927886][T14747] Bluetooth: hci7: Frame reassembly failed (-84) [ 2553.502298][T19439] bridge_slave_1: left allmulticast mode [ 2553.508016][T19439] bridge_slave_1: left promiscuous mode [ 2553.524815][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.665872][T19439] bridge_slave_0: left allmulticast mode [ 2553.721405][T19439] bridge_slave_0: left promiscuous mode [ 2553.747627][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.901238][T13162] Bluetooth: hci6: command tx timeout [ 2554.941257][T24645] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2554.993736][T25089] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4925'. [ 2555.943833][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2555.981234][T13162] Bluetooth: hci6: command tx timeout [ 2555.987277][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2556.102226][T19439] bond0 (unregistering): Released all slaves [ 2556.224171][T24988] chnl_net:caif_netlink_parms(): no params data found [ 2558.644187][T13162] Bluetooth: hci6: command tx timeout [ 2560.498761][T25107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2561.821023][T25117] fuse: Unknown parameter 'use00000000000000000000' [ 2564.483980][T25119] loop2: detected capacity change from 0 to 32768 [ 2564.553966][T25119] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2565.303250][T18804] ocfs2: Unmounting device (7,2) on (node local) [ 2565.382785][T19439] hsr_slave_0: left promiscuous mode [ 2565.465808][T19439] hsr_slave_1: left promiscuous mode [ 2565.498581][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2565.639505][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2568.691639][T24645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2568.701847][T24645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2568.709929][T24645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2568.719002][T24645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2568.727632][T24645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2568.842825][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2569.271932][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2570.791285][T13162] Bluetooth: hci3: command tx timeout [ 2573.173676][T13162] Bluetooth: hci3: command tx timeout [ 2573.741353][T25166] netlink: 'syz.1.4944': attribute type 10 has an invalid length. [ 2574.458683][T25167] sctp: failed to load transform for md5: -2 [ 2574.871436][T25177] fuse: Unknown parameter 'use00000000000000000000' [ 2575.351461][T13162] Bluetooth: hci3: command tx timeout [ 2577.425511][T13162] Bluetooth: hci3: command tx timeout [ 2577.535031][T25166] team0: Device hsr_slave_0 failed to register rx_handler [ 2577.844248][T24988] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.852418][T24988] bridge0: port 1(bridge_slave_0) entered disabled state [ 2577.864440][T24988] bridge_slave_0: entered allmulticast mode [ 2577.873093][T24988] bridge_slave_0: entered promiscuous mode [ 2577.997395][T24988] bridge0: port 2(bridge_slave_1) entered blocking state [ 2578.039280][T24988] bridge0: port 2(bridge_slave_1) entered disabled state [ 2578.063306][T24988] bridge_slave_1: entered allmulticast mode [ 2578.093778][T24988] bridge_slave_1: entered promiscuous mode [ 2578.473286][T24988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2578.665690][T24988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2579.224481][T24988] team0: Port device team_slave_0 added [ 2579.554660][T24988] team0: Port device team_slave_1 added [ 2580.458877][T24988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2580.490023][T24988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2580.601474][T24988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2580.641401][T24988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2580.653233][T24988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2580.741363][T24988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2582.328534][T24988] hsr_slave_0: entered promiscuous mode [ 2582.349492][T24988] hsr_slave_1: entered promiscuous mode [ 2582.477415][T24988] debugfs: 'hsr0' already exists in 'hsr' [ 2582.562398][T24988] Cannot create hsr debugfs directory [ 2583.021675][T25041] chnl_net:caif_netlink_parms(): no params data found [ 2583.098892][T19439] bridge_slave_1: left allmulticast mode [ 2583.160111][T19439] bridge_slave_1: left promiscuous mode [ 2583.246057][T25230] fuse: Unknown parameter 'user_i00000000000000000000' [ 2585.516808][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.674963][T19439] bridge_slave_0: left allmulticast mode [ 2585.680627][T19439] bridge_slave_0: left promiscuous mode [ 2585.702214][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2585.735992][T19439] bridge_slave_1: left allmulticast mode [ 2585.761265][T19439] bridge_slave_1: left promiscuous mode [ 2585.767017][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.799378][T19439] bridge_slave_0: left allmulticast mode [ 2585.817374][T19439] bridge_slave_0: left promiscuous mode [ 2585.831995][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.131101][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2586.173344][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2586.220002][T19439] bond0 (unregistering): Released all slaves [ 2586.558897][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2586.589318][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2586.600488][T19439] bond0 (unregistering): Released all slaves [ 2587.320741][T25239] netlink: 'syz.1.4959': attribute type 10 has an invalid length. [ 2587.893170][T25240] sctp: failed to load transform for md5: -2 [ 2588.691048][T25239] team0: Device hsr_slave_0 failed to register rx_handler [ 2590.623721][T25041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2590.651358][T25041] bridge0: port 1(bridge_slave_0) entered disabled state [ 2590.811514][T25041] bridge_slave_0: entered allmulticast mode [ 2590.839496][T25041] bridge_slave_0: entered promiscuous mode [ 2590.900805][T25041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2590.933704][T25041] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.973594][T25041] bridge_slave_1: entered allmulticast mode [ 2591.002280][T25041] bridge_slave_1: entered promiscuous mode [ 2591.599421][T19439] hsr_slave_0: left promiscuous mode [ 2591.624544][T19439] hsr_slave_1: left promiscuous mode [ 2591.638953][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2591.682407][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2591.748032][T19439] hsr_slave_0: left promiscuous mode [ 2591.988459][T19439] hsr_slave_1: left promiscuous mode [ 2592.001604][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2592.862114][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2594.081853][T25284] fuse: Unknown parameter 'user_i00000000000000000000' [ 2596.887570][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2597.394120][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2599.987431][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2601.411255][T24868] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2601.442871][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2601.628421][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2601.691211][T24868] usb 10-1: Using ep0 maxpacket: 8 [ 2601.691368][T24645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2601.710060][T24868] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 2601.713882][T24645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2601.731295][T24645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2601.739653][T24645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2601.749183][T24645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2601.782793][T24868] usb 10-1: config 179 has no interface number 0 [ 2601.789356][T24868] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2601.827033][T24868] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2601.846511][T24868] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2601.859046][T24868] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2601.916744][T24868] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2601.981379][T24868] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2602.006747][T24868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.069067][T25306] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2602.434587][T24868] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input55 [ 2602.758231][ T5950] usb 10-1: USB disconnect, device number 42 [ 2602.758269][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2602.773417][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2603.037209][T25041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2603.144104][T25041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2603.331372][T22416] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2603.433693][T25041] team0: Port device team_slave_0 added [ 2603.445057][T25145] chnl_net:caif_netlink_parms(): no params data found [ 2603.489537][T25041] team0: Port device team_slave_1 added [ 2603.506136][T22416] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 2603.543632][T22416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.616610][T22416] usb 2-1: config 0 descriptor?? [ 2603.822481][T13162] Bluetooth: hci5: command tx timeout [ 2603.831536][T25041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2603.838497][T25041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2603.898971][T22416] kaweth 2-1:0.0: Firmware present in device. [ 2603.909843][T25041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2604.075134][T22416] kaweth 2-1:0.0: Statistics collection: 0 [ 2604.109023][T22416] kaweth 2-1:0.0: Multicast filter limit: 0 [ 2604.131513][T22416] kaweth 2-1:0.0: MTU: 0 [ 2604.148179][T22416] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 2604.205368][T25041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2604.260504][T25041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2604.481642][T25329] random: crng reseeded on system resumption [ 2604.491193][T25041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2604.979374][T22416] kaweth 2-1:0.0: kaweth interface created at eth1 [ 2605.071726][T22416] usb 2-1: USB disconnect, device number 31 [ 2605.081461][T25328] Restarting kernel threads ... [ 2605.109131][T25328] Done restarting kernel threads. [ 2605.721643][T14545] IPVS: starting estimator thread 0... [ 2605.902045][T13162] Bluetooth: hci5: command tx timeout [ 2606.446891][ T30] audit: type=1326 audit(1758373669.686:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.2.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e498ec29 code=0x7ffc0000 [ 2606.540027][ T30] audit: type=1326 audit(1758373669.686:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.2.