last executing test programs: 8m12.503021732s ago: executing program 4 (id=5): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000006c0)=ANY=[@ANYBLOB="966b7608a031"]) 8m11.667657616s ago: executing program 0 (id=1): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 8m11.359209276s ago: executing program 4 (id=8): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000004c0)=@in4={0x21, 0x1, 0x2, 0x20, {0x2, 0x4e23, @private=0xa010102}}, 0x24) 8m10.375427304s ago: executing program 4 (id=9): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000340)) 8m9.1631239s ago: executing program 4 (id=14): add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x6) connect$l2tp(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x514, &(0x7f0000000640)={0x0, 0xdda6, 0x2, 0x503fa, 0x8100014e}) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0xa50003d1) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7m56.188472692s ago: executing program 32 (id=1): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 7m53.69160415s ago: executing program 33 (id=14): add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x6) connect$l2tp(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x514, &(0x7f0000000640)={0x0, 0xdda6, 0x2, 0x503fa, 0x8100014e}) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0xa50003d1) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7m45.540986882s ago: executing program 1 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="111102003188000020001280080001007674690014000280080005000a01010108000100", @ANYRES32, @ANYBLOB="fefc54da6f626bf9450d1911c20564d0401b80362d346623810c52c47c3f5503fe457babbaf07da0f3e7db5505418af3144db46d5f6c4a7949eafe09f1ca303b51492315e970792afdfc64f34a32b0a60e15b9aca5ba06fd718a4a9dafffb8a436173da75cb6f359e80c0f8edd345faa8110867be94c88cb0d43a93a0caff47b7dd9fcedabb8e930448bd4d44d8e5864eb6e11"], 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT], 0xe) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ff14eeab85f3e5242e30c52c8a38594731a110b81828"], 0x17) 7m44.207333375s ago: executing program 1 (id=54): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="4c05950ddb19d1db3e079da63628c7b60f", 0x11}], 0x1}, 0x20000000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 7m42.875663143s ago: executing program 1 (id=55): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m40.720676861s ago: executing program 1 (id=61): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x20, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40), 0x0, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 7m39.502353957s ago: executing program 1 (id=65): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 7m39.203164733s ago: executing program 1 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x14, r1, 0x301, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x20000810) 7m24.146389805s ago: executing program 34 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x14, r1, 0x301, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x20000810) 7m21.244825932s ago: executing program 3 (id=94): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7m16.406739547s ago: executing program 3 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000040)=@OVL_FILEID_V1={0x19, 0xf8, {'\x00', {0x0, 0xfb, 0x16, 0xe, 0x5, "a8371f2efe088557001f00", "f3"}}}, 0x470502) 7m15.937882367s ago: executing program 3 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept(r3, 0x0, 0x0) 7m14.365719571s ago: executing program 3 (id=101): socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x0) 7m14.21630916s ago: executing program 3 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x3}) 7m13.974295581s ago: executing program 3 (id=103): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x27) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) r1 = socket(0x10, 0x803, 0x2) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) shutdown(r3, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) inotify_init() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r5, r6, 0x0) 6m57.761140039s ago: executing program 35 (id=103): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x27) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) r1 = socket(0x10, 0x803, 0x2) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) shutdown(r3, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) inotify_init() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r5, r6, 0x0) 22.91799355s ago: executing program 8 (id=680): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) utimes(0x0, 0x0) 20.80334307s ago: executing program 2 (id=686): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x1, 0x6000006, 0x1c02}, 0x14}}, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 20.586664929s ago: executing program 2 (id=687): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000001c0)={&(0x7f0000000180)=""/5, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) 18.89905578s ago: executing program 8 (id=689): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xf) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 18.180421124s ago: executing program 7 (id=692): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f00000005c0)={0x3c947200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x13074000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) sendfile(r6, r6, 0x0, 0x200000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee8, 0x12, r1, 0xffffe000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 9.535266768s ago: executing program 2 (id=696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0) 9.522362351s ago: executing program 7 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x22) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x8916, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4008d}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.738741412s ago: executing program 8 (id=699): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 7.592592594s ago: executing program 2 (id=700): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40025b0c, 0x0) 6.66274657s ago: executing program 6 (id=702): r0 = socket(0x1e, 0x4, 0x0) connect$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) 6.565009602s ago: executing program 6 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x694f840696960e3d) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 5.791262373s ago: executing program 6 (id=704): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88042, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.596546509s ago: executing program 8 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 5.378761143s ago: executing program 8 (id=706): r0 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1f) 5.26313458s ago: executing program 6 (id=707): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0xa000, 0xa0000000, r3, r4, 0x0, 0x0, 0x1000000}}}, 0x78) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xffffffffffffffda, r2, {0x5}}, 0x18) 5.159576792s ago: executing program 8 (id=708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) close(0xffffffffffffffff) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) 4.825096941s ago: executing program 6 (id=709): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x41) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x1000, 0x66, &(0x7f00000001c0)=""/102}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) memfd_create(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.936268318s ago: executing program 7 (id=710): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 