last executing test programs: 7m7.310403199s ago: executing program 1 (id=91): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0x70002008}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = fsopen(&(0x7f00000000c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='utf8', &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) listen(r3, 0x7c) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000380)=@udp=r3, 0x1}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r7, 0x2) timer_create(0x0, 0x0, &(0x7f0000000300)) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r8, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 7m5.081232227s ago: executing program 1 (id=102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 6m56.316295224s ago: executing program 1 (id=128): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0x70002008}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = fsopen(&(0x7f00000000c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='utf8', &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) listen(r3, 0x7c) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000380)=@udp=r3, 0x1}, 0x20) listen(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r7, 0x2) timer_create(0x0, 0x0, &(0x7f0000000300)) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r8, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) 6m53.71664032s ago: executing program 1 (id=134): open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_open_dev$sndctrl(0x0, 0x0, 0x400) unshare(0x28000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) 6m53.34309598s ago: executing program 1 (id=136): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_setup(0x4166, &(0x7f0000000200)={0x0, 0x1c3c, 0x0, 0x3, 0x65}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4048885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6m53.091108803s ago: executing program 1 (id=138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 6m36.710520638s ago: executing program 32 (id=138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 3m50.057341425s ago: executing program 5 (id=728): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000e) ioprio_get$pid(0x3, 0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0x0, 0x20101) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mincore(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x46) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f00000000c0)=0xc, 0x4) 3m49.263179463s ago: executing program 5 (id=730): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x4f) 3m49.041829756s ago: executing program 5 (id=731): socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m44.463282401s ago: executing program 5 (id=748): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) capset(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r5, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ftruncate(r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3m43.414532287s ago: executing program 5 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000b2309e3618a97919000300", @ANYRES32=r2], 0x40}}, 0x0) 3m43.150827797s ago: executing program 5 (id=754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3m26.864687946s ago: executing program 33 (id=754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3m23.0273172s ago: executing program 0 (id=803): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) capset(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r6, 0x0) setresgid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ftruncate(r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3m22.697295497s ago: executing program 0 (id=804): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0xfffffffffffffff3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="b2", 0x1, 0x80, 0x0, 0x0) 3m22.446891841s ago: executing program 0 (id=807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) openat$null(0xffffff9c, &(0x7f00000000c0), 0x101, 0x0) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x35, 0x81, 0x4, 0xb7, 0x2, 0x3, 0x7, 0xb, 0x7, 0xc, 0x8, 0x80, 0xa}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='.\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) lseek(r2, 0x40000007, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000023, 0x0) 3m19.215485264s ago: executing program 0 (id=818): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600000000000000", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 3m16.312020746s ago: executing program 3 (id=821): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x120) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x2000000}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) 3m15.80870072s ago: executing program 3 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r0, r2) close_range(r3, 0xffffffffffffffff, 0x0) 3m15.485153797s ago: executing program 3 (id=824): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)="88c5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) 3m15.191750688s ago: executing program 3 (id=825): r0 = socket(0x2c, 0x3, 0x0) setsockopt(r0, 0xa6, 0x10001, 0x0, 0x0) 3m14.868680887s ago: executing program 3 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1003, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) 3m14.173574512s ago: executing program 3 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 3m14.148164203s ago: executing program 2 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x303}, "ce8d1c91499b74be", "050176e0dda87463d0c67a9e6d510c94", "77cd9195", "aaec637dc558c1e8"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="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", 0xfb}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0xb) 3m13.308522307s ago: executing program 2 (id=831): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x120) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x2000000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) 3m13.128674528s ago: executing program 2 (id=832): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x8810) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r8, 0x0, 0x0}) 3m11.77670154s ago: executing program 2 (id=834): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r4}}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf25010000000500046020ec5d4014000705fe8000000000000000000000000000d5d5336d922a858b0014000700feff8dc43dc7688000000000000000000000000000aa0500020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) 3m11.521331659s ago: executing program 2 (id=836): creat(0x0, 0x122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 3m9.746257587s ago: executing program 2 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xa00}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 3m9.730319375s ago: executing program 0 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1003, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) 3m9.57807361s ago: executing program 0 (id=840): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="27a34264a1d3dd64ad1407c03f525cd047f1bba966b1854e225f9c8a46890cee3f2d798b296de3f35562ee15579dd4dd17ce70965e6f1c0f0a3b659d29d65cefbc13b0e817015628ec4f6574440b71e96fc14209e822b646d29d97d2e4f71a3efbb49dd7a2554bcd5fe695a937f89e8723b35a0831d0d6fdb2a6ba1160d6dc094272056af994526f4a67ba4b11a5793e43da36d1128f1cd4d3a4f9670c4bcfea38562818d7b3c46ab013c847518efccee599719ecf8a8d33482e31683ec4e12bd792c8abc150ae90d86b0ce306a35807ad5125636e8afd63", 0xd8, 0x40080, &(0x7f0000000400)={0xa, 0x4e20, 0x4, @remote, 0x3}, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) syz_clone(0x4d46200, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)="b9462acf5f16") sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x10, 0xc2500) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000780)={'\x00', 0xfffd, 0xfe1d, 0x1000, 0xffffffff947d5046, 0x1}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) 2m59.103736775s ago: executing program 34 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 2m54.618214138s ago: executing program 35 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xa00}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2m54.474666466s ago: executing program 36 (id=840): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="27a34264a1d3dd64ad1407c03f525cd047f1bba966b1854e225f9c8a46890cee3f2d798b296de3f35562ee15579dd4dd17ce70965e6f1c0f0a3b659d29d65cefbc13b0e817015628ec4f6574440b71e96fc14209e822b646d29d97d2e4f71a3efbb49dd7a2554bcd5fe695a937f89e8723b35a0831d0d6fdb2a6ba1160d6dc094272056af994526f4a67ba4b11a5793e43da36d1128f1cd4d3a4f9670c4bcfea38562818d7b3c46ab013c847518efccee599719ecf8a8d33482e31683ec4e12bd792c8abc150ae90d86b0ce306a35807ad5125636e8afd63", 0xd8, 0x40080, &(0x7f0000000400)={0xa, 0x4e20, 0x4, @remote, 0x3}, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) syz_clone(0x4d46200, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)="b9462acf5f16") sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x10, 0xc2500) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000780)={'\x00', 0xfffd, 0xfe1d, 0x1000, 0xffffffff947d5046, 0x1}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) 9.620540783s ago: executing program 4 (id=1041): syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) r0 = add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 9.413873886s ago: executing program 4 (id=1042): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000940)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.188846908s ago: executing program 8 (id=848): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write$tun(r6, 0x0, 0x3db) accept4(r3, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r8, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) 5.654690523s ago: executing program 4 (id=1043): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x14}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.907453367s ago: executing program 8 (id=1044): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.667944399s ago: executing program 8 (id=1045): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.475447387s ago: executing program 8 (id=1046): syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 3.201066519s ago: executing program 7 (id=847): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600000000000000", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 2.550727633s ago: executing program 9 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r0}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) 2.337110375s ago: executing program 4 (id=1047): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c", 0x23}, {0x0}, {&(0x7f0000000900)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deae", 0x13}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.239085687s ago: executing program 4 (id=1048): syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 691.126867ms ago: executing program 4 (id=1049): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c5", 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d9870f08d7834856d8a5dc7b179af4e0195037bf8f88583e76883590a3b12847f967a26b34ee3189936ac699c3a26c9b3d0", 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53433dfe15559c287c9951195be8025a", 0xce}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="54586baeba0fbf8bf3", 0x9}], 0x4, &(0x7f0000000d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x80}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5", 0x14, 0x340080d1, 0x0, 0x0) 456.131922ms ago: executing program 7 (id=1050): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0964719"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 8 (id=1051): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write$tun(r6, 0x0, 0x3db) accept4(r3, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r8, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) kernel console output (not intermixed with test programs): meout [ 180.069112][ T5905] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.209862][ T59] Bluetooth: hci5: command tx timeout [ 180.270539][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 180.274928][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 180.274991][ T5905] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 180.275009][ T5905] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 180.275024][ T5905] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 180.275036][ T5905] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 180.275050][ T5905] usb 5-1: config 1 interface 0 has no altsetting 0 [ 180.275072][ T5905] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 180.275086][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.489958][ T5905] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 180.887242][ T6582] bond1: option mode: unable to set because the bond device has slaves [ 181.097563][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.195272][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.449332][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 181.733911][ T6601] netlink: 'syz.2.199': attribute type 10 has an invalid length. [ 181.733974][ T6601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.199'. [ 181.736558][ T6601] team0: entered promiscuous mode [ 181.736609][ T6601] team_slave_0: entered promiscuous mode [ 181.738331][ T6601] team_slave_1: entered promiscuous mode [ 181.739908][ T6601] team0: entered allmulticast mode [ 181.739949][ T6601] team_slave_0: entered allmulticast mode [ 181.740017][ T6601] team_slave_1: entered allmulticast mode [ 181.750902][ T6601] bridge0: port 3(team0) entered blocking state [ 181.751802][ T6601] bridge0: port 3(team0) entered disabled state [ 181.793569][ T6601] bridge0: port 3(team0) entered blocking state [ 181.795664][ T6601] bridge0: port 3(team0) entered forwarding state [ 182.583773][ T59] Bluetooth: hci5: command tx timeout [ 183.995674][ T5905] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 184.050460][ T5905] usb 5-1: USB disconnect, device number 7 [ 184.229200][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 184.602892][ T59] Bluetooth: hci5: command tx timeout [ 184.891704][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.891958][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.892262][ T6538] bridge_slave_0: entered allmulticast mode [ 184.895344][ T6538] bridge_slave_0: entered promiscuous mode [ 184.942304][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.942510][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.942748][ T6538] bridge_slave_1: entered allmulticast mode [ 184.947342][ T6538] bridge_slave_1: entered promiscuous mode [ 185.125737][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.171406][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.381204][ T6538] team0: Port device team_slave_0 added [ 185.401700][ T6538] team0: Port device team_slave_1 added [ 185.604830][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.604844][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.604861][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.626915][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.626932][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.626956][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.854585][ T6538] hsr_slave_0: entered promiscuous mode [ 187.857372][ T6538] hsr_slave_1: entered promiscuous mode [ 187.871436][ T6538] debugfs: 'hsr0' already exists in 'hsr' [ 187.871457][ T6538] Cannot create hsr debugfs directory [ 188.630318][ T6661] binder: 6659:6661 ioctl 4018620d 0 returned -22 [ 193.955830][ T6538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.011889][ T6538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.013296][ T6538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.113815][ T6538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.114976][ T6538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.181733][ T6538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.189926][ T820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.205491][ T6538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.434637][ T820] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 194.434669][ T820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.434690][ T820] usb 5-1: config 0 has no interface number 0 [ 194.434772][ T820] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 194.434798][ T820] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.465504][ T820] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 194.465541][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.465564][ T820] usb 5-1: Product: syz [ 194.465580][ T820] usb 5-1: Manufacturer: syz [ 194.465596][ T820] usb 5-1: SerialNumber: syz [ 195.174768][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.174850][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.300493][ T820] usb 5-1: config 0 descriptor?? [ 196.234044][ T6538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.077819][ T820] usb 5-1: USB disconnect, device number 8 [ 198.383743][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.512131][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.425978][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.426176][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.690358][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.690522][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.436985][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.404562][ T6830] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 211.210770][ T6538] veth0_vlan: entered promiscuous mode [ 211.309059][ T6538] veth1_vlan: entered promiscuous mode [ 212.405715][ T6538] veth0_macvtap: entered promiscuous mode [ 212.591985][ T6538] veth1_macvtap: entered promiscuous mode [ 212.619908][ T37] audit: type=1326 audit(1776928269.134:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546344c819 code=0x7ffc0000 [ 212.619969][ T37] audit: type=1326 audit(1776928269.134:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546344c819 code=0x7ffc0000 [ 212.620015][ T37] audit: type=1326 audit(1776928269.134:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f546340d04e code=0x7ffc0000 [ 213.215776][ T37] audit: type=1326 audit(1776928269.144:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f546340d04e code=0x7ffc0000 [ 213.513419][ T37] audit: type=1326 audit(1776928269.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f546340d04e code=0x7ffc0000 [ 213.522495][ T37] audit: type=1326 audit(1776928270.044:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f546344c819 code=0x7ffc0000 [ 213.522556][ T37] audit: type=1326 audit(1776928270.044:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6852 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f546344c819 code=0x7ffc0000 [ 213.747176][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.816466][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.916800][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.917354][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.071341][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.073064][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.537890][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.537915][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.560326][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 217.560603][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 217.560633][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 217.923007][ T6885] trusted_key: encrypted_key: insufficient parameters specified [ 218.823517][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.823545][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.244226][ T6938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.299'. [ 225.107331][ T6974] netlink: 'syz.0.311': attribute type 8 has an invalid length. [ 225.519265][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.315'. [ 225.649836][ T6456] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 225.827370][ T6990] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.318'. [ 225.844861][ T6456] usb 3-1: Using ep0 maxpacket: 16 [ 225.856252][ T6456] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.856281][ T6456] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.856310][ T6456] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.882973][ T6456] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.883004][ T6456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.883023][ T6456] usb 3-1: Product: syz [ 225.883036][ T6456] usb 3-1: Manufacturer: syz [ 225.883050][ T6456] usb 3-1: SerialNumber: syz [ 225.939484][ T6990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'. [ 225.997801][ T6990] unsupported nlmsg_type 40 [ 226.005535][ T6990] netlink: 'syz.0.318': attribute type 30 has an invalid length. [ 226.365926][ T6456] usb 3-1: 0:2 : does not exist [ 227.723313][ T6456] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 229.345628][ T6456] usb 3-1: USB disconnect, device number 2 [ 229.567602][ T7030] netlink: 64 bytes leftover after parsing attributes in process `syz.5.329'. [ 229.622882][ T7030] netlink: 56 bytes leftover after parsing attributes in process `syz.5.329'. [ 230.031075][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.066029][ T7039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 230.369090][ T7042] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.332'. [ 230.389150][ T7042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.332'. [ 230.406926][ T7042] netlink: 'syz.0.332': attribute type 30 has an invalid length. [ 232.283960][ T7052] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 232.425092][ T7058] netlink: 'syz.3.337': attribute type 2 has an invalid length. [ 232.669919][ T5903] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 232.844849][ T5903] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 232.844883][ T5903] usb 6-1: config 0 has no interface number 0 [ 232.844934][ T5903] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 232.887260][ T5903] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 232.887294][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.887316][ T5903] usb 6-1: Product: syz [ 232.887332][ T5903] usb 6-1: Manufacturer: syz [ 232.887347][ T5903] usb 6-1: SerialNumber: syz [ 232.980641][ T5903] usb 6-1: config 0 descriptor?? [ 232.996408][ T5903] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 233.053810][ T5903] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 233.380694][ T7073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.566360][ T7084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.346'. [ 233.895512][ T7092] binder: 7091:7092 ioctl c0306201 0 returned -14 [ 234.002820][ T7094] net_ratelimit: 823 callbacks suppressed [ 234.002837][ T7094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.176789][ T6456] usb 6-1: USB disconnect, device number 2 [ 235.034264][ T6456] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 235.266782][ T6456] kobil_sct 6-1:0.148: device disconnected [ 236.100558][ T7092] syz.2.350 (7092): drop_caches: 2 [ 237.181659][ T7135] syzkaller1: entered promiscuous mode [ 237.181691][ T7135] syzkaller1: entered allmulticast mode [ 239.899847][ T6456] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 240.067380][ T6456] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 240.067403][ T6456] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.067415][ T6456] usb 6-1: config 0 has no interface number 0 [ 240.067445][ T6456] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 240.067459][ T6456] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.094804][ T7173] futex_wake_op: syz.0.379 tries to shift op by 144; fix this program [ 240.130379][ T6456] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 240.130411][ T6456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.130436][ T6456] usb 6-1: Product: syz [ 240.130449][ T6456] usb 6-1: Manufacturer: syz [ 240.130463][ T6456] usb 6-1: SerialNumber: syz [ 240.201318][ T6456] usb 6-1: config 0 descriptor?? [ 241.933175][ T5810] usb 6-1: USB disconnect, device number 3 [ 243.703876][ T7216] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 244.699851][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 245.068810][ T31] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 245.068843][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.068864][ T31] usb 3-1: config 0 has no interface number 0 [ 245.068915][ T31] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 245.068939][ T31] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.103791][ T31] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 245.103824][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.103844][ T31] usb 3-1: Product: syz [ 245.103859][ T31] usb 3-1: Manufacturer: syz [ 245.103873][ T31] usb 3-1: SerialNumber: syz [ 245.176061][ T31] usb 3-1: config 0 descriptor?? [ 246.343609][ T31] usb 3-1: USB disconnect, device number 3 [ 251.679765][ T5830] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 252.405053][ T7298] kernel profiling enabled (shift: 9) [ 254.026945][ T7310] netlink: 'syz.3.425': attribute type 3 has an invalid length. [ 254.026962][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 256.371908][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.137490][ T7357] futex_wake_op: syz.4.440 tries to shift op by 144; fix this program [ 260.771392][ T7347] syz.5.438 (7347): drop_caches: 2 [ 261.222878][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 263.831102][ T7396] trusted_key: encrypted_key: insufficient parameters specified [ 265.028708][ T7407] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 267.130382][ T7447] trusted_key: encrypted_key: insufficient parameters specified [ 270.582835][ T7486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.480'. [ 274.664276][ T7540] overlayfs: failed to clone upperpath [ 282.239780][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 282.452539][ T31] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 282.452572][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 282.455644][ T31] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 282.455678][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.455700][ T31] usb 6-1: Product: syz [ 282.455716][ T31] usb 6-1: Manufacturer: syz [ 282.455741][ T31] usb 6-1: SerialNumber: syz [ 282.641848][ T31] usb 6-1: config 0 descriptor?? [ 282.679080][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 283.224546][ T31] gspca_sunplus: reg_r err -110 [ 283.224664][ T31] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 285.444877][ T5810] usb 6-1: USB disconnect, device number 4 [ 285.865907][ T7683] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 286.986106][ T5830] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 289.343066][ T7732] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 290.678844][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 290.859378][ T5830] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 295.181724][ T7772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.582'. [ 295.427429][ T7772] Can't find ip_set type bitmap:por [ 299.061237][ T7803] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.594'. [ 299.108749][ T7803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.594'. [ 299.128685][ T7803] netlink: 'syz.0.594': attribute type 30 has an invalid length. [ 303.530156][ T5810] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 303.649730][ T820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 303.692529][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.692567][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.692608][ T5810] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 303.692633][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.884151][ T5810] usb 6-1: config 0 descriptor?? [ 303.949781][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 303.957463][ T820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.957524][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.957554][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.957577][ T820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 303.957600][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.959155][ T820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.959184][ T820] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.959205][ T820] usb 4-1: Manufacturer: syz [ 304.105635][ T820] usb 4-1: config 0 descriptor?? [ 304.569868][ T820] rc_core: IR keymap rc-hauppauge not found [ 304.569903][ T820] Registered IR keymap rc-empty [ 304.606728][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 304.623138][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 304.694628][ T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 304.720245][ T7843] netlink: 60 bytes leftover after parsing attributes in process `syz.5.608'. [ 304.741156][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.745459][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.756011][ T7843] netlink: 'syz.5.608': attribute type 30 has an invalid length. [ 304.776326][ T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 304.987415][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.990024][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.026332][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.059532][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.113217][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.131399][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.152475][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.169898][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.191675][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.212830][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.224343][ T5810] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 305.236374][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.281325][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.304684][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.358998][ T820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.550985][ T820] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 305.551015][ T820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 305.619720][ T820] usb 4-1: USB disconnect, device number 2 [ 305.702367][ T5810] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 305.709342][ T5810] usb 6-1: USB disconnect, device number 5 [ 305.791435][ T5830] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 305.919211][ T7865] fido_id[7865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 309.576682][ T5140] Bluetooth: hci0: command 0xfc11 tx timeout [ 309.625586][ T5830] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 310.369357][ T7916] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 310.369357][ T7916] program syz.5.625 not setting count and/or reply_len properly [ 311.292893][ T7918] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.626'. [ 311.562187][ T820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 311.687795][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 311.766842][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.766889][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.766930][ T820] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 