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e498ec29 code=0x7ffc0000 [ 2606.563091][T25041] hsr_slave_0: entered promiscuous mode [ 2606.588809][ T30] audit: type=1326 audit(1758373669.686:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25334 comm="syz.2.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f26e498ec29 code=0x7ffc0000 [ 2606.622405][T25041] hsr_slave_1: entered promiscuous mode [ 2606.628759][T25041] debugfs: 'hsr0' already exists in 'hsr' [ 2606.641276][T25338] IPVS: using max 21 ests per chain, 50400 per kthread [ 2606.679423][T25041] Cannot create hsr debugfs directory [ 2606.702996][T14545] kernel write not supported for file /vcs (pid: 14545 comm: kworker/1:2) [ 2606.850179][T25145] bridge0: port 1(bridge_slave_0) entered blocking state [ 2606.877374][T25145] bridge0: port 1(bridge_slave_0) entered disabled state [ 2606.905740][T25145] bridge_slave_0: entered allmulticast mode [ 2606.924355][T25145] bridge_slave_0: entered promiscuous mode [ 2607.012834][T25145] bridge0: port 2(bridge_slave_1) entered blocking state [ 2607.019967][T25145] bridge0: port 2(bridge_slave_1) entered disabled state [ 2607.165996][T25145] bridge_slave_1: entered allmulticast mode [ 2607.186886][T25145] bridge_slave_1: entered promiscuous mode [ 2608.061274][T13162] Bluetooth: hci5: command tx timeout [ 2608.399124][T25345] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2608.671257][T25345] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2608.954665][T25345] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2609.028094][T25345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2609.057266][T25345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2609.066506][T25145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2609.101793][T13162] Bluetooth: hci6: command 0x0c1a tx timeout [ 2609.178857][T25345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2609.204141][T25145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2609.230762][T25345] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2609.256009][T25345] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2609.294996][T25345] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2609.541282][T25145] team0: Port device team_slave_0 added [ 2609.583017][T19439] bridge_slave_1: left allmulticast mode [ 2609.588700][T19439] bridge_slave_1: left promiscuous mode [ 2609.640751][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2610.183053][T19439] bridge_slave_0: left allmulticast mode [ 2610.214585][T19439] bridge_slave_0: left promiscuous mode [ 2610.220739][T24645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2610.232666][T24645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2610.240563][T24645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2610.253725][T24645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2610.268177][T24645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2610.276868][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2610.653495][T25372] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2610.831845][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2610.890743][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2610.923294][T19439] bond0 (unregistering): Released all slaves [ 2610.986776][T25145] team0: Port device team_slave_1 added [ 2611.049934][T25383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4997'. [ 2611.101604][T24645] Bluetooth: hci3: command 0x0c1a tx timeout [ 2611.261342][T24645] Bluetooth: hci5: command 0x0c1a tx timeout [ 2611.339558][T21066] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2611.661366][T21066] usb 10-1: Using ep0 maxpacket: 32 [ 2611.741646][T21066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2611.771225][T21066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2611.831318][T21066] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2611.870870][T21066] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.931031][T21066] usb 10-1: config 0 descriptor?? [ 2611.946315][T25145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2611.978415][T25145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.072775][T25145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2612.192031][T25145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2612.393103][T21066] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 2612.410303][T21066] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 2612.421425][T24645] Bluetooth: hci1: command tx timeout [ 2612.465030][T25145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.491767][T25145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2613.243530][T24645] Bluetooth: hci3: command 0x0c1a tx timeout [ 2613.250024][T21066] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 2613.261867][T21066] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 2613.282535][T21066] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 2613.301954][T21066] ft260 0003:0403:6030.0010: failed to retrieve status: -32 [ 2613.341229][T24645] Bluetooth: hci5: command 0x0c1a tx timeout [ 2613.476825][T19439] hsr_slave_0: left promiscuous mode [ 2613.501062][T19439] hsr_slave_1: left promiscuous mode [ 2613.517355][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2613.557922][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2613.604976][T21066] usb 10-1: reset high-speed USB device number 43 using dummy_hcd [ 2614.727984][T24645] Bluetooth: hci1: command tx timeout [ 2614.965132][T24871] usb 10-1: USB disconnect, device number 43 [ 2615.263065][T24645] Bluetooth: hci3: command 0x0c1a tx timeout [ 2615.421693][T24645] Bluetooth: hci5: command 0x0c1a tx timeout [ 2615.728424][T25409] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2615.746409][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2615.930169][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2616.031231][T14545] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2616.211226][T14545] usb 2-1: Using ep0 maxpacket: 32 [ 2616.235168][T14545] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 2616.281519][T14545] usb 2-1: config 0 has no interface number 0 [ 2616.304913][T14545] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2616.336845][T14545] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2616.608464][T14545] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2616.621435][T25145] hsr_slave_0: entered promiscuous mode [ 2616.628139][T25145] hsr_slave_1: entered promiscuous mode [ 2616.633759][T14545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.641816][T14545] usb 2-1: Product: syz [ 2616.645985][T14545] usb 2-1: Manufacturer: syz [ 2616.650591][T14545] usb 2-1: SerialNumber: syz [ 2616.656067][T25145] debugfs: 'hsr0' already exists in 'hsr' [ 2616.661974][T25145] Cannot create hsr debugfs directory [ 2616.791583][T24645] Bluetooth: hci1: command tx timeout [ 2616.963125][T14545] usb 2-1: config 0 descriptor?? [ 2617.495903][T25416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2617.541105][T25416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2617.600495][T14545] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 2617.763087][T14545] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 2617.792923][T25312] chnl_net:caif_netlink_parms(): no params data found [ 2617.858310][T21066] usb 2-1: USB disconnect, device number 32 [ 2618.304908][T25312] bridge0: port 1(bridge_slave_0) entered blocking state [ 2618.316826][T25312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2618.324776][T25312] bridge_slave_0: entered allmulticast mode [ 2618.337010][T25312] bridge_slave_0: entered promiscuous mode [ 2618.399535][T25312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2618.429226][T25312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2618.443591][T25312] bridge_slave_1: entered allmulticast mode [ 2618.456045][T25312] bridge_slave_1: entered promiscuous mode [ 2618.861476][T24645] Bluetooth: hci1: command tx timeout [ 2620.069540][T25312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2620.910203][T25312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2620.946869][T19439] bridge_slave_1: left allmulticast mode [ 2620.978457][T19439] bridge_slave_1: left promiscuous mode [ 2621.001604][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2621.030602][T19439] bridge_slave_0: left allmulticast mode [ 2621.043743][T19439] bridge_slave_0: left promiscuous mode [ 2621.056381][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.332013][T25461] netlink: 'syz.9.5019': attribute type 32 has an invalid length. [ 2623.539219][T19439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2623.551462][T19439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2623.563806][T19439] bond0 (unregistering): Released all slaves [ 2623.608144][T25367] chnl_net:caif_netlink_parms(): no params data found [ 2623.699864][T25312] team0: Port device team_slave_0 added [ 2623.720283][T25312] team0: Port device team_slave_1 added [ 2624.726503][T25312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2624.746004][T25312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2624.811116][T25312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2625.096572][ T5950] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2625.296637][T25486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5026'. [ 2625.825421][T25312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2625.850029][T25312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2625.986471][T25312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2626.032338][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 2626.056157][ T5950] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2626.071223][ T5950] usb 2-1: config 179 has no interface number 0 [ 2626.083779][ T5950] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2626.111218][ T5950] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2626.149818][ T5950] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2626.169825][T19439] hsr_slave_0: left promiscuous mode [ 2626.175276][ T5950] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2626.175330][ T5950] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2626.175402][ T5950] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2626.175444][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.217516][T19439] hsr_slave_1: left promiscuous mode [ 2626.231959][T19439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2626.250360][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2626.283293][T25476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2626.631663][T22416] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input56 [ 2626.792377][ T5950] usb 2-1: USB disconnect, device number 33 [ 2626.792455][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2626.806686][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2626.900337][T19439] team0 (unregistering): Port device