3.883139385s ago: executing program 2 (id=711): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}}) 3.525351756s ago: executing program 2 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}], 0x1, 0x80) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x4, 0x8, 0x8002, 0x20000}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}]}, 0x3c}}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000040010000108000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x480) 1.795633404s ago: executing program 7 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a3100000000050001000700000034000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x694f840696960e3d) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 1.442945161s ago: executing program 7 (id=714): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000071, 0x8, 0x0, 0x0}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x53, 0x7, 0x7fffffff}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r5, 0x1, 0x80000}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111, 0x6}}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xc8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 243.77026ms ago: executing program 7 (id=715): io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) r3 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r5, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x7ddfdbdfafa51cdd, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) close_range(r3, r4, 0x0) openat2(0xffffffffffffff9c, &(0x7f000001bd80)='./file0\x00', &(0x7f000001bdc0)={0xe0100, 0x80, 0x2}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00), 0x0, 0x44800) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0x103, 0x37, 0xfffffdee, 0x79e, 0x2, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 0s ago: executing program 6 (id=716): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0xf3) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) kernel console output (not intermixed with test programs): 45E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 264.841201][ T32] usb 3-1: USB disconnect, device number 12 [ 265.424276][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 266.820151][ T6670] hsr_slave_0: entered promiscuous mode [ 266.822022][ T6670] hsr_slave_1: entered promiscuous mode [ 266.824531][ T6670] debugfs: 'hsr0' already exists in 'hsr' [ 266.824557][ T6670] Cannot create hsr debugfs directory [ 267.213413][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 267.368512][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 267.368551][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.368588][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 267.368612][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.425685][ T10] usb 3-1: config 0 descriptor?? [ 267.430975][ T6801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.039758][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 268.049774][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 268.073172][ T10] usb 3-1: USB disconnect, device number 13 [ 269.875460][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.110733][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.188396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.208561][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.323838][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.323998][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.242615][ T1161] bridge_slave_1: left allmulticast mode [ 271.242646][ T1161] bridge_slave_1: left promiscuous mode [ 271.242933][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.323321][ T1161] bridge_slave_0: left allmulticast mode [ 271.323343][ T1161] bridge_slave_0: left promiscuous mode [ 271.327086][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.934608][ T1161] bridge_slave_1: left allmulticast mode [ 271.934643][ T1161] bridge_slave_1: left promiscuous mode [ 271.934939][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.000194][ T1161] bridge_slave_0: left allmulticast mode [ 272.000226][ T1161] bridge_slave_0: left promiscuous mode [ 272.000562][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.864790][ T1161] bridge_slave_1: left allmulticast mode [ 272.864815][ T1161] bridge_slave_1: left promiscuous mode [ 272.864997][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.140730][ T1161] bridge_slave_0: left allmulticast mode [ 273.140773][ T1161] bridge_slave_0: left promiscuous mode [ 273.150562][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.142774][ T1161] bridge_slave_1: left allmulticast mode [ 274.142798][ T1161] bridge_slave_1: left promiscuous mode [ 274.143019][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.204522][ T1161] bridge_slave_0: left allmulticast mode [ 274.204546][ T1161] bridge_slave_0: left promiscuous mode [ 274.204733][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.014840][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.113285][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.175389][ T1161] bond0 (unregistering): Released all slaves [ 275.623752][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.703035][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.767530][ T1161] bond0 (unregistering): Released all slaves [ 276.243251][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.343421][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.404457][ T1161] bond0 (unregistering): Released all slaves [ 276.653393][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.733290][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.814515][ T1161] bond0 (unregistering): Released all slaves [ 276.847156][ T5489] 8021q: adding VLAN 0 to HW filter on device eth10 [ 277.356545][ T6815] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 277.557963][ T6815] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 277.558001][ T6815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.558038][ T6815] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 277.558063][ T6815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.641068][ T6815] usb 3-1: config 0 descriptor?? [ 277.642089][ T6838] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.112433][ T1161] hsr_slave_0: left promiscuous mode [ 278.176025][ T1161] hsr_slave_1: left promiscuous mode [ 278.184068][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.224534][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.317376][ T6815] usbhid 3-1:0.0: can't add hid device: -71 [ 278.317515][ T6815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.350181][ T6815] usb 3-1: USB disconnect, device number 14 [ 278.436584][ T1161] hsr_slave_0: left promiscuous mode [ 278.472457][ T1161] hsr_slave_1: left promiscuous mode [ 278.473661][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.513604][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.732480][ T1161] hsr_slave_0: left promiscuous mode [ 278.773411][ T1161] hsr_slave_1: left promiscuous mode [ 278.776107][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.813445][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.993951][ T1161] hsr_slave_0: left promiscuous mode [ 279.033241][ T1161] hsr_slave_1: left promiscuous mode [ 279.034464][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.074332][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.060211][ T6866] mmap: syz.2.181 (6866) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.065632][ T6866] 9pnet_fd: Insufficient options for proto=fd [ 281.104035][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 