311.766956][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.964600][ T820] usb 4-1: config 0 descriptor?? [ 312.592195][ T37] audit: type=1800 audit(1776928368.984:9): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.632" name="file0" dev="overlay" ino=375 res=0 errno=0 [ 313.359860][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 313.559743][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 313.571257][ T5903] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 313.587926][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.626'. [ 313.613852][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.614356][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.632396][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.637179][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 313.660306][ T7918] netlink: 'syz.3.626': attribute type 30 has an invalid length. [ 313.761956][ T9] usb 3-1: string descriptor 0 read error: -22 [ 313.762019][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 313.762034][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 313.802942][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 313.819066][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 313.819133][ T5903] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.819157][ T5903] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 313.819182][ T5903] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 313.819205][ T5903] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 313.819228][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 313.819275][ T5903] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 313.819297][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.858723][ T820] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 314.129704][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.212506][ T820] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 314.263252][ T5903] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 314.274137][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 314.328015][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.475919][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.476628][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.478745][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 314.480324][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 314.487851][ T9] usb 3-1: media controller created [ 314.526943][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.538700][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.924919][ T820] usb 4-1: USB disconnect, device number 3 [ 314.958945][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.272701][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 317.903868][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.997642][ T9] usb 3-1: USB disconnect, device number 4 [ 319.062594][ T7986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.072555][ T5903] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 319.142951][ T5903] usb 5-1: USB disconnect, device number 9 [ 320.755126][ T7998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.077886][ T8005] bond1: (slave ip6gretap1): making interface the new active one [ 321.113218][ T8005] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 321.821812][ T5903] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 321.999813][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 322.002491][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 322.002557][ T5903] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 322.002579][ T5903] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 322.002604][ T5903] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 322.002626][ T5903] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 322.002651][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 322.002686][ T5903] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 322.002709][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.029851][ T5903] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 323.219893][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.758978][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.041954][ T8053] trusted_key: encrypted_key: insufficient parameters specified [ 327.189439][ T5903] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 327.232034][ T5903] usb 5-1: USB disconnect, device number 10 [ 328.986739][ T8098] trusted_key: encrypted_key: insufficient parameters specified [ 330.399736][ T5810] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 330.634411][ T5810] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 330.634433][ T5810] usb 5-1: config 0 has no interface number 0 [ 330.634460][ T5810] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 330.704971][ T5810] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 330.704996][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.705010][ T5810] usb 5-1: Product: syz [ 330.705019][ T5810] usb 5-1: Manufacturer: syz [ 330.705028][ T5810] usb 5-1: SerialNumber: syz [ 330.742881][ T5810] usb 5-1: config 0 descriptor?? [ 330.844457][ T5810] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 330.980700][ T5810] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 331.828047][ T5810] usb 5-1: USB disconnect, device number 11 [ 332.294268][ T5810] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 332.311954][ T5810] kobil_sct 5-1:0.148: device disconnected [ 333.560755][ T8141] trusted_key: encrypted_key: insufficient parameters specified [ 334.895868][ T5905] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 335.679747][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 335.681904][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 335.681986][ T5905] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 335.682009][ T5905] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 335.682036][ T5905] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 335.682058][ T5905] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 335.682082][ T5905] usb 6-1: config 1 interface 0 has no altsetting 0 [ 335.682118][ T5905] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 335.682143][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.795567][ T5905] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 336.566959][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.590027][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.837302][ T8180] trusted_key: encrypted_key: insufficient parameters specified [ 337.053179][ T5905] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 337.081633][ T5905] usb 6-1: USB disconnect, device number 6 [ 340.946080][ T8233] trusted_key: encrypted_key: insufficient parameters specified [ 344.902079][ T8270] trusted_key: encrypted_key: insufficient parameters specified [ 345.811439][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 345.979724][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 345.982278][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 345.982341][ T5905] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 345.982365][ T5905] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 345.982392][ T5905] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 345.982415][ T5905] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 345.982449][ T5905] usb 3-1: config 1 interface 0 has no altsetting 0 [ 345.982485][ T5905] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 345.982511][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.715658][ T5905] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 347.093579][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.098125][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.446713][ T8310] trusted_key: encrypted_key: insufficient parameters specified [ 349.559502][ T5905] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 349.585019][ T5905] usb 3-1: USB disconnect, device number 5 [ 350.282191][ T8323] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 351.812003][ T8326] syz.4.763 (8326): drop_caches: 2 [ 352.340070][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 352.492519][ T5903] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 352.492551][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 352.495739][ T5903] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 352.495768][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.495790][ T5903] usb 3-1: Product: syz [ 352.495805][ T5903] usb 3-1: Manufacturer: syz [ 352.495821][ T5903] usb 3-1: SerialNumber: syz [ 352.594879][ T5903] usb 3-1: config 0 descriptor?? [ 352.644948][ T5903] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 353.154354][ T5903] gspca_sunplus: reg_r err -110 [ 353.154464][ T5903] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 353.210995][ T8339] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 355.279864][ T5903] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 355.678684][ T8361] overlayfs: failed to clone upperpath [ 356.379725][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 356.382399][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 356.382478][ T5903] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 356.382502][ T5903] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 356.382527][ T5903] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 356.382550][ T5903] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 356.382574][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 356.382619][ T5903] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 356.382645][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.441455][ T6516] usb 3-1: USB disconnect, device number 6 [ 356.901231][ T5903] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 357.790407][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.849857][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.946208][ T8373] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 358.518292][ T8379] dummy0: entered allmulticast mode [ 359.335397][ T8374] dummy0: left allmulticast mode [ 359.719020][ T5903] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 359.951609][ T5903] usb 5-1: USB disconnect, device number 12 [ 361.399728][ T5140] Bluetooth: hci5: command 0x0406 tx timeout [ 363.270074][ T6516] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 363.425344][ T6516] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 363.425378][ T6516] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 363.455236][ T6516] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 363.455270][ T6516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.455290][ T6516] usb 4-1: Product: syz [ 363.455305][ T6516] usb 4-1: Manufacturer: syz [ 363.455319][ T6516] usb 4-1: SerialNumber: syz [ 363.543175][ T6516] usb 4-1: config 0 descriptor?? [ 363.625654][ T6516] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 364.213058][ T8417] syz.2.792 (8417): drop_caches: 2 [ 364.530868][ T6516] gspca_sunplus: reg_r err -110 [ 364.530981][ T6516] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 364.828842][ T5903] usb 4-1: USB disconnect, device number 4 [ 366.349401][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.424557][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.443013][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.457477][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.461909][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.682896][ T5830] Bluetooth: hci0: command tx timeout [ 370.760309][ T5830] Bluetooth: hci0: command tx timeout [ 373.754996][ T5830] Bluetooth: hci0: command tx timeout [ 374.223466][ T8515] netlink: 'syz.2.820': attribute type 2 has an invalid length. [ 375.271448][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.401803][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 375.903737][ T5830] Bluetooth: hci0: command tx timeout [ 376.581310][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.198476][ T8548] syzkaller0: entered promiscuous mode [ 377.198508][ T8548] syzkaller0: entered allmulticast mode [ 378.508449][ T8564] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 380.159778][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.697069][ T5830] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 391.510560][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.569142][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.635761][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.637026][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.637787][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.730647][ T5140] Bluetooth: hci5: command tx timeout [ 395.646462][ T8585] ip6gretap2: entered promiscuous mode [ 395.646636][ T8585] ip6gretap2: entered allmulticast mode [ 395.648389][ T8585] team0: Port device ip6gretap2 added [ 395.799833][ T5140] Bluetooth: hci5: command tx timeout [ 395.983886][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.056377][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.061435][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.070668][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.073525][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.333142][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 396.378662][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 396.430911][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 396.448921][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 396.457776][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 396.490815][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.892267][ T8601] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 397.882037][ T5140] Bluetooth: hci5: command tx timeout [ 398.295569][ T5140] Bluetooth: hci6: command tx timeout [ 398.448245][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.700855][ T5140] Bluetooth: hci7: command tx timeout [ 399.240967][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.241121][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.289985][ T8434] bridge_slave_0: entered allmulticast mode [ 399.299375][ T8434] bridge_slave_0: entered promiscuous mode [ 399.332101][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.332321][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.332561][ T8434] bridge_slave_1: entered allmulticast mode [ 399.390612][ T8434] bridge_slave_1: entered promiscuous mode [ 399.550196][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.594334][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.752342][ T8434] team0: Port device team_slave_0 added [ 399.822769][ T8434] team0: Port device team_slave_1 added [ 399.959768][ T5140] Bluetooth: hci5: command tx timeout [ 399.980872][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.980889][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.980913][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.099153][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.099171][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.099195][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.360383][ T5140] Bluetooth: hci6: command tx timeout [ 400.552861][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.660405][ T56] bridge_slave_1: left allmulticast mode [ 400.660548][ T56] bridge_slave_1: left promiscuous mode [ 400.674268][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.769759][ T5830] Bluetooth: hci7: command tx timeout [ 400.794670][ T56] bridge_slave_0: left allmulticast mode [ 400.794694][ T56] bridge_slave_0: left promiscuous mode [ 400.794861][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.439729][ T5830] Bluetooth: hci6: command tx timeout [ 402.561067][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.620779][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.662052][ T56] bond0 (unregistering): Released all slaves [ 402.673074][ T56] bond1 (unregistering): Released all slaves [ 402.840544][ T5830] Bluetooth: hci7: command tx timeout [ 402.990034][ T8434] hsr_slave_0: entered promiscuous mode [ 402.991510][ T8434] hsr_slave_1: entered promiscuous mode [ 402.992596][ T8434] debugfs: 'hsr0' already exists in 'hsr' [ 402.992621][ T8434] Cannot create hsr debugfs directory [ 404.821316][ T5830] Bluetooth: hci6: command tx timeout [ 404.929440][ T5830] Bluetooth: hci7: command tx timeout [ 405.039300][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 405.175622][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 407.276940][ T8615] chnl_net:caif_netlink_parms(): no params data found [ 407.434877][ T56] hsr_slave_0: left promiscuous mode [ 407.471286][ T56] hsr_slave_1: left promiscuous mode [ 407.510412][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.510639][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.586729][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.586760][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.013550][ T56] veth1_macvtap: left promiscuous mode [ 408.013746][ T56] veth0_macvtap: left promiscuous mode [ 408.013954][ T56] veth1_vlan: left promiscuous mode [ 408.014191][ T56] veth0_vlan: left promiscuous mode [ 408.731700][ T56] team0 (unregistering): Port device team_slave_1 removed [ 408.773497][ T56] team0 (unregistering): Port device team_slave_0 removed [ 409.330451][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 409.405652][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.406148][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.406364][ T8609] bridge_slave_0: entered allmulticast mode [ 409.432852][ T8609] bridge_slave_0: entered promiscuous mode [ 409.660946][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.661093][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.661355][ T8609] bridge_slave_1: entered allmulticast mode [ 409.664671][ T8609] bridge_slave_1: entered promiscuous mode [ 409.676864][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.677009][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.677279][ T8618] bridge_slave_0: entered allmulticast mode [ 409.720728][ T8618] bridge_slave_0: entered promiscuous mode [ 409.887773][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.887879][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.888023][ T8618] bridge_slave_1: entered allmulticast mode [ 409.915524][ T8618] bridge_slave_1: entered promiscuous mode [ 410.186006][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.352802][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.503466][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.504656][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.504884][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.505122][ T8615] bridge_slave_0: entered allmulticast mode [ 410.513960][ T8615] bridge_slave_0: entered promiscuous mode [ 410.963230][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.963737][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.963905][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.964133][ T8615] bridge_slave_1: entered allmulticast mode [ 410.968503][ T8615] bridge_slave_1: entered promiscuous mode [ 411.169210][ T8609] team0: Port device team_slave_0 added [ 411.593713][ T8609] team0: Port device team_slave_1 added [ 411.637746][ T8618] team0: Port device team_slave_0 added [ 411.994590][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.030611][ T8618] team0: Port device team_slave_1 added [ 412.063100][ T5485] 8021q: adding VLAN 0 to HW filter on device eth1 [ 412.067147][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.222695][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.222715][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.222746][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.415564][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 412.488191][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.488210][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.488238][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.539069][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.539090][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.539118][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.598032][ T8615] team0: Port device team_slave_0 added [ 412.686751][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.686771][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.686799][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.691875][ T8615] team0: Port device team_slave_1 added [ 412.693666][ T8434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 412.774545][ T8434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.817572][ T8434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 412.927148][ T8434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.056104][ T8434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 413.086429][ T8434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.088662][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.088675][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.088691][ T8615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.167605][ T8434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 413.376254][ T8434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.399416][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.399431][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.399449][ T8615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.535630][ T8761] overlayfs: failed to resolve './file0': -2 [ 415.868889][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.939349][ T8766] dummy0: entered allmulticast mode [ 415.939485][ T8766] dummy0: left allmulticast mode [ 415.977771][ T8609] hsr_slave_0: entered promiscuous mode [ 415.979163][ T8609] hsr_slave_1: entered promiscuous mode [ 415.992546][ T8609] debugfs: 'hsr0' already exists in 'hsr' [ 415.992577][ T8609] Cannot create hsr debugfs directory [ 416.113511][ T8618] hsr_slave_0: entered promiscuous mode [ 416.117675][ T8618] hsr_slave_1: entered promiscuous mode [ 416.119262][ T8618] debugfs: 'hsr0' already exists in 'hsr' [ 416.119289][ T8618] Cannot create hsr debugfs directory [ 416.365648][ T8615] hsr_slave_0: entered promiscuous mode [ 416.367257][ T8615] hsr_slave_1: entered promiscuous mode [ 416.368385][ T8615] debugfs: 'hsr0' already exists in 'hsr' [ 416.368412][ T8615] Cannot create hsr debugfs directory [ 416.607565][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.194668][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 417.228221][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.396389][ T8792] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 417.668330][ T8794] bond2: (slave bridge1): making interface the new active one [ 417.678236][ T8794] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 417.874488][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.906753][ T5485] 8021q: adding VLAN 0 to HW filter on device eth2 [ 420.673778][ T8609] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 420.780151][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.809433][ T8609] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 420.955930][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.107292][ T8609] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.153514][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.175801][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.198406][ T8609] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.365480][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.076902][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.249314][ T5485] 8021q: adding VLAN 0 to HW filter on device eth3 [ 422.403549][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.538724][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.724207][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.804873][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.805037][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.828955][ T8618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 422.891168][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.941347][ T8618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.005116][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 423.023215][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.058383][ T8618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.115769][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.123569][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.123787][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.326624][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.451723][ T8618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.483978][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.095445][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.128648][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.177895][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.194147][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.199265][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.205641][ T8615] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 426.360782][ T5830] Bluetooth: hci1: command tx timeout [ 426.424593][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.518859][ T8615] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 426.691147][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.314152][ T8615] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 427.369111][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.670336][ T8615] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 427.715188][ T8615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.727859][ T5485] 8021q: adding VLAN 0 to HW filter on device eth4 [ 428.290443][ T56] bridge0: port 3(team0) entered disabled state [ 428.351892][ T56] bridge_slave_1: left allmulticast mode [ 428.351926][ T56] bridge_slave_1: left promiscuous mode [ 428.352816][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.437934][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 428.439938][ T5830] Bluetooth: hci1: command tx timeout [ 428.462402][ T56] bridge_slave_0: left allmulticast mode [ 428.462425][ T56] bridge_slave_0: left promiscuous mode [ 428.462603][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.810157][ T56] bridge_slave_1: left allmulticast mode [ 428.810180][ T56] bridge_slave_1: left promiscuous mode [ 428.810370][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.904363][ T56] bridge_slave_0: left allmulticast mode [ 428.904387][ T56] bridge_slave_0: left promiscuous mode [ 428.904559][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.136449][ T56] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 430.529893][ T5830] Bluetooth: hci1: command tx timeout [ 430.680744][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.741778][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.785619][ T56] bond0 (unregistering): Released all slaves [ 430.798037][ T56] bond1 (unregistering): Released all slaves [ 430.814009][ T56] bond2 (unregistering): Released all slaves [ 431.120351][ T56] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 431.120370][ T56] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - fa:40:7a:a2:1a:fa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 431.120401][ T56] bond1 (unregistering): (slave geneve2): making interface the new active one [ 431.365670][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 432.583940][ T56] bond1 (unregistering): (slave geneve2): Releasing active interface [ 432.599857][ T5830] Bluetooth: hci1: command tx timeout [ 432.700338][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.740279][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.762186][ T56] bond0 (unregistering): Released all slaves [ 432.769067][ T56] bond1 (unregistering): Released all slaves [ 433.126168][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.341984][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.199228][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 434.263149][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.263387][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.465669][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.465817][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.560264][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.748052][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.748191][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.748466][ T8855] bridge_slave_0: entered allmulticast mode [ 434.754305][ T8855] bridge_slave_0: entered promiscuous mode [ 434.843979][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.844137][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.844366][ T8855] bridge_slave_1: entered allmulticast mode [ 434.847866][ T8855] bridge_slave_1: entered promiscuous mode [ 435.106399][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.177555][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.233384][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.866976][ T5485] 8021q: adding VLAN 0 to HW filter on device eth5 [ 435.996410][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.999944][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.000142][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.036793][ T8855] team0: Port device team_slave_0 added [ 436.706082][ T8953] process 'syz.4.914' launched './file2' with NULL argv: empty string added [ 437.370517][ T8855] team0: Port device team_slave_1 added [ 437.886653][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.886874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.945963][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.945976][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.945992][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.973870][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.973888][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.973914][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.032535][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.286358][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 439.528431][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.528666][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.657657][ T8855] hsr_slave_0: entered promiscuous mode [ 439.659289][ T8855] hsr_slave_1: entered promiscuous mode [ 439.672181][ T8855] debugfs: 'hsr0' already exists in 'hsr' [ 439.672211][ T8855] Cannot create hsr debugfs directory [ 440.726800][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.224273][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.224404][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.380027][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 443.699741][ T56] hsr_slave_0: left promiscuous mode [ 443.729948][ T56] hsr_slave_1: left promiscuous mode [ 443.731143][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.731162][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.771075][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.771104][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.880413][ T56] hsr_slave_0: left promiscuous mode [ 443.909889][ T56] hsr_slave_1: left promiscuous mode [ 443.911153][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.911181][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.951033][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.951064][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.052503][ T56] veth1_macvtap: left promiscuous mode [ 444.052573][ T56] veth0_macvtap: left promiscuous mode [ 444.052721][ T56] veth1_vlan: left promiscuous mode [ 444.052822][ T56] veth0_vlan: left promiscuous mode [ 444.150317][ T56] veth1_macvtap: left promiscuous mode [ 444.150386][ T56] veth0_macvtap: left promiscuous mode [ 444.150541][ T56] veth1_vlan: left promiscuous mode [ 444.150643][ T56] veth0_vlan: left promiscuous mode [ 444.936067][ T56] team_slave_1 (unregistering): left promiscuous mode [ 444.936092][ T56] team_slave_1 (unregistering): left allmulticast mode [ 444.961268][ T56] team0 (unregistering): Port device team_slave_1 removed [ 444.974537][ T56] team_slave_0 (unregistering): left promiscuous mode [ 444.974573][ T56] team_slave_0 (unregistering): left allmulticast mode [ 445.008073][ T56] team0 (unregistering): Port device team_slave_0 removed [ 445.722585][ T56] team0 (unregistering): Port device team_slave_1 removed [ 445.761580][ T56] team0 (unregistering): Port device team_slave_0 removed [ 446.066235][ T5485] 8021q: adding VLAN 0 to HW filter on device eth6 [ 446.374413][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.521697][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.564408][ T8609] veth0_vlan: entered promiscuous mode [ 450.808247][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 451.244517][ T5485] 8021q: adding VLAN 0 to HW filter on device eth7 [ 451.254770][ T8609] veth1_vlan: entered promiscuous mode [ 452.201239][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.827191][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.959980][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.001848][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.007747][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.009070][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.834434][ T8618] veth0_vlan: entered promiscuous mode [ 456.280930][ T5140] Bluetooth: hci0: command tx timeout [ 456.903092][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.945784][ T59] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 456.967856][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.017709][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.020908][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.022312][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.565642][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.633754][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.675581][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 458.395455][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 458.489416][ T5830] Bluetooth: hci0: command tx timeout [ 458.541353][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.379943][ T5140] Bluetooth: hci2: command tx timeout [ 460.519942][ T5140] Bluetooth: hci0: command tx timeout [ 460.785770][ T5140] Bluetooth: hci4: command tx timeout [ 462.001433][ T9147] dummy0: entered allmulticast mode [ 462.001526][ T9147] dummy0: left allmulticast mode [ 462.488208][ T5140] Bluetooth: hci2: command tx timeout [ 462.620481][ T5140] Bluetooth: hci0: command tx timeout [ 462.860579][ T5140] Bluetooth: hci4: command tx timeout [ 463.204518][ T5485] 8021q: adding VLAN 0 to HW filter on device eth8 [ 463.722578][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 464.600006][ T5140] Bluetooth: hci2: command tx timeout [ 464.919661][ T5140] Bluetooth: hci4: command tx timeout [ 464.982917][ T8855] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 465.097689][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.178288][ T8855] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 465.367581][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.398648][ T8855] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 466.373597][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.438579][ T9177] netlink: 'syz.4.946': attribute type 2 has an invalid length. [ 466.644552][ T8855] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 466.662671][ T8855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.681419][ T5140] Bluetooth: hci2: command tx timeout [ 466.999996][ T5140] Bluetooth: hci4: command tx timeout [ 467.124336][ T9085] chnl_net:caif_netlink_parms(): no params data found [ 469.233144][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.233335][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.233543][ T9085] bridge_slave_0: entered allmulticast mode [ 469.236309][ T9085] bridge_slave_0: entered promiscuous mode [ 469.273914][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.274058][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.274272][ T9085] bridge_slave_1: entered allmulticast mode [ 469.288298][ T9085] bridge_slave_1: entered promiscuous mode [ 469.618472][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.618952][ T9112] chnl_net:caif_netlink_parms(): no params data found [ 469.696541][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.995385][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 470.268320][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 470.301957][ T9085] team0: Port device team_slave_0 added [ 470.501940][ T5485] 8021q: adding VLAN 0 to HW filter on device eth9 [ 470.529322][ T9085] team0: Port device team_slave_1 added [ 471.578855][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.578873][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.578901][ T9085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.686027][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.686177][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.686208][ T9085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.687534][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.687767][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.687989][ T9112] bridge_slave_0: entered allmulticast mode [ 471.699845][ T9112] bridge_slave_0: entered promiscuous mode [ 471.926329][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.926498][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.927291][ T9112] bridge_slave_1: entered allmulticast mode [ 471.932539][ T9112] bridge_slave_1: entered promiscuous mode [ 472.068914][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.083539][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.084236][ T9105] bridge_slave_0: entered allmulticast mode [ 472.109129][ T9105] bridge_slave_0: entered promiscuous mode [ 472.168573][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.169874][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.171890][ T9105] bridge_slave_1: entered allmulticast mode [ 472.727951][ T9105] bridge_slave_1: entered promiscuous mode [ 473.170053][ T9242] netlink: 'syz.4.953': attribute type 2 has an invalid length. [ 473.435549][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.533690][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.552703][ T9085] hsr_slave_0: entered promiscuous mode [ 473.553935][ T9085] hsr_slave_1: entered promiscuous mode [ 473.554758][ T9085] debugfs: 'hsr0' already exists in 'hsr' [ 473.554776][ T9085] Cannot create hsr debugfs directory [ 473.624927][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.876841][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.895483][ T9112] team0: Port device team_slave_0 added [ 473.955961][ T9112] team0: Port device team_slave_1 added [ 475.408984][ T9105] team0: Port device team_slave_0 added [ 475.630135][ T9105] team0: Port device team_slave_1 added [ 475.632191][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.632208][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.632236][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.953619][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.953639][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.953666][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.041348][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.041366][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.041391][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.045227][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 476.076494][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.076513][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.076539][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.094063][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.301953][ T9112] hsr_slave_0: entered promiscuous mode [ 476.303683][ T9112] hsr_slave_1: entered promiscuous mode [ 476.304586][ T9112] debugfs: 'hsr0' already exists in 'hsr' [ 476.304607][ T9112] Cannot create hsr debugfs directory [ 476.405763][ T9105] hsr_slave_0: entered promiscuous mode [ 476.408484][ T9105] hsr_slave_1: entered promiscuous mode [ 476.409109][ T9105] debugfs: 'hsr0' already exists in 'hsr' [ 476.409126][ T9105] Cannot create hsr debugfs directory [ 477.656996][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.845532][ T9268] netlink: 'syz.4.960': attribute type 2 has an invalid length. [ 478.643560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.643856][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.389039][ T5485] 8021q: adding VLAN 0 to HW filter on device eth10 [ 480.490380][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.490519][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.659107][ T9295] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.963'. [ 480.930938][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 481.132647][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.132687][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.132725][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 481.132748][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.177094][ T9] usb 5-1: config 0 descriptor?? [ 481.959965][ T56] bridge_slave_1: left allmulticast mode [ 481.959997][ T56] bridge_slave_1: left promiscuous mode [ 481.960499][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.006240][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.031058][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.049892][ T9295] netlink: 'syz.4.963': attribute type 30 has an invalid length. [ 482.054707][ T9] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 482.213252][ T56] bridge_slave_0: left allmulticast mode [ 482.213286][ T56] bridge_slave_0: left promiscuous mode [ 482.213560][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.222638][ T9] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized [ 482.271744][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.276097][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.292300][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.292935][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.308403][ T9] usb 5-1: USB disconnect, device number 13 [ 482.483104][ T56] bridge_slave_1: left allmulticast mode [ 482.483137][ T56] bridge_slave_1: left promiscuous mode [ 482.483425][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.584079][ T56] bridge_slave_0: left allmulticast mode [ 482.584112][ T56] bridge_slave_0: left promiscuous mode [ 482.597494][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.794514][ T56] bridge_slave_1: left allmulticast mode [ 482.794543][ T56] bridge_slave_1: left promiscuous mode [ 482.794814][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.880741][ T56] bridge_slave_0: left allmulticast mode [ 482.880773][ T56] bridge_slave_0: left promiscuous mode [ 482.880985][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.889446][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 483.734945][ T56] bridge_slave_1: left allmulticast mode [ 483.734979][ T56] bridge_slave_1: left promiscuous mode [ 483.735253][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.791749][ T56] bridge_slave_0: left allmulticast mode [ 483.791785][ T56] bridge_slave_0: left promiscuous mode [ 483.792080][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.460706][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.502476][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.511967][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.516245][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.535270][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.970536][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.032076][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.073276][ T56] bond0 (unregistering): Released all slaves [ 485.561702][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.620576][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.661993][ T56] bond0 (unregistering): Released all slaves [ 486.161199][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.220515][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.243610][ T56] bond0 (unregistering): Released all slaves [ 486.725912][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.760152][ T5140] Bluetooth: hci5: command tx timeout [ 486.810294][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.881536][ T56] bond0 (unregistering): Released all slaves [ 486.931383][ T5485] 8021q: adding VLAN 0 to HW filter on device eth11 [ 488.512450][ T9343] netlink: 'syz.4.967': attribute type 2 has an invalid length. [ 488.846455][ T5140] Bluetooth: hci5: command tx timeout [ 490.025401][ T5485] 8021q: adding VLAN 0 to HW filter on device eth12 [ 490.220470][ T56] hsr_slave_0: left promiscuous mode [ 490.260682][ T56] hsr_slave_1: left promiscuous mode [ 490.261920][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.321732][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.509837][ T56] hsr_slave_0: left promiscuous mode [ 490.549985][ T56] hsr_slave_1: left promiscuous mode [ 490.557337][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.602432][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.773710][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 490.821165][ T56] hsr_slave_0: left promiscuous mode [ 490.863202][ T56] hsr_slave_1: left promiscuous mode [ 490.865542][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.922445][ T5140] Bluetooth: hci5: command tx timeout [ 491.578541][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.689802][ T56] hsr_slave_0: left promiscuous mode [ 491.709883][ T56] hsr_slave_1: left promiscuous mode [ 491.710637][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.733459][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.804299][ T56] veth0_vlan: left promiscuous mode [ 491.842381][ T56] veth1_vlan: left promiscuous mode [ 491.842514][ T56] veth0_vlan: left promiscuous mode [ 492.371867][ T56] team0 (unregistering): Port device team_slave_1 removed [ 492.411905][ T56] team0 (unregistering): Port device team_slave_0 removed [ 492.833750][ T56] team0 (unregistering): Port device team_slave_1 removed [ 492.867742][ T56] team0 (unregistering): Port device team_slave_0 removed [ 493.026823][ T5140] Bluetooth: hci5: command tx timeout [ 493.311141][ T56] team0 (unregistering): Port device team_slave_1 removed [ 493.361603][ T56] team0 (unregistering): Port device team_slave_0 removed [ 493.780399][ T56] team0 (unregistering): Port device team_slave_1 removed [ 493.811598][ T56] team0 (unregistering): Port device team_slave_0 removed [ 495.729873][ T5905] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 495.980911][ T5905] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 495.980944][ T5905] usb 5-1: config 0 has no interface number 0 [ 495.980990][ T5905] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 495.984075][ T5905] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 