team_slave_1 removed [ 2627.015818][T25497] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5031'. [ 2627.102857][T19439] team0 (unregistering): Port device team_slave_0 removed [ 2628.286113][T13162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2628.297448][T13162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2628.307391][T13162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2628.320346][T13162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2628.328328][T13162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2628.438931][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5037'. [ 2629.828588][T25312] hsr_slave_0: entered promiscuous mode [ 2629.853244][T25312] hsr_slave_1: entered promiscuous mode [ 2629.859621][T25312] debugfs: 'hsr0' already exists in 'hsr' [ 2629.867842][T25312] Cannot create hsr debugfs directory [ 2630.173662][T25367] bridge0: port 1(bridge_slave_0) entered blocking state [ 2630.234036][T25367] bridge0: port 1(bridge_slave_0) entered disabled state [ 2630.306156][T25367] bridge_slave_0: entered allmulticast mode [ 2630.340659][T25367] bridge_slave_0: entered promiscuous mode [ 2630.466611][T24645] Bluetooth: hci6: command tx timeout [ 2630.569837][T25367] bridge0: port 2(bridge_slave_1) entered blocking state [ 2630.599177][T25367] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.612068][T25367] bridge_slave_1: entered allmulticast mode [ 2630.620462][T25367] bridge_slave_1: entered promiscuous mode [ 2631.699879][T25367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2631.777112][T25367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2633.096583][T24645] Bluetooth: hci6: command tx timeout [ 2633.307921][T25367] team0: Port device team_slave_0 added [ 2633.574241][T25367] team0: Port device team_slave_1 added [ 2635.811666][T24645] Bluetooth: hci6: command tx timeout [ 2635.819568][T25367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2635.829832][T25367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2635.856313][T25367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2635.868608][ T37] bridge_slave_1: left allmulticast mode [ 2635.911452][ T37] bridge_slave_1: left promiscuous mode [ 2635.917232][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 2635.969910][ T37] bridge_slave_0: left allmulticast mode [ 2635.993672][ T37] bridge_slave_0: left promiscuous mode [ 2636.021029][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 2636.171274][T24871] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2636.430339][T24871] usb 2-1: Using ep0 maxpacket: 32 [ 2636.468132][T24871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2637.292522][T24871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2637.329875][T24871] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2637.339621][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2637.348612][T24871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2637.382182][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2637.408851][T24871] usb 2-1: config 0 descriptor?? [ 2637.428530][T25574] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5052'. [ 2637.453812][ T37] bond0 (unregistering): Released all slaves [ 2637.672467][T25367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2637.695916][T25367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2637.739004][T25367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2637.821396][T24645] Bluetooth: hci6: command tx timeout [ 2637.943876][T24871] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 2637.965573][T24871] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 2638.127060][T24871] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 2638.337115][T24871] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 2638.562328][T24871] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 2638.582604][T24871] ft260 0003:0403:6030.0011: failed to retrieve status: -32 [ 2638.731043][T25312] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2639.059672][T24871] usb 2-1: USB disconnect, device number 34 [ 2639.295496][T25367] hsr_slave_0: entered promiscuous mode [ 2639.317399][T25367] hsr_slave_1: entered promiscuous mode [ 2639.329759][T25367] debugfs: 'hsr0' already exists in 'hsr' [ 2639.335839][T25367] Cannot create hsr debugfs directory [ 2639.376419][T25312] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2639.394954][T25505] chnl_net:caif_netlink_parms(): no params data found [ 2639.420610][ T37] hsr_slave_0: left promiscuous mode [ 2639.437765][ T37] hsr_slave_1: left promiscuous mode [ 2639.449253][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2639.467504][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2640.484693][ T37] team0 (unregistering): Port device team_slave_1 removed [ 2641.512500][ T37] team0 (unregistering): Port device team_slave_0 removed [ 2643.386808][T25312] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2644.604074][T25312] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2646.188595][T25505] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.358051][T25505] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.453111][T25505] bridge_slave_0: entered allmulticast mode [ 2646.618051][T25505] bridge_slave_0: entered promiscuous mode [ 2646.702054][T25505] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.737712][T25505] bridge0: port 2(bridge_slave_1) entered disabled state [ 2646.761748][T25505] bridge_slave_1: entered allmulticast mode [ 2646.781096][T25505] bridge_slave_1: entered promiscuous mode [ 2646.989145][T25505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2647.010906][T25505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2647.712671][T25505] team0: Port device team_slave_0 added [ 2647.748328][T25505] team0: Port device team_slave_1 added [ 2648.134993][T25505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2648.351255][T25505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2648.539166][T25505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2648.568029][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 2648.595245][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 2648.864803][T22416] libceph: connect (1)[b::]:6789 error -101 [ 2648.885638][T22416] libceph: mon0 (1)[b::]:6789 connect error [ 2648.890830][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 2648.897667][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 2648.940048][T25675] ceph: No mds server is up or the cluster is laggy [ 2648.974284][T25505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2648.991348][T25676] ceph: No mds server is up or the cluster is laggy [ 2649.008754][T25505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2649.096215][T25505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2649.387969][T25505] hsr_slave_0: entered promiscuous mode [ 2649.502402][T25505] hsr_slave_1: entered promiscuous mode [ 2649.508769][T25505] debugfs: 'hsr0' already exists in 'hsr' [ 2649.618637][T25505] Cannot create hsr debugfs directory [ 2649.660437][T25367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2649.849053][T25367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2649.913211][T25367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2650.087956][T25367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2650.680946][T25700] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5082'. [ 2651.307436][T25312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2651.464978][T25312] 8021q: adding VLAN 0 to HW filter on device team0 [ 2651.562546][T14640] bridge0: port 1(bridge_slave_0) entered blocking state [ 2651.569671][T14640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2651.585645][T14640] bridge0: port 2(bridge_slave_1) entered blocking state [ 2651.592858][T14640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2651.831548][T25505] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2651.874596][T25712] netlink: 'syz.9.5086': attribute type 1 has an invalid length. [ 2651.895632][T25505] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2654.420489][T25715] gretap1: entered promiscuous mode [ 2654.515333][T25505] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2654.555187][T25505] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2654.656606][T25717] macvlan2: entered promiscuous mode [ 2654.672013][T25717] macvlan2: entered allmulticast mode [ 2654.684925][T25717] bond1: entered promiscuous mode [ 2654.711607][T25717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2654.749643][T25717] bond1: left promiscuous mode [ 2654.857708][T25312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2654.989143][T25367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2655.155422][T25367] 8021q: adding VLAN 0 to HW filter on device team0 [ 2655.182980][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.190170][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2655.254443][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.261597][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2655.927913][T25505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2656.062599][T25505] 8021q: adding VLAN 0 to HW filter on device team0 [ 2656.144636][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.151835][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2656.270722][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 2656.277905][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2656.706679][T25312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2657.525655][T25367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2658.262350][T25367] veth0_vlan: entered promiscuous mode [ 2658.299982][T25367] veth1_vlan: entered promiscuous mode [ 2658.522611][T25367] veth0_macvtap: entered promiscuous mode [ 2658.568514][T25367] veth1_macvtap: entered promiscuous mode [ 2658.691317][T25367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2658.754349][T25367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2658.839731][T19441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2658.879833][T19441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2658.961406][T19441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2658.994082][T19441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2659.077062][T25505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2659.298542][T25792] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 2659.305106][T25792] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2659.345170][T25792] vhci_hcd vhci_hcd.0: Device attached [ 2659.406995][ T6763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2659.408684][T25312] veth0_vlan: entered promiscuous mode [ 2659.481436][ T6763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2659.565901][T25312] veth1_vlan: entered promiscuous mode [ 2659.581600][ T5871] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 2659.625721][T19439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2659.667029][T19439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2659.853174][T25312] veth0_macvtap: entered promiscuous mode [ 2659.894170][T25312] veth1_macvtap: entered promiscuous mode [ 2660.163395][T25793] vhci_hcd: connection reset by peer [ 2660.197984][T25312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2660.205761][T19441] vhci_hcd: stop threads [ 2660.209994][T19441] vhci_hcd: release socket [ 2660.328545][T19441] vhci_hcd: disconnect device [ 2660.476604][T25312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2660.504835][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2660.561318][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2660.606393][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2660.645128][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2661.431321][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2661.451963][T25505] veth0_vlan: entered promiscuous mode [ 2661.908281][T25505] veth1_vlan: entered promiscuous mode [ 2662.134866][T25505] veth0_macvtap: entered promiscuous mode [ 2662.305209][T25505] veth1_macvtap: entered promiscuous mode [ 2662.521966][T25833] fuse: Unknown parameter '0x000000000000000a' [ 2662.734989][T25835] netlink: 'syz.1.5111': attribute type 10 has an invalid length. [ 2663.678331][T25835] team0: Device hsr_slave_0 failed to register rx_handler [ 2664.630808][T25505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2664.670502][T25505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2664.702594][ T5871] vhci_hcd: vhci_device speed not set [ 2665.753352][T13162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2665.767357][T13162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2665.782075][T13162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2665.793851][T13162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2665.803376][T13162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2665.907797][ T6789] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2666.064258][ T6763] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2666.100337][ T6763] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2668.052270][T13162] Bluetooth: hci3: command tx timeout [ 2668.255943][ T6763] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2668.317333][ T6763] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2668.416505][ T6789] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2668.441276][T25875] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 2668.447781][T25875] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2668.488422][T25875] vhci_hcd vhci_hcd.0: Device attached [ 2668.496409][T25876] vhci_hcd: connection closed [ 2668.554145][ T6763] vhci_hcd: stop threads [ 2668.671258][ T6763] vhci_hcd: release socket [ 2668.714102][ T6763] vhci_hcd: disconnect device [ 2668.721270][T18739] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 2668.986262][ T6789] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.620941][ T6789] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.773799][ T6763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2669.859747][ T6763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2670.082056][T24645] Bluetooth: hci3: command tx timeout [ 2670.110088][T14640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2670.194656][T14640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2670.207395][T25893] netlink: 'syz.9.5127': attribute type 3 has an invalid length. [ 2671.183947][T25893] netlink: 830 bytes leftover after parsing attributes in process `syz.9.5127'. [ 2672.851223][T24645] Bluetooth: hci3: command tx timeout [ 2672.857666][ T6789] bridge_slave_1: left allmulticast mode [ 2672.870072][ T6789] bridge_slave_1: left promiscuous mode [ 2672.877970][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2673.198163][ T6789] bridge_slave_0: left allmulticast mode [ 2673.230351][ T6789] bridge_slave_0: left promiscuous mode [ 2673.237679][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2674.121287][T18739] vhci_hcd: vhci_device speed not set [ 2674.862137][T24645] Bluetooth: hci3: command tx timeout [ 2674.941491][T12386] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2675.122830][T12386] usb 2-1: Using ep0 maxpacket: 8 [ 2675.136052][T12386] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2675.169890][T12386] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2675.190424][T12386] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2675.200492][T12386] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2675.216897][T12386] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2675.230412][T21066] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2675.260600][T12386] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2675.285770][T12386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.431390][T21066] usb 4-1: Using ep0 maxpacket: 32 [ 2675.444986][T21066] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2675.453541][T21066] usb 4-1: config 0 has no interface number 0 [ 2675.459866][T21066] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2675.471689][T21066] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2675.490721][T21066] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2675.531530][T21066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2675.558946][T12386] usb 2-1: usb_control_msg returned -32 [ 2675.565118][T21066] usb 4-1: Product: syz [ 2675.582146][T21066] usb 4-1: Manufacturer: syz [ 2675.586991][T12386] usbtmc 2-1:16.0: can't read capabilities [ 2675.595622][T21066] usb 4-1: SerialNumber: syz [ 2675.615190][T21066] usb 4-1: config 0 descriptor?? [ 2675.636271][ T6789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2675.652722][T25930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2675.688301][T25930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2675.700231][T21066] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 2675.713644][ T6789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2675.750884][ T6789] bond0 (unregistering): Released all slaves [ 2675.882524][T21066] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 2675.957057][T21066] usb 4-1: USB disconnect, device number 5 [ 2677.358515][T25947] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2677.398783][T25950] fuse: Unknown parameter '0x000000000000000a' [ 2680.186006][T24868] usb 2-1: USB disconnect, device number 35 [ 2682.143536][T25960] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2682.151702][T25960] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2682.158141][T25960] comedi comedi3: 8255: I/O port conflict (0x403,4) [ 2682.164900][T25960] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2682.171427][T25960] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 2682.178464][T25960] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2682.184928][T25960] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2682.191852][T25960] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2682.198684][T25960] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2682.205162][T25960] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2682.211652][T25960] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2682.218082][T25960] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 2682.224607][T25960] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2682.231067][T25960] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 2682.238843][T25960] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 2683.998016][ T6789] hsr_slave_0: left promiscuous mode [ 2684.085048][ T6789] hsr_slave_1: left promiscuous mode [ 2684.135778][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2684.174514][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2684.265445][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2684.476616][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2685.351390][ T6789] veth1_macvtap: left promiscuous mode [ 2685.361576][ T6789] veth0_macvtap: left promiscuous mode [ 2685.371386][ T6789] veth1_vlan: left promiscuous mode [ 2685.376675][ T6789] veth0_vlan: left promiscuous mode [ 2685.827596][T25999] fuse: Unknown parameter '0x000000000000000a' [ 2689.892471][T26017] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5159'. [ 2693.112518][T14545] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2693.281242][T14545] usb 9-1: device descriptor read/64, error -71 [ 2693.389078][ T6789] team0 (unregistering): Port device team_slave_1 removed [ 2693.543495][T14545] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2693.813189][ T6789] team0 (unregistering): Port device team_slave_0 removed [ 2693.831229][T14545] usb 9-1: device descriptor read/64, error -71 [ 2695.312351][T14545] usb usb9-port1: attempt power cycle [ 2695.701378][T14545] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2695.722010][T14545] usb 9-1: device descriptor read/8, error -71 [ 2696.034444][T14545] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2696.265717][T26061] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2696.301678][T14545] usb 9-1: device not accepting address 8, error -71 [ 2696.318224][T14545] usb usb9-port1: unable to enumerate USB device [ 2697.311376][T18739] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2697.481391][T18739] usb 2-1: Using ep0 maxpacket: 16 [ 2697.517860][T18739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2697.530255][T18739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2697.544300][T18739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2697.575490][T18739] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2697.592391][T18739] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2697.833940][T18739] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2697.851283][T18739] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2697.872282][T18739] usb 2-1: Manufacturer: syz [ 2697.902037][T18739] usb 2-1: config 0 descriptor?? [ 2698.801363][T18739] rc_core: IR keymap rc-hauppauge not found [ 2698.807301][T18739] Registered IR keymap rc-empty [ 2698.860249][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2698.901327][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2698.932949][T18739] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2698.989598][T18739] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57 [ 2699.121479][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.191510][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.229901][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.291387][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.365193][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.431805][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.594156][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.635063][T25862] chnl_net:caif_netlink_parms(): no