495.984107][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.984130][ T5905] usb 5-1: Product: syz [ 495.984145][ T5905] usb 5-1: Manufacturer: syz [ 495.984162][ T5905] usb 5-1: SerialNumber: syz [ 495.991170][ T5905] usb 5-1: config 0 descriptor?? [ 495.998028][ T5905] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 496.094091][ T5905] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 496.134440][ T9333] chnl_net:caif_netlink_parms(): no params data found [ 496.803535][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.803747][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.804016][ T9333] bridge_slave_0: entered allmulticast mode [ 496.805697][ T9333] bridge_slave_0: entered promiscuous mode [ 496.838159][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.838409][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.838693][ T9333] bridge_slave_1: entered allmulticast mode [ 496.852141][ T9333] bridge_slave_1: entered promiscuous mode [ 497.032679][ T5903] usb 5-1: USB disconnect, device number 14 [ 497.125639][ T5903] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 497.185386][ T5903] kobil_sct 5-1:0.148: device disconnected [ 497.227279][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.299104][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.665564][ T9333] team0: Port device team_slave_0 added [ 497.678978][ T9333] team0: Port device team_slave_1 added [ 498.074462][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.074481][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.074512][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.084016][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.084034][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.084061][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.451979][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 498.568664][ T9333] hsr_slave_0: entered promiscuous mode [ 498.573461][ T9333] hsr_slave_1: entered promiscuous mode [ 498.574487][ T9333] debugfs: 'hsr0' already exists in 'hsr' [ 498.574512][ T9333] Cannot create hsr debugfs directory [ 500.585763][ T9085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 500.867879][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.873629][ T9085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.017568][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.030059][ T9085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.208484][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.226281][ T9085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.292119][ T9085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.771800][ T9112] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 501.922651][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.935760][ T9112] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 501.993010][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.012567][ T9112] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 502.108334][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.133590][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.159984][ T9112] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 502.298862][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.824207][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 503.318027][ T9085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.543434][ T9105] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 503.681525][ T9105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.780157][ T9105] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 503.868183][ T9105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.435828][ T9105] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 504.460359][ T9105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.488080][ T9105] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 504.565773][ T9105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.603923][ T9085] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.887886][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.888094][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.937472][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.938340][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.763989][ T5140] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 508.267710][ T9502] trusted_key: encrypted_key: insufficient parameters specified [ 508.280726][ T9112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.517902][ T9112] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.661086][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.661294][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.880649][ T56] bridge_slave_1: left allmulticast mode [ 508.880685][ T56] bridge_slave_1: left promiscuous mode [ 508.880976][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.961945][ T56] bridge_slave_0: left allmulticast mode [ 508.961981][ T56] bridge_slave_0: left promiscuous mode [ 508.962251][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.920431][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.982659][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.023035][ T56] bond0 (unregistering): Released all slaves [ 510.056096][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.056228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.471907][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.798484][ T56] hsr_slave_0: left promiscuous mode [ 510.829690][ T56] hsr_slave_1: left promiscuous mode [ 510.831295][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.880499][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.831545][ T56] team0 (unregistering): Port device team_slave_1 removed [ 511.882617][ T56] team0 (unregistering): Port device team_slave_0 removed [ 512.391136][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.618216][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.660742][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.666653][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.695290][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.696204][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.872826][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.872977][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.945295][ T9333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 514.448708][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.547631][ T9333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 514.593893][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.789042][ T5140] Bluetooth: hci1: command tx timeout [ 514.993810][ T9560] trusted_key: encrypted_key: insufficient parameters specified [ 515.495878][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.496045][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.500660][ T9333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 515.612672][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.173947][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.197979][ T9333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 516.266508][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.277667][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.289017][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.299081][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.421819][ T9520] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 516.474975][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.572691][ T9520] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.572723][ T9520] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 516.572778][ T9520] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 516.576002][ T9520] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.576035][ T9520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.576057][ T9520] usb 5-1: Product: syz [ 516.576072][ T9520] usb 5-1: Manufacturer: syz [ 516.576088][ T9520] usb 5-1: SerialNumber: syz [ 516.729894][ T9520] cdc_ncm 5-1:1.0: skipping garbage [ 516.729919][ T9520] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 516.729967][ T9520] cdc_ncm 5-1:1.0: bind() failure [ 516.867815][ T5140] Bluetooth: hci1: command tx timeout [ 516.987590][ T9] usb 5-1: USB disconnect, device number 15 [ 517.516403][ T5140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 517.565565][ T5140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 517.577256][ T5140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 517.607238][ T5140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 517.620055][ T5140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 518.519756][ T5140] Bluetooth: hci0: command tx timeout [ 518.919721][ T5140] Bluetooth: hci1: command tx timeout [ 519.721869][ T5140] Bluetooth: hci6: command tx timeout [ 520.599642][ T5140] Bluetooth: hci0: command tx timeout [ 521.000117][ T5140] Bluetooth: hci1: command tx timeout [ 522.064315][ T5140] Bluetooth: hci6: command tx timeout [ 523.177542][ T5140] Bluetooth: hci0: command tx timeout [ 523.991311][ T9639] trusted_key: encrypted_key: insufficient parameters specified [ 524.119717][ T5140] Bluetooth: hci6: command tx timeout [ 525.039114][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 525.070437][ T9551] chnl_net:caif_netlink_parms(): no params data found [ 525.239973][ T5140] Bluetooth: hci0: command tx timeout [ 525.890867][ T5903] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 526.059941][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 526.065219][ T5903] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 526.065252][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.065272][ T5903] usb 5-1: Product: syz [ 526.065286][ T5903] usb 5-1: Manufacturer: syz [ 526.065300][ T5903] usb 5-1: SerialNumber: syz [ 526.132660][ T5903] usb 5-1: config 0 descriptor?? [ 526.148740][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.245853][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.246053][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.246321][ T9569] bridge_slave_0: entered allmulticast mode [ 526.273793][ T9569] bridge_slave_0: entered promiscuous mode [ 526.281298][ T5140] Bluetooth: hci6: command tx timeout [ 526.324292][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.324597][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.325197][ T9551] bridge_slave_0: entered allmulticast mode [ 526.336631][ T9551] bridge_slave_0: entered promiscuous mode [ 526.558800][ T5903] airspy 5-1:0.0: Board ID: 00 [ 526.558827][ T5903] airspy 5-1:0.0: Firmware version: [ 526.773916][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.774064][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.774345][ T9569] bridge_slave_1: entered allmulticast mode [ 526.805834][ T9569] bridge_slave_1: entered promiscuous mode [ 526.837834][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.837975][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.838249][ T9551] bridge_slave_1: entered allmulticast mode [ 526.863264][ T9551] bridge_slave_1: entered promiscuous mode [ 526.936157][ T9585] chnl_net:caif_netlink_parms(): no params data found [ 527.164413][ T5903] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 527.166758][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.270500][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.292194][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.318631][ T5903] airspy 5-1:0.0: Registered as swradio24 [ 527.318657][ T5903] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 527.364327][ T5903] usb 5-1: USB disconnect, device number 16 [ 527.471713][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.959105][ T9706] binder: BINDER_SET_CONTEXT_MGR already set [ 527.959124][ T9706] binder: 9705:9706 ioctl 4018620d 200000000040 returned -16 [ 528.021886][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.029416][ T9569] team0: Port device team_slave_0 added [ 528.137467][ T9551] team0: Port device team_slave_0 added [ 528.194871][ T9569] team0: Port device team_slave_1 added [ 528.251662][ T9551] team0: Port device team_slave_1 added [ 530.815202][ T9726] trusted_key: encrypted_key: insufficient parameters specified [ 532.176315][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.176505][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.176801][ T9585] bridge_slave_0: entered allmulticast mode [ 532.179288][ T9585] bridge_slave_0: entered promiscuous mode [ 532.210514][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.210607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.345432][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.345452][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.345479][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.415371][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.415530][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.415821][ T9585] bridge_slave_1: entered allmulticast mode [ 532.427544][ T9585] bridge_slave_1: entered promiscuous mode [ 532.449394][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.449411][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.449436][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.480541][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.480558][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.480585][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.823503][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.823523][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.823569][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.970204][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.970573][ T1540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.018474][ T9585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.057594][ T9585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.537656][ T9569] hsr_slave_0: entered promiscuous mode [ 533.538558][ T9569] hsr_slave_1: entered promiscuous mode [ 533.539177][ T9569] debugfs: 'hsr0' already exists in 'hsr' [ 533.539194][ T9569] Cannot create hsr debugfs directory [ 533.564584][ T5954] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 533.607326][ T9585] team0: Port device team_slave_0 added [ 533.627602][ T9551] hsr_slave_0: entered promiscuous mode [ 533.629288][ T9551] hsr_slave_1: entered promiscuous mode [ 533.631420][ T9551] debugfs: 'hsr0' already exists in 'hsr' [ 533.633911][ T9551] Cannot create hsr debugfs directory [ 533.644325][ T9585] team0: Port device team_slave_1 added [ 533.689671][ T5954] usb 5-1: device descriptor read/64, error -71 [ 533.959898][ T5954] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 534.089626][ T5954] usb 5-1: device descriptor read/64, error -71 [ 534.139393][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.139413][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.139444][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.221835][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.221855][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.221886][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.280647][ T5954] usb usb5-port1: attempt power cycle [ 534.648776][ T9585] hsr_slave_0: entered promiscuous mode [ 534.652386][ T9585] hsr_slave_1: entered promiscuous mode [ 534.653325][ T9585] debugfs: 'hsr0' already exists in 'hsr' [ 534.653349][ T9585] Cannot create hsr debugfs directory [ 534.669809][ T5954] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 534.710318][ T5954] usb 5-1: device descriptor read/8, error -71 [ 534.949958][ T5954] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 534.975265][ T5954] usb 5-1: device descriptor read/8, error -71 [ 535.080208][ T5954] usb usb5-port1: unable to enumerate USB device [ 535.440575][ T56] bridge_slave_1: left allmulticast mode [ 535.440598][ T56] bridge_slave_1: left promiscuous mode [ 535.440802][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.501494][ T56] bridge_slave_0: left allmulticast mode [ 535.501536][ T56] bridge_slave_0: left promiscuous mode [ 535.501808][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.659969][ T56] bridge_slave_1: left allmulticast mode [ 535.660005][ T56] bridge_slave_1: left promiscuous mode [ 535.660286][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.723232][ T56] bridge_slave_0: left allmulticast mode [ 535.723267][ T56] bridge_slave_0: left promiscuous mode [ 535.723558][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.412685][ T9770] binder: BINDER_SET_CONTEXT_MGR already set [ 536.412703][ T9770] binder: 9769:9770 ioctl 4018620d 200000000040 returned -16 [ 536.620593][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.688188][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.702368][ T56] bond0 (unregistering): Released all slaves [ 537.210408][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.291901][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.331970][ T56] bond0 (unregistering): Released all slaves [ 539.639890][ T56] hsr_slave_0: left promiscuous mode [ 539.661008][ T56] hsr_slave_1: left promiscuous mode [ 539.661858][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.702912][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.861348][ T56] hsr_slave_0: left promiscuous mode [ 539.881404][ T56] hsr_slave_1: left promiscuous mode [ 539.882653][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.921956][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.472395][ T56] team0 (unregistering): Port device team_slave_1 removed [ 540.532992][ T56] team0 (unregistering): Port device team_slave_0 removed [ 541.094760][ T56] team0 (unregistering): Port device team_slave_1 removed [ 541.153044][ T56] team0 (unregistering): Port device team_slave_0 removed [ 541.504335][ T9784] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1023'. [ 541.704381][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.780033][ T5903] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 541.957567][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.957607][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.957651][ T5903] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 541.957677][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.041789][ T5903] usb 5-1: config 0 descriptor?? [ 542.913927][ T9784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1023'. [ 542.961289][ T9784] netlink: 'syz.4.1023': attribute type 30 has an invalid length. [ 542.991663][ T5903] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 543.167910][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.168532][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.222910][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.263567][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.430893][ T5903] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 543.487449][ T5903] usb 5-1: USB disconnect, device number 21 [ 543.850588][ T5485] 8021q: adding VLAN 0 to HW filter on device eth13 [ 543.851249][ T9333] veth0_vlan: entered promiscuous mode [ 543.914221][ T9333] veth1_vlan: entered promiscuous mode [ 544.715743][ T9333] veth0_macvtap: entered promiscuous mode [ 544.737361][ T9333] veth1_macvtap: entered promiscuous mode [ 545.483623][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 545.525159][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 545.535161][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 545.543759][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 545.551807][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.844934][ T5485] 8021q: adding VLAN 0 to HW filter on device eth14 [ 547.721106][ T5140] Bluetooth: hci2: command tx timeout [ 548.959838][ T9832] chnl_net:caif_netlink_parms(): no params data found [ 549.230363][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.230507][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.230784][ T9832] bridge_slave_0: entered allmulticast mode [ 549.239240][ T9832] bridge_slave_0: entered promiscuous mode [ 549.280318][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.280398][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.280838][ T9832] bridge_slave_1: entered allmulticast mode [ 549.283218][ T9832] bridge_slave_1: entered promiscuous mode [ 549.388443][ T9569] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.434397][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.438633][ T9832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.466887][ T9832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.466982][ T9569] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.577937][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.607599][ T9569] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.644623][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.799589][ T5140] Bluetooth: hci2: command tx timeout [ 549.918498][ T9569] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 549.935403][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.938215][ T9832] team0: Port device team_slave_0 added [ 549.962179][ T9832] team0: Port device team_slave_1 added [ 549.976711][ T819] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 550.111625][ T819] usb 5-1: device descriptor read/64, error -71 [ 550.241538][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.241560][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.241591][ T9832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.316197][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.316212][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.316230][ T9832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.349914][ T819] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 550.522332][ T819] usb 5-1: device descriptor read/64, error -71 [ 550.541068][ T9832] hsr_slave_0: entered promiscuous mode [ 550.553356][ T9832] hsr_slave_1: entered promiscuous mode [ 550.555885][ T9832] debugfs: 'hsr0' already exists in 'hsr' [ 550.555915][ T9832] Cannot create hsr debugfs directory [ 550.566764][ T9551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 550.644031][ T819] usb usb5-port1: attempt power cycle [ 550.663535][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.790095][ T3627] bridge_slave_1: left allmulticast mode [ 550.790120][ T3627] bridge_slave_1: left promiscuous mode [ 550.790346][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.851944][ T3627] bridge_slave_0: left allmulticast mode [ 550.851969][ T3627] bridge_slave_0: left promiscuous mode [ 550.852160][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.989838][ T819] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 550.990547][ T3627] bridge_slave_1: left allmulticast mode [ 550.990576][ T3627] bridge_slave_1: left promiscuous mode [ 550.990892][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.010323][ T819] usb 5-1: device descriptor read/8, error -71 [ 551.050914][ T3627] bridge_slave_0: left allmulticast mode [ 551.050938][ T3627] bridge_slave_0: left promiscuous mode [ 551.051149][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.249848][ T819] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 551.282405][ T819] usb 5-1: device descriptor read/8, error -71 [ 551.390515][ T819] usb usb5-port1: unable to enumerate USB device [ 551.871168][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.879759][ T5140] Bluetooth: hci2: command tx timeout [ 551.950496][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.976466][ T3627] bond0 (unregistering): Released all slaves [ 552.490497][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.551794][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.611633][ T3627] bond0 (unregistering): Released all slaves [ 552.633164][ T9551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.727101][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.026268][ T9551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 553.053114][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.123987][ T9551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 553.182696][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.670366][ T3627] hsr_slave_0: left promiscuous mode [ 553.689772][ T3627] hsr_slave_1: left promiscuous mode [ 553.690682][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.735592][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.889819][ T3627] hsr_slave_0: left promiscuous mode [ 553.930928][ T3627] hsr_slave_1: left promiscuous mode [ 553.940326][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.960596][ T5140] Bluetooth: hci2: command tx timeout [ 553.983573][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.082428][ T3627] veth1_macvtap: left promiscuous mode [ 554.082522][ T3627] veth0_macvtap: left promiscuous mode [ 554.086801][ T3627] veth1_vlan: left promiscuous mode [ 554.086912][ T3627] veth0_vlan: left promiscuous mode [ 554.893769][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 554.951637][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 555.493081][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 555.540390][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 556.125110][ T9585] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 556.166066][ T9585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.187787][ T9585] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 556.268262][ T9585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.330764][ T9585] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 556.413914][ T9585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.429046][ T9585] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 556.473417][ T9585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.932319][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.329256][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.329989][ T9789] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 557.386560][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.386703][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.469821][ T9789] usb 5-1: device descriptor read/64, error -71 [ 557.500953][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.501180][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.554000][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.779733][ T9789] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 557.808542][ T9551] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.899040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.899176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.919623][ T9789] usb 5-1: device descriptor read/64, error -71 [ 557.949309][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.968799][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.968929][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.039243][ T9789] usb usb5-port1: attempt power cycle [ 558.359399][ T9585] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.420581][ T9789] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 558.449573][ T9789] usb 5-1: device descriptor read/8, error -71 [ 558.485665][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.485828][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.502027][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.502235][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.689743][ T9789] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 558.721135][ T9789] usb 5-1: device descriptor read/8, error -71 [ 558.830291][ T9789] usb usb5-port1: unable to enumerate USB device [ 559.508814][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.526106][ T9832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 559.611274][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.618440][ T9832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 559.697859][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.717550][ T9832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 559.767156][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.827347][ T9832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.865346][ T9832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.123385][ T9551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.892325][ T9569] veth0_vlan: entered promiscuous mode [ 560.955018][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.988743][ T9569] veth1_vlan: entered promiscuous mode [ 561.068568][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.108090][ T9832] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.155222][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.155471][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.210195][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.210398][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.229731][ T819] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 561.379626][ T819] usb 5-1: Using ep0 maxpacket: 32 [ 561.382465][ T819] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 561.382498][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.425062][ T9569] veth0_macvtap: entered promiscuous mode [ 561.465850][ T9569] veth1_macvtap: entered promiscuous mode [ 561.524957][ T819] usb 5-1: config 0 descriptor?? [ 561.548927][ T819] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 561.767623][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.843837][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.918609][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.937604][ T56] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.978173][ T9551] veth0_vlan: entered promiscuous mode [ 561.989380][ T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.056172][ T56] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.375356][ T9551] veth1_vlan: entered promiscuous mode [ 562.987007][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.987031][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.438666][ T819] gspca_vc032x: reg_r err -32 [ 563.438686][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438697][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438705][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438714][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438721][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438730][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438738][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438748][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438758][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438766][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438775][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438785][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438796][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438806][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438815][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438823][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438832][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438839][ T819] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.438848][ T819] gspca_vc032x: Unknown sensor... [ 563.438930][ T819] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 563.544775][ T9551] veth0_macvtap: entered promiscuous mode [ 563.550350][ T9585] veth0_vlan: entered promiscuous mode [ 563.568993][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.610564][ T9551] veth1_macvtap: entered promiscuous mode [ 563.612269][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.612291][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.658492][ T9585] veth1_vlan: entered promiscuous mode [ 563.708654][ T9832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.791565][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.826929][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.920068][ T1462] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.925813][ T3627] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.926333][ T3627] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.931943][ T3627] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.019259][ T9585] veth0_macvtap: entered promiscuous mode [ 564.084277][ T9992] netlink: 'syz.8.848': attribute type 2 has an invalid length. [ 564.107991][ T9585] veth1_macvtap: entered promiscuous mode [ 564.547696][ T820] usb 5-1: USB disconnect, device number 30 [ 565.070651][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.166419][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.236654][ T820] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 565.346247][ T101] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.355031][ T101] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.374157][ T101] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.374645][ T1497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.374666][ T1497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.489677][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 565.493711][ T820] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 565.493743][ T820] usb 5-1: config 0 has no interface number 0 [ 565.493782][ T820] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 565.493799][ T820] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 565.498411][ T820] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 565.498537][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.498551][ T820] usb 5-1: Product: syz [ 565.498560][ T820] usb 5-1: Manufacturer: syz [ 565.498569][ T820] usb 5-1: SerialNumber: syz [ 565.508256][ T101] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.562038][ T820] usb 5-1: config 0 descriptor?? [ 565.590356][ T9999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.590796][ T9999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.816208][ T9999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.816346][ T9999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.967542][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.967564][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.018079][ T820] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 566.222411][ T820] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 566.222446][ T820] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 566.222777][ T820] asix 5-1:0.34: probe with driver asix failed with error -61 [ 566.535449][ T9832] veth0_vlan: entered promiscuous mode [ 567.008964][ T9832] veth1_vlan: entered promiscuous mode [ 567.069592][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.069616][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.119602][ T5905] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 567.249656][ T5905] usb 9-1: device descriptor read/64, error -71 [ 567.319159][ T1497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.319184][ T1497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.461436][ T9832] veth0_macvtap: entered promiscuous mode [ 567.483605][ T9832] veth1_macvtap: entered promiscuous mode [ 567.489716][ T5905] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 567.620065][ T5905] usb 9-1: device descriptor read/64, error -71 [ 567.626496][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.730127][ T5905] usb usb9-port1: attempt power cycle [ 567.738306][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.798758][ T1497] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.882271][ T9520] usb 5-1: USB disconnect, device number 31 [ 567.895948][ T1497] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.911903][ T1497] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.932135][ T1497] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.200344][ T5905] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 568.224967][ T5905] usb 9-1: device descriptor read/8, error -71 [ 568.472713][ T5905] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 568.490472][ T5905] usb 9-1: device descriptor read/8, error -71 [ 568.600114][ T5905] usb usb9-port1: unable to enumerate USB device [ 569.392792][ T1540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.392809][ T1540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.864423][ T1497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.864451][ T1497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.260657][ T5905] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 570.389640][T10029] netlink: 'syz.8.1051': attribute type 2 has an invalid length. [ 570.448341][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.448381][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 570.448412][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 570.448442][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.448489][ T5905] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.448515][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.508500][ C0] [ 570.508511][ C0] ====================================================== [ 570.508519][ C0] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 570.508527][ C0] syzkaller #0 Not tainted [ 570.508537][ C0] ------------------------------------------------------ [ 570.508544][ C0] kworker/0:9/9790 is trying to acquire lock: [ 570.508555][ C0] ffff8880648cae60 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 570.508626][ C0] [ 570.508626][ C0] but task is already holding lock: [ 570.508633][ C0] ffff8880648cda20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 570.508676][ C0] [ 570.508676][ C0] which lock already depends on the new lock. [ 570.508676][ C0] [ 570.508683][ C0] [ 570.508683][ C0] the existing dependency chain (in reverse order) is: [ 570.508689][ C0] [ 570.508689][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 570.508714][ C0] rt_spin_lock+0x83/0x400 [ 570.508741][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 570.508762][ C0] phonet_rcv+0x781/0xc40 [ 570.508786][ C0] process_backlog+0x5e1/0xc60 [ 570.508809][ C0] __napi_poll+0xab/0x550 [ 570.508828][ C0] net_rx_action+0x696/0xe00 [ 570.508850][ C0] handle_softirqs+0x1de/0x6d0 [ 570.508875][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 570.508899][ C0] netif_rx+0xb9/0xf0 [ 570.508915][ C0] pn_send+0x62a/0x8e0 [ 570.508937][ C0] pn_skb_send+0x218/0x510 [ 570.508959][ C0] pipe_snd_status+0x1f1/0x320 [ 570.508983][ C0] pipe_do_rcv+0xf15/0x16a0 [ 570.508998][ C0] __sk_receive_skb+0x962/0x9e0 [ 570.509020][ C0] pep_do_rcv+0x685/0xaa0 [ 570.509034][ C0] __release_sock+0x2a9/0x3d0 [ 570.509051][ C0] release_sock+0x1be/0x290 [ 570.509072][ C0] pep_sock_accept+0xd47/0x11e0 [ 570.509097][ C0] pn_socket_accept+0xc1/0x310 [ 570.509117][ C0] do_accept+0x52b/0x760 [ 570.509140][ C0] __sys_accept4+0x139/0x230 [ 570.509162][ C0] __x64_sys_accept4+0x9a/0xb0 [ 570.509185][ C0] do_syscall_64+0x15f/0xf80 [ 570.509204][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.509221][ C0] [ 570.509221][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 570.509249][ C0] __lock_acquire+0x15a5/0x2cf0 [ 570.509269][ C0] lock_acquire+0x106/0x350 [ 570.509287][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 570.509311][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 570.509332][ C0] pep_do_rcv+0x685/0xaa0 [ 570.509346][ C0] __sk_receive_skb+0x962/0x9e0 [ 570.509367][ C0] phonet_rcv+0x781/0xc40 [ 570.509389][ C0] process_backlog+0x5e1/0xc60 [ 570.509410][ C0] __napi_poll+0xab/0x550 [ 570.509429][ C0] net_rx_action+0x696/0xe00 [ 570.509456][ C0] handle_softirqs+0x1de/0x6d0 [ 570.509481][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 570.509507][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 570.509527][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 570.509544][ C0] process_scheduled_works+0xb5d/0x1860 [ 570.509580][ C0] worker_thread+0xa53/0xfc0 [ 570.509597][ C0] kthread+0x388/0x470 [ 570.509615][ C0] ret_from_fork+0x514/0xb70 [ 570.509631][ C0] ret_from_fork_asm+0x1a/0x30 [ 570.509650][ C0] [ 570.509650][ C0] other info that might help us debug this: [ 570.509650][ C0] [ 570.509656][ C0] Possible unsafe locking scenario: [ 570.509656][ C0] [ 570.509662][ C0] CPU0 CPU1 [ 570.509667][ C0] ---- ---- [ 570.509673][ C0] lock(slock-AF_PHONET); [ 570.509687][ C0] lock(slock-AF_PHONET/1); [ 570.509705][ C0] lock(slock-AF_PHONET); [ 570.509719][ C0] lock(slock-AF_PHONET/1); [ 570.509734][ C0] [ 570.509734][ C0] *** DEADLOCK *** [ 570.509734][ C0] [ 570.509740][ C0] 7 locks held by kworker/0:9/9790: [ 570.509752][ C0] #0: ffff888057a26d38 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 570.509810][ C0] #1: ffffc90004247c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 570.509861][ C0] #2: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 570.509912][ C0] #3: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 570.509959][ C0] #4: ffff8880648cda20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 570.510007][ C0] #5: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 570.510056][ C0] #6: ffff8880648cdad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 570.510105][ C0] [ 570.510105][ C0] stack backtrace: [ 570.510116][ C0] CPU: 0 UID: 0 PID: 9790 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 570.510137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 570.510150][ C0] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 570.510169][ C0] Call Trace: [ 570.510176][ C0] [ 570.510184][ C0] dump_stack_lvl+0xe8/0x150 [ 570.510212][ C0] print_circular_bug+0x2e1/0x300 [ 570.510239][ C0] check_noncircular+0x12e/0x150 [ 570.510285][ C0] __lock_acquire+0x15a5/0x2cf0 [ 570.510308][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 570.510333][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 570.510355][ C0] lock_acquire+0x106/0x350 [ 570.510375][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 570.510399][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 570.510421][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 570.510446][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 570.510469][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 570.510487][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 570.510507][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 570.510534][ C0] ? rt_spin_lock+0x1e0/0x400 [ 570.510561][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 570.510596][ C0] pep_do_rcv+0x685/0xaa0 [ 570.510613][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 570.510633][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 570.510649][ C0] ? phonet_rcv+0x781/0xc40 [ 570.510673][ C0] __sk_receive_skb+0x962/0x9e0 [ 570.510698][ C0] phonet_rcv+0x781/0xc40 [ 570.510722][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 570.510751][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 570.510778][ C0] ? process_backlog+0x271/0xc60 [ 570.510801][ C0] ? process_backlog+0x271/0xc60 [ 570.510823][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 570.510848][ C0] process_backlog+0x5e1/0xc60 [ 570.510877][ C0] __napi_poll+0xab/0x550 [ 570.510899][ C0] net_rx_action+0x696/0xe00 [ 570.510927][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 570.510950][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 570.510973][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 570.511003][ C0] handle_softirqs+0x1de/0x6d0 [ 570.511033][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 570.511060][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 570.511079][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 570.511101][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 570.511122][ C0] ? process_scheduled_works+0xa70/0x1860 [ 570.511150][ C0] process_scheduled_works+0xb5d/0x1860 [ 570.511187][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 570.511216][ C0] ? assign_work+0x3d5/0x5e0 [ 570.511243][ C0] worker_thread+0xa53/0xfc0 [ 570.511268][ C0] kthread+0x388/0x470 [ 570.511292][ C0] ? __pfx_worker_thread+0x10/0x10 [ 570.511308][ C0] ? __pfx_kthread+0x10/0x10 [ 570.511328][ C0] ret_from_fork+0x514/0xb70 [ 570.511346][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 570.511363][ C0] ? __switch_to+0xc79/0x1410 [ 570.511387][ C0] ? __pfx_kthread+0x10/0x10 [ 570.511409][ C0] ret_from_fork_asm+0x1a/0x30 [ 570.511435][ C0] [ 570.707921][ T5905] usb 8-1: config 0 descriptor?? [ 570.708791][T10027] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 572.692373][ T5905] usbhid 8-1:0.0: can't add hid device: -71 [ 572.692638][ T5905] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 572.752757][ T5905] usb 8-1: USB disconnect, device number 2 [ 573.481942][ T101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.701312][ T101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.940843][ T101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.152314][ T101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.709945][ T101] bridge_slave_1: left allmulticast mode [ 574.709966][ T101] bridge_slave_1: left promiscuous mode [ 574.710087][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.770040][ T101] bridge_slave_0: left allmulticast mode [ 574.770060][ T101] bridge_slave_0: left promiscuous mode [ 574.770197][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.280236][ T101] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 575.520995][ T101] bond2 (unregistering): (slave bridge1): Releasing active interface [ 575.650029][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.730059][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.770934][ T101] bond0 (unregistering): Released all slaves [ 575.773637][ T101] bond1 (unregistering): Released all slaves [ 575.778051][ T101] bond2 (unregistering): Released all slaves [ 575.802047][ T5485] 8021q: adding VLAN 0 to HW filter on device eth13 [ 576.211185][ T5485] 8021q: adding VLAN 0 to HW filter on device eth14 [ 576.531954][ T5485] 8021q: adding VLAN 0 to HW filter on device eth15 [ 576.871850][ T5485] 8021q: adding VLAN 0 to HW filter on device eth16 [ 577.069691][ T101] hsr_slave_0: left promiscuous mode [ 577.110578][ T101] hsr_slave_1: left promiscuous mode [ 577.111057][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.111073][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.131788][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.131814][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.210869][ T101] veth1_macvtap: left promiscuous mode [ 577.210912][ T101] veth0_macvtap: left promiscuous mode [ 577.210981][ T101] veth1_vlan: left promiscuous mode [ 577.211029][ T101] veth0_vlan: left promiscuous mode [ 577.810042][ T101] team0 (unregistering): Port device team_slave_1 removed [ 577.853135][ T101] team0 (unregistering): Port device team_slave_0 removed [ 579.210927][ T101] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.401208][ T101] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.590696][ T101] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.803731][ T101] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.110838][ T101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.362191][ T101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.416810][ T5485] 8021q: adding VLAN 0 to HW filter on device eth17