params data found [ 2699.681331][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.721336][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.783247][T18739] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2699.875366][T18739] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2699.928336][T18739] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2700.033433][T18739] usb 2-1: USB disconnect, device number 36 [ 2700.915060][T26109] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5179'. [ 2700.945470][T25862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2700.983852][T25862] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.002317][T25862] bridge_slave_0: entered allmulticast mode [ 2701.013050][T25862] bridge_slave_0: entered promiscuous mode [ 2701.106595][T25862] bridge0: port 2(bridge_slave_1) entered blocking state [ 2701.212559][T26110] random: crng reseeded on system resumption [ 2701.401359][T25862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.492564][T25862] bridge_slave_1: entered allmulticast mode [ 2701.710887][T26117] netlink: 'syz.3.5181': attribute type 10 has an invalid length. [ 2702.235055][T26118] sctp: failed to load transform for md5: -2 [ 2702.265215][T25862] bridge_slave_1: entered promiscuous mode [ 2702.441864][T26117] team0: Device hsr_slave_0 failed to register rx_handler [ 2702.755909][T25862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2702.830502][T25862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2703.031260][T24868] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2703.062413][T25862] team0: Port device team_slave_0 added [ 2703.112888][T25862] team0: Port device team_slave_1 added [ 2703.231368][T24868] usb 4-1: device descriptor read/64, error -71 [ 2703.274768][T25862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2703.311309][T25862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2703.480479][T25862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2703.501744][T24868] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2703.564052][T25862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2703.571016][T25862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2703.671268][T24868] usb 4-1: device descriptor read/64, error -71 [ 2703.979879][T24868] usb usb4-port1: attempt power cycle [ 2706.010970][T25862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2706.131328][T24868] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2706.381587][T24868] usb 4-1: device not accepting address 8, error -71 [ 2706.650345][T25862] hsr_slave_0: entered promiscuous mode [ 2706.729221][T25862] hsr_slave_1: entered promiscuous mode [ 2706.822240][T25862] debugfs: 'hsr0' already exists in 'hsr' [ 2706.829438][T25862] Cannot create hsr debugfs directory [ 2708.114728][T24868] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2708.487370][T24868] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 2709.286935][T24868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.301689][T24868] usb 9-1: Product: syz [ 2709.305867][T24868] usb 9-1: Manufacturer: syz [ 2709.310467][T24868] usb 9-1: SerialNumber: syz [ 2709.318832][T24868] usb 9-1: config 0 descriptor?? [ 2709.330700][T24868] ttusb_dec_send_command: command bulk message failed: error -22 [ 2709.381427][T24868] ttusb-dec 9-1:0.0: probe with driver ttusb-dec failed with error -22 [ 2709.584725][T26142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2709.594616][T26142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2710.043539][T18739] usb 9-1: USB disconnect, device number 9 [ 2712.155853][T25862] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2712.305831][T25862] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2712.381121][T25862] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2712.451310][T25862] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2713.795111][T26214] fuse: Unknown parameter 'fd0x000000000000000a' [ 2716.969886][T25862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2717.132284][T25862] 8021q: adding VLAN 0 to HW filter on device team0 [ 2717.585850][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.593090][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.202116][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.209324][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.393079][T26234] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2 [ 2718.404779][T26234] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter [ 2720.784073][T26266] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2720.790640][T26266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2721.390802][T26266] vhci_hcd vhci_hcd.0: Device attached [ 2721.621394][T18739] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 2721.712972][T26272] vhci_hcd: connection reset by peer [ 2721.741138][ T36] vhci_hcd: stop threads [ 2721.787883][ T36] vhci_hcd: release socket [ 2721.828404][ T36] vhci_hcd: disconnect device [ 2722.133184][T25862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2723.361464][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2723.586908][T26281] : entered promiscuous mode [ 2726.529224][T26313] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 2726.539617][T26313] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 2726.781300][T18739] vhci_hcd: vhci_device speed not set [ 2726.999791][T13162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2727.013689][T13162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2727.021993][T13162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2727.030805][T13162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2727.038813][T13162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2729.078485][T26341] libceph: resolve '. [ 2729.078485][T26341] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 2729.078485][T26341] ' (ret=-3): failed [ 2729.153827][T13162] Bluetooth: hci3: command tx timeout [ 2729.398880][T24060] bridge_slave_1: left allmulticast mode [ 2729.443160][T24060] bridge_slave_1: left promiscuous mode [ 2729.448942][T24060] bridge0: port 2(bridge_slave_1) entered disabled state [ 2729.577367][T24060] bridge_slave_0: left allmulticast mode [ 2729.596544][T24060] bridge_slave_0: left promiscuous mode [ 2729.616063][T24060] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.359730][T26370] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2730.366282][T26370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2730.448725][T26370] vhci_hcd vhci_hcd.0: Device attached [ 2730.671325][T24868] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 2731.043067][T26372] vhci_hcd: connection reset by peer [ 2731.065293][T23747] vhci_hcd: stop threads [ 2731.069579][T23747] vhci_hcd: release socket [ 2731.121394][T23747] vhci_hcd: disconnect device [ 2731.182180][T13162] Bluetooth: hci3: command tx timeout [ 2731.651953][T24060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2731.734296][T24060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2731.788954][T24060] bond0 (unregistering): Released all slaves [ 2732.480150][T26317] chnl_net:caif_netlink_parms(): no params data found [ 2732.527365][T26389] tipc: Started in network mode [ 2732.545286][T26389] tipc: Node identity 86a7eda81d99, cluster identity 4711 [ 2732.578646][T26389] tipc: Enabled bearer , priority 0 [ 2732.628772][T26394] syzkaller0: entered promiscuous mode [ 2732.675673][T26394] syzkaller0: entered allmulticast mode [ 2733.263134][T13162] Bluetooth: hci3: command tx timeout [ 2733.668864][T26394] tipc: Resetting bearer [ 2733.697055][T21066] tipc: Node number set to 2604592552 [ 2734.061837][T26388] tipc: Resetting bearer [ 2734.130254][T26388] tipc: Disabling bearer [ 2734.393049][T24060] hsr_slave_0: left promiscuous mode [ 2734.423535][T24060] hsr_slave_1: left promiscuous mode [ 2734.439165][T24060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2734.696094][T24060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2735.191580][T13162] Bluetooth: hci1: command 0x0406 tx timeout [ 2735.341273][T13162] Bluetooth: hci3: command tx timeout [ 2735.840942][T24868] vhci_hcd: vhci_device speed not set [ 2737.991399][T14545] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2738.205008][T26441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2738.211570][T26441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2738.225119][T14545] usb 3-1: Using ep0 maxpacket: 32 [ 2738.240019][T14545] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 2738.271758][T14545] usb 3-1: config 0 has no interface number 0 [ 2738.283206][T26441] vhci_hcd vhci_hcd.0: Device attached [ 2738.302770][T14545] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2738.521281][T12386] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 2738.569051][T14545] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2738.800744][T14545] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2738.818942][T26443] vhci_hcd: connection closed [ 2739.042903][ T36] vhci_hcd: stop threads [ 2739.134748][T14545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.228668][ T36] vhci_hcd: release socket [ 2739.251818][T14545] usb 3-1: Product: syz [ 2739.351908][ T36] vhci_hcd: disconnect device [ 2739.376124][T14545] usb 3-1: Manufacturer: syz [ 2739.458680][T14545] usb 3-1: SerialNumber: syz [ 2739.636429][T12386] usb 35-1: enqueue for inactive port 0 [ 2741.031362][T12386] vhci_hcd: vhci_device speed not set [ 2741.133178][T14545] usb 3-1: config 0 descriptor?? [ 2741.276444][T14545] usb 3-1: can't set config #0, error -71 [ 2741.300919][T14545] usb 3-1: USB disconnect, device number 32 [ 2742.501073][T24060] team0 (unregistering): Port device team_slave_1 removed [ 2742.657348][T24060] team0 (unregistering): Port device team_slave_0 removed [ 2742.801988][T26468] Driver unsupported XDP return value 0 on prog (id 917) dev N/A, expect packet loss! [ 2745.072157][T26467] netdevsim netdevsim8: Direct firmware load for lookup_extent_enter failed with error -2 [ 2745.101481][T26467] netdevsim netdevsim8: Falling back to sysfs fallback for: lookup_extent_enter [ 2745.366648][T26317] bridge0: port 1(bridge_slave_0) entered blocking state [ 2745.409973][T26317] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.438142][T26317] bridge_slave_0: entered allmulticast mode [ 2745.473657][T26317] bridge_slave_0: entered promiscuous mode [ 2745.567565][T26317] bridge0: port 2(bridge_slave_1) entered blocking state [ 2745.636427][T26317] bridge0: port 2(bridge_slave_1) entered disabled state [ 2745.685964][T26317] bridge_slave_1: entered allmulticast mode [ 2745.733053][T26317] bridge_slave_1: entered promiscuous mode [ 2745.981357][T24868] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2746.813516][T24868] usb 4-1: Using ep0 maxpacket: 32 [ 2746.829520][T24868] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2746.888584][T24868] usb 4-1: config 0 has no interface number 0 [ 2746.921280][T24868] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2746.973941][T24868] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2747.042091][T24868] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2747.044252][T26317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2747.085243][T24868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2747.128191][T24868] usb 4-1: Product: syz [ 2747.130636][T26317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2747.141559][T24868] usb 4-1: Manufacturer: syz [ 2747.141592][T24868] usb 4-1: SerialNumber: syz [ 2747.190436][T24868] usb 4-1: config 0 descriptor?? [ 2747.261706][T25899] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2747.410180][T26495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2747.419051][T26495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2747.439867][T24868] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 2747.641611][T25899] usb 10-1: device descriptor read/64, error -71 [ 2747.981476][T25899] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2748.151285][T25899] usb 10-1: device descriptor read/64, error -71 [ 2748.318268][T26317] team0: Port device team_slave_0 added [ 2748.337467][T26317] team0: Port device team_slave_1 added [ 2748.461543][T25899] usb usb10-port1: attempt power cycle [ 2748.500709][T24868] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 2748.623346][T24868] usb 4-1: USB disconnect, device number 10 [ 2748.831258][T25899] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2748.842021][T26317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2748.913713][T26317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2748.970281][T25899] usb 10-1: device descriptor read/8, error -71 [ 2749.042048][T26317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2749.411333][T26317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2749.444525][T26317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2749.470407][ C1] vkms_vblank_simulate: vblank timer overrun [ 2749.494187][T25899] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2749.576933][T26527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5288'. [ 2749.615688][T26317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2749.638338][T25899] usb 10-1: device descriptor read/8, error -71 [ 2749.771766][T25899] usb usb10-port1: unable to enumerate USB device [ 2750.235810][T26317] hsr_slave_0: entered promiscuous mode [ 2750.269504][T26317] hsr_slave_1: entered promiscuous mode [ 2750.312080][T26317] debugfs: 'hsr0' already exists in 'hsr' [ 2750.362949][T26317] Cannot create hsr debugfs directory [ 2750.556122][T24645] Bluetooth: hci6: command 0x0406 tx timeout [ 2755.034021][T26550] netlink: 120 bytes leftover after parsing attributes in process `syz.9.5295'. [ 2755.043909][T26550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2755.251976][T26554] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 2755.289717][T26554] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 2757.000348][T26317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2757.116281][T26317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2757.331306][T25899] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2757.899451][T26317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2758.255909][T26317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2758.381254][T25899] usb 9-1: device descriptor read/64, error -71 [ 2758.666524][T25899] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2758.861581][T25899] usb 9-1: device descriptor read/64, error -71 [ 2758.981983][T25899] usb usb9-port1: attempt power cycle [ 2759.007108][T26317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2759.099491][T26317] 8021q: adding VLAN 0 to HW filter on device team0 [ 2759.198335][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2759.205510][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2759.263504][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2759.270649][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2759.381301][T25899] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2759.654173][T25899] usb 9-1: device descriptor read/8, error -71 [ 2759.911697][T25899] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2760.716818][T25899] usb 9-1: device descriptor read/8, error -71 [ 2760.851575][T25899] usb usb9-port1: unable to enumerate USB device [ 2761.076047][T26601] tmpfs: Unknown parameter 'usrquota_i' [ 2762.117521][T26611] netlink: 'syz.2.5311': attribute type 10 has an invalid length. [ 2762.399943][T26611] team0: Device hsr_slave_0 failed to register rx_handler [ 2762.613779][T26612] sctp: failed to load transform for md5: -2 [ 2764.632336][T26317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2766.356660][T26650] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5317'. [ 2766.368294][ T5871] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2766.531341][ T5871] usb 9-1: device descriptor read/64, error -71 [ 2766.765701][T26650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5317'. [ 2766.810088][ T5871] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2766.952443][ T5871] usb 9-1: device descriptor read/64, error -71 [ 2767.322507][ T5871] usb usb9-port1: attempt power cycle [ 2767.681290][ T5871] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2767.759344][ T5871] usb 9-1: device descriptor read/8, error -71 [ 2767.807997][T26658] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2 [ 2767.865272][T26658] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter [ 2768.071753][ T5871] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2768.177645][ T5871] usb 9-1: device descriptor read/8, error -71 [ 2768.188773][T26317] veth0_vlan: entered promiscuous mode [ 2768.281469][T26317] veth1_vlan: entered promiscuous mode [ 2768.334469][ T5871] usb usb9-port1: unable to enumerate USB device [ 2768.556482][T26317] veth0_macvtap: entered promiscuous mode [ 2768.604966][T26317] veth1_macvtap: entered promiscuous mode [ 2768.693564][T26317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2768.753686][T26317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2768.788769][ T6789] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.838254][ T6789] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.927294][ T6789] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.962019][ T6789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.935918][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2771.675962][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2774.276508][ T6789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2774.541213][ T6789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2778.704376][ T6789] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.112631][ T6789] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.146855][T26733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5342'. [ 2781.158421][ T6789] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2781.463722][ T6789] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2781.554291][T24645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2781.565575][T24645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2781.574081][T24645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2781.585101][T24645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2781.592979][T24645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2781.941456][T26756] tmpfs: Unknown parameter 'usrquota_inode_har' [ 2782.531089][T26762] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2783.741638][T24645] Bluetooth: hci4: command tx timeout [ 2784.311461][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2784.330676][T26751] CUSE: info not properly terminated [ 2784.911280][T25899] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 2786.153470][T24645] Bluetooth: hci4: command tx timeout [ 2788.223180][T24645] Bluetooth: hci4: command tx timeout [ 2790.301478][T24645] Bluetooth: hci4: command tx timeout [ 2790.806000][T25899] usb 8-1: device descriptor read/64, error -110 [ 2791.080504][T25899] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 2791.173424][ T6789] bond0 (unregistering): Released all slaves [ 2791.253050][T25899] usb 8-1: device descriptor read/64, error -32 [ 2791.292598][ T6789] bond1 (unregistering): Released all slaves [ 2791.451968][T25899] usb usb8-port1: attempt power cycle [ 2792.204875][T26747] chnl_net:caif_netlink_parms(): no params data found [ 2796.624242][ T5871] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2797.953400][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 2798.005009][ T5871] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2798.028413][ T5871] usb 2-1: config 0 has no interface number 0 [ 2798.045537][ T5871] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2798.091425][T26747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2798.111437][T26747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2798.121523][ T5871] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2798.141746][T26747] bridge_slave_0: entered allmulticast mode [ 2798.151092][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2798.277663][T26747] bridge_slave_0: entered promiscuous mode [ 2798.451409][ T5871] usb 2-1: config 0 descriptor?? [ 2798.456762][T26747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2798.499223][T26747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2798.543625][ T5871] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2798.571456][T26747] bridge_slave_1: entered allmulticast mode [ 2798.905579][T26747] bridge_slave_1: entered promiscuous mode [ 2799.028434][T22416] usb 2-1: USB disconnect, device number 37 [ 2800.740230][ T6789] hsr_slave_0: left promiscuous mode [ 2800.818473][ T6789] hsr_slave_1: left promiscuous mode [ 2800.935883][ T6789] veth1_macvtap: left promiscuous mode [ 2801.157175][ T6789] veth0_macvtap: left allmulticast mode [ 2801.171217][ T6789] veth0_macvtap: left promiscuous mode [ 2801.176816][ T6789] veth1_vlan: left promiscuous mode [ 2801.240286][ T6789] veth0_vlan: left promiscuous mode [ 2801.963810][T26879] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2804.871786][ T6789] pim6reg (unregistering): left allmulticast mode [ 2808.975503][T26916] tmpfs: Unknown parameter 'usrquota_inode_hardlim' [ 2816.358818][T26747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2816.468867][T26747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2818.645726][T26955] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 2818.833040][T26747] team0: Port device team_slave_0 added [ 2818.882515][T26747] team0: Port device team_slave_1 added [ 2819.633315][T26747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2819.688818][T26747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2819.715509][T26967] program syz.8.5401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2819.884343][T26747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2820.075930][T26747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2820.443681][T26747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2820.753570][T26747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2821.659714][T26747] hsr_slave_0: entered promiscuous mode [ 2821.682961][T26747] hsr_slave_1: entered promiscuous mode [ 2823.565847][T26747] debugfs: 'hsr0' already exists in 'hsr' [ 2824.041317][T26747] Cannot create hsr debugfs directory [ 2824.132522][T13162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2824.151542][T13162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2824.167978][T13162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2824.178901][T13162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2824.186835][T13162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2824.314325][T26991] tipc: Started in network mode [ 2824.319267][T26991] tipc: Node identity ac1414aa, cluster identity 4711 [ 2824.364742][T26991] tipc: Enabled bearer , priority 10 [ 2824.606450][T26998] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 2825.484085][T22416] tipc: Node number set to 2886997162 [ 2826.306086][T13162] Bluetooth: hci1: command tx timeout [ 2828.383230][T13162] Bluetooth: hci1: command tx timeout [ 2828.812405][ T5950] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2828.983502][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 2829.004120][ T5950] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2829.122485][ T5950] usb 3-1: config 0 has no interface number 0 [ 2829.176804][ T5950] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2829.308131][ T5950] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2829.450283][T26984] chnl_net:caif_netlink_parms(): no params data found [ 2829.579868][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.627058][ T5950] usb 3-1: config 0 descriptor?? [ 2829.662177][ T5950] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 2829.949726][T26747] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2830.067391][T26747] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2830.111092][T26747] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2830.172743][T26747] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2830.407614][T26984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2830.449631][T26984] bridge0: port 1(bridge_slave_0) entered disabled state [ 2830.461961][T13162] Bluetooth: hci1: command tx timeout [ 2830.511475][T26984] bridge_slave_0: entered allmulticast mode [ 2830.532036][T26984] bridge_slave_0: entered promiscuous mode [ 2830.575630][T26984] bridge0: port 2(bridge_slave_1) entered blocking state [ 2830.594637][T26984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2830.601862][T26984] bridge_slave_1: entered allmulticast mode [ 2830.611556][T26984] bridge_slave_1: entered promiscuous mode [ 2831.217375][T26984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2831.294198][T26984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2831.448319][T26984] team0: Port device team_slave_0 added [ 2831.462744][T26984] team0: Port device team_slave_1 added [ 2831.772602][T25899] usb 3-1: USB disconnect, device number 33 [ 2832.441972][T26984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2832.448955][T26984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2832.553442][T13162] Bluetooth: hci1: command tx timeout [ 2832.658738][T26984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2832.787109][T26984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2832.898948][T26984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2832.931493][T26984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2834.619109][T26984] hsr_slave_0: entered promiscuous mode [ 2834.648949][T26984] hsr_slave_1: entered promiscuous mode [ 2835.317645][T26984] debugfs: 'hsr0' already exists in 'hsr' [ 2835.323427][T26984] Cannot create hsr debugfs directory [ 2835.354126][T26747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2836.769366][T26747] 8021q: adding VLAN 0 to HW filter on device team0 [ 2836.795447][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2836.802624][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2836.901920][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2836.909033][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2839.278349][T27122] netlink: 'syz.7.5441': attribute type 2 has an invalid length. [ 2839.288461][T27122] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.5441'. [ 2839.297834][T27122] nbd: must specify an index to disconnect [ 2840.762245][T24645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2840.780021][T24645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2840.791829][T24645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2840.859569][T27131] Can't find ip_set type hash:i [ 2840.981457][T24645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2841.001377][T24645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2842.761624][T26984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2843.101776][T13162] Bluetooth: hci4: command tx timeout [ 2843.237455][T26984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2843.279300][T26984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2843.346440][T26984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2845.189915][T13162] Bluetooth: hci4: command tx timeout [ 2845.401509][ T8280] bridge_slave_1: left allmulticast mode [ 2845.407183][ T8280] bridge_slave_1: left promiscuous mode [ 2845.422658][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 2845.512924][ T8280] bridge_slave_0: left allmulticast mode [ 2845.551203][ T8280] bridge_slave_0: left promiscuous mode [ 2845.577040][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 2845.813876][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2847.261327][T13162] Bluetooth: hci4: command tx timeout [ 2849.123574][ T8280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2849.148467][ T8280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2849.187381][ T8280] bond0 (unregistering): Released all slaves [ 2849.312927][ T5950] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2849.341702][T13162] Bluetooth: hci4: command tx timeout [ 2849.562814][ T5950] usb 9-1: Using ep0 maxpacket: 16 [ 2849.606759][ T5950] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2849.644927][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2849.707589][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2849.733895][T26984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2849.750802][ T5950] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2849.820758][ T5950] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2849.881069][T26984] 8021q: adding VLAN 0 to HW filter on device team0 [ 2849.890248][ T5950] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2849.919895][ T5950] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2849.949846][ T5950] usb 9-1: Manufacturer: syz [ 2849.977340][T23747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2849.984523][T23747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2850.020886][T27136] chnl_net:caif_netlink_parms(): no params data found [ 2850.040459][ T5950] usb 9-1: config 0 descriptor?? [ 2850.123368][T23747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.130553][T23747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2850.561420][ T5950] rc_core: IR keymap rc-hauppauge not found [ 2850.567370][ T5950] Registered IR keymap rc-empty [ 2850.618301][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2850.661342][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2850.712523][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2850.728187][ T8280] hsr_slave_0: left promiscuous mode [ 2850.746230][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input58 [ 2851.134073][ T8280] hsr_slave_1: left promiscuous mode [ 2851.154363][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.173889][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2851.252748][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2851.442115][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.481502][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.761584][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.801338][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.825262][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.851504][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.882701][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.911412][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.935870][ T5950] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2851.974618][ T5950] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2851.996435][ T5950] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2852.034090][ T5950] usb 9-1: USB disconnect, device number 18 [ 2852.266530][ T8280] team0 (unregistering): Port device team_slave_1 removed [ 2852.524255][ T8280] team0 (unregistering): Port device team_slave_0 removed [ 2852.947104][T24645] Bluetooth: hci3: command 0x0406 tx timeout [ 2855.775589][T27136] bridge0: port 1(bridge_slave_0) entered blocking state [ 2855.800048][T27136] bridge0: port 1(bridge_slave_0) entered disabled state [ 2855.862428][T27136] bridge_slave_0: entered allmulticast mode [ 2855.927476][T27136] bridge_slave_0: entered promiscuous mode [ 2855.965594][T27136] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.005800][T27136] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.056612][T27136] bridge_slave_1: entered allmulticast mode [ 2856.082896][T27136] bridge_slave_1: entered promiscuous mode [ 2856.532680][T27136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2856.645745][T27136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2858.225158][T27136] team0: Port device team_slave_0 added [ 2858.334282][T27136] team0: Port device team_slave_1 added [ 2859.351605][T27136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2859.381199][T27136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2859.491250][T27136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2859.574456][T27136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2859.606721][T27136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2860.066167][T27136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2861.153086][T27136] hsr_slave_0: entered promiscuous mode [ 2861.852494][T27136] hsr_slave_1: entered promiscuous mode [ 2861.859712][T27136] debugfs: 'hsr0' already exists in 'hsr' [ 2861.868326][T27136] Cannot create hsr debugfs directory [ 2863.963832][T27315] warn_alloc: 1 callbacks suppressed [ 2863.963856][T27315] syz.8.5498: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 Connection to 10.128.1.91 closed by remote host. [ 2864.247748][T27315] CPU: 1 UID: 0 PID: 27315 Comm: syz.8.5498 Not tainted syzkaller #0 PREEMPT(full) [ 2864.247798][T27315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2864.247821][T27315] Call Trace: [ 2864.247833][T27315] [ 2864.247847][T27315] dump_stack_lvl+0x16c/0x1f0 [ 2864.247911][T27315] warn_alloc+0x248/0x3a0 [ 2864.247972][T27315] ? __pfx_warn_alloc+0x10/0x10 [ 2864.248050][T27315] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 2864.248092][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.248138][T27315] ? __vmalloc_node_noprof+0xad/0xf0 [ 2864.248196][T27315] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 2864.248264][T27315] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 2864.248321][T27315] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2864.248388][T27315] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 2864.248433][T27315] vmalloc_user_noprof+0x9e/0xe0 [ 2864.248487][T27315] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 2864.248534][T27315] vb2_vmalloc_alloc+0x135/0x3f0 [ 2864.248580][T27315] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2864.248625][T27315] __vb2_queue_alloc+0x8c9/0x1280 [ 2864.248692][T27315] vb2_core_reqbufs+0xa90/0xfe0 [ 2864.248745][T27315] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2864.248786][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.248834][T27315] ? __pfx___might_resched+0x10/0x10 [ 2864.248883][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.248935][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.248980][T27315] ? __mutex_lock+0x1c5/0x1060 [ 2864.249016][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.249069][T27315] vb2_reqbufs+0x1a3/0x1f0 [ 2864.249129][T27315] ? __pfx_vb2_reqbufs+0x10/0x10 [ 2864.249195][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.249240][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.249291][T27315] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 2864.249358][T27315] v4l_reqbufs+0x152/0x1e0 [ 2864.249411][T27315] __video_do_ioctl+0xb40/0xfc0 [ 2864.249477][T27315] ? __might_fault+0xe3/0x190 [ 2864.249535][T27315] ? __pfx___video_do_ioctl+0x10/0x10 [ 2864.249609][T27315] video_usercopy+0x4d0/0x1720 [ 2864.249669][T27315] ? __pfx___video_do_ioctl+0x10/0x10 [ 2864.249727][T27315] ? __pfx_video_usercopy+0x10/0x10 [ 2864.249807][T27315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2864.249851][T27315] ? __fget_files+0x20e/0x3c0 [ 2864.249891][T27315] v4l2_ioctl+0x1bd/0x250 [ 2864.249943][T27315] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2864.249999][T27315] __x64_sys_ioctl+0x18e/0x210 [ 2864.250054][T27315] do_syscall_64+0xcd/0x4e0 [ 2864.250093][T27315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2864.250131][T27315] RIP: 0033:0x7f036998ec29 [ 2864.250159][T27315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2864.250196][T27315] RSP: 002b:00007f036a849038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2864.250231][T27315] RAX: ffffffffffffffda RBX: 00007f0369bd5fa0 RCX: 00007f036998ec29 [ 2864.250257][T27315] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000005 [ 2864.250282][T27315] RBP: 00007f0369a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 2864.250305][T27315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2864.250329][T27315] R13: 00007f0369bd6038 R14: 00007f0369bd5fa0 R15: 00007ffde0948628 [ 2864.250378][T27315] [ 2864.250391][T27315] Mem-Info: [ 2864.781503][T27315] active_anon:14157 inactive_anon:0 isolated_anon:0 [ 2864.781503][T27315] active_file:21130 inactive_file:41140 isolated_file:0 [ 2864.781503][T27315] unevictable:768 dirty:128 writeback:0 [ 2864.781503][T27315] slab_reclaimable:13178 slab_unreclaimable:108905 [ 2864.781503][T27315] mapped:9389 shmem:13685 pagetables:772 [ 2864.781503][T27315] sec_pagetables:0 bounce:0 [ 2864.781503][T27315] kernel_misc_reclaimable:0 [ 2864.781503][T27315] free:1279892 free_pcp:13189 free_cma:0 [ 2864.924722][T27315] Node 0 active_anon:56628kB inactive_anon:0kB active_file:84500kB inactive_file:164356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28852kB dirty:508kB writeback:0kB shmem:53204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11452kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2865.025149][T27315] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2865.084713][T27315] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:32kB free_cma:0kB [ 2865.217407][T27315] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 2865.223384][T27315] Node 0 DMA32 free:1261824kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55220kB inactive_anon:0kB active_file:84196kB inactive_file:163028kB unevictable:1536kB writepending:504kB present:3129332kB managed:2539444kB mlocked:0kB bounce:0kB free_pcp:30692kB local_pcp:13404kB free_cma:0kB [ 2865.391522][T27315] lowmem_reserve[]: 0 0 1 1 1 [ 2865.396337][T27315] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2865.588055][T27315] lowmem_reserve[]: 0 0 0 0 0 [ 2865.611251][T27315] Node 1 Normal free:3909172kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7728kB local_pcp:7376kB free_cma:0kB [ 2865.761958][T27315] lowmem_reserve[]: 0 0 0 0 0 [ 2865.766772][T27315] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 2865.851204][T27315] Node 0 DMA32: 11842*4kB (UME) 7653*8kB (UME) 3387*16kB (UME) 2118*32kB (UME) 808*64kB (UME) 572*128kB (UM) 541*256kB (UM) 232*512kB (UME) 88*1024kB (UME) 6*2048kB (UME) 167*4096kB (M) = 1399200kB [ 2865.897651][T27315] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2865.971847][T27315] Node 1 Normal: 203*4kB (UME) 55*8kB (UME) 51*16kB (UME) 229*32kB (UME) 106*64kB (UME) 34*128kB (UME) 10*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 946*4096kB (M) = 3909172kB [ 2866.000164][T27315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2866.011007][T27315] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2866.030315][T27315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2866.045319][T27315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2866.054886][T27315] 73398 total pagecache pages [ 2866.060621][T27315] 0 pages in swap cache [ 2866.065044][T27315] Free swap = 124996kB [ 2866.072395][T27315] Total swap = 124996kB [ 2866.076556][T27315] 2097051 pages RAM [ 2866.080353][T27315] 0 pages HighMem/MovableOnly [ 2866.091085][T27315] 430228 pages reserved [ 2866.096136][T27315] 0 pages cma reserved [ 2866.107166][T23747] smc: removing ib device syz2 [ 2866.366794][ T5950] syz2: Port: 1 Link DOWN [ 2866.858601][T27197] bridge_slave_1: left allmulticast mode [ 2866.868911][T27197] bridge_slave_1: left promiscuous mode [ 2866.879957][T27197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2866.930799][T27197] bridge_slave_0: left allmulticast mode [ 2866.967536][T27197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2867.780203][T27197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2867.817139][T27197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2867.836926][T27197] bond0 (unregistering): Released all slaves [ 2867.945089][T27197] : left promiscuous mode [ 2868.017644][T27197] tipc: Left network mode [ 2868.548511][T27197] hsr_slave_0: left promiscuous mode [ 2868.564760][T27197] hsr_slave_1: left promiscuous mode [ 2868.585164][T27197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2868.593139][T27197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2868.979930][T27197] team0 (unregistering): Port device team_slave_1 removed [ 2869.019284][T27197] team0 (unregistering): Port device team_slave_0 removed [ 2871.212543][T27197] IPVS: stop unused estimator thread 0... [ 2871.330485][T27197] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2871.466815][T27197] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2871.551079][T27197] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2871.649586][T27197] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2871.819645][T27197] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2871.907621][T27197] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.003993][T27197] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.055091][T27197] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.480837][T27197] bridge_slave_1: left allmulticast mode [ 2872.486566][T27197] bridge_slave_1: left promiscuous mode [ 2872.492570][T27197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2872.502479][T27197] bridge_slave_0: left allmulticast mode [ 2872.508117][T27197] bridge_slave_0: left promiscuous mode [ 2872.516161][T27197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2872.529939][T27197] bridge_slave_1: left allmulticast mode [ 2872.535796][T27197] bridge_slave_1: left promiscuous mode [ 2872.541606][T27197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2872.550693][T27197] bridge_slave_0: left allmulticast mode [ 2872.556999][T27197] bridge_slave_0: left promiscuous mode [ 2872.562817][T27197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2872.574179][T27197] bridge_slave_1: left allmulticast mode [ 2872.579819][T27197] bridge_slave_1: left promiscuous mode [ 2872.587818][T27197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2872.598187][T27197] bridge_slave_0: left allmulticast mode [ 2872.604274][T27197] bridge_slave_0: left promiscuous mode [ 2872.609962][T27197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2872.622870][T27197] bridge_slave_1: left allmulticast mode [ 2872.628513][T27197] bridge_slave_1: left promiscuous mode [ 2872.635223][T27197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2872.646390][T27197] bridge_slave_0: left allmulticast mode [ 2872.652669][T27197] bridge_slave_0: left promiscuous mode [ 2872.658362][T27197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2873.125498][T27197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2873.137411][T27197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2873.148074][T27197] bond0 (unregistering): Released all slaves [ 2873.257629][T27197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2873.271254][T27197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2873.281362][T27197] bond0 (unregistering): Released all slaves [ 2873.557258][T27197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2873.569393][T27197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2873.579515][T27197] bond0 (unregistering): Released all slaves [ 2873.837597][T27197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2873.850024][T27197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2873.863276][T27197] bond0 (unregistering): Released all slaves [ 2874.005150][T27197] tipc: Disabling bearer [ 2874.019684][T27197] tipc: Left network mode