281.154361][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 281.218900][ T6574] Bluetooth: hci3: Frame reassembly failed (-84) [ 281.219338][ T6574] Bluetooth: hci3: Frame reassembly failed (-84) [ 281.219439][ T6574] Bluetooth: hci3: Frame reassembly failed (-84) [ 281.219522][ T6574] Bluetooth: hci3: Frame reassembly failed (-84) [ 281.219603][ T6574] Bluetooth: hci3: Frame reassembly failed (-84) [ 281.219685][ T6574] Bluetooth: hci3: Frame reassembly failed (-84) [ 281.577955][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.595470][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.623151][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.633243][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.635593][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.770749][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 281.822946][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 282.252907][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 282.283316][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 282.683264][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 282.713098][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 282.958652][ T5489] 8021q: adding VLAN 0 to HW filter on device eth11 [ 283.023063][ T38] audit: type=1800 audit(1776604618.657:2): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.181" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 283.023724][ T6867] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 283.023772][ T6867] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 283.023793][ T6867] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 283.055209][ T6867] syz.2.181 (6867) used greatest stack depth: 18232 bytes left [ 283.092865][ T5144] Bluetooth: hci3: command 0x1003 tx timeout [ 283.092909][ T5830] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 283.754342][ T5830] Bluetooth: hci6: command tx timeout [ 284.092518][ T5841] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 284.254198][ T5841] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.254230][ T5841] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.254249][ T5841] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.254312][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.254339][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 284.291699][ T5841] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.291730][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.291749][ T5841] usb 3-1: Product: syz [ 284.291764][ T5841] usb 3-1: Manufacturer: syz [ 284.482156][ T5841] cdc_wdm 3-1:1.0: skipping garbage [ 284.482606][ T5841] cdc_wdm 3-1:1.0: skipping garbage [ 284.637747][ T5841] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 284.637772][ T5841] cdc_wdm 3-1:1.0: Unknown control protocol [ 284.773009][ T6815] usb 3-1: USB disconnect, device number 15 [ 285.316649][ T6640] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 285.499109][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.577901][ T6640] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 285.828088][ T5830] Bluetooth: hci6: command tx timeout [ 285.838648][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.538407][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 286.550497][ T6640] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 286.613613][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.623663][ T5489] 8021q: adding VLAN 0 to HW filter on device eth12 [ 286.677839][ T6640] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 286.759488][ T6640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.863011][ T6901] warning: `syz.2.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 287.799738][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.799944][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.800258][ T6870] bridge_slave_0: entered allmulticast mode [ 287.814379][ T6870] bridge_slave_0: entered promiscuous mode [ 287.893429][ T5830] Bluetooth: hci6: command tx timeout [ 287.909523][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.909880][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.910251][ T6870] bridge_slave_1: entered allmulticast mode [ 287.975061][ T6870] bridge_slave_1: entered promiscuous mode [ 289.448233][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.464280][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.565426][ T6870] team0: Port device team_slave_0 added [ 289.578964][ T6870] team0: Port device team_slave_1 added [ 289.948233][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.948250][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.948275][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.965183][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.965200][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.965225][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.982716][ T5830] Bluetooth: hci6: command tx timeout [ 290.052433][ T6815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 290.154057][ T6870] hsr_slave_0: entered promiscuous mode [ 290.159146][ T6870] hsr_slave_1: entered promiscuous mode [ 290.160951][ T6870] debugfs: 'hsr0' already exists in 'hsr' [ 290.160972][ T6870] Cannot create hsr debugfs directory [ 290.241191][ T6815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.241225][ T6815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.241246][ T6815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.241390][ T6815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.241422][ T6815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.245369][ T6815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.245398][ T6815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.245418][ T6815] usb 3-1: Product: syz [ 290.245432][ T6815] usb 3-1: Manufacturer: syz [ 290.370911][ T6815] cdc_wdm 3-1:1.0: skipping garbage [ 290.370926][ T6815] cdc_wdm 3-1:1.0: skipping garbage [ 290.416812][ T6815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 290.416837][ T6815] cdc_wdm 3-1:1.0: Unknown control protocol [ 290.567203][ T6815] usb 3-1: USB disconnect, device number 16 [ 291.169323][ T5489] 8021q: adding VLAN 0 to HW filter on device eth13 [ 291.397566][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.398076][ T6654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.451516][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.531382][ T6654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.617068][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.670624][ T6654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.731186][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.769011][ T38] audit: type=1804 audit(1776604627.397:3): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.193" name="/newroot/134/file0" dev="tmpfs" ino=738 res=1 errno=0 [ 291.856091][ T6654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.886989][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.011612][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.127733][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.127965][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.185196][ T6670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.221392][ T6670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.241898][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.247769][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.253850][ T6670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.311630][ T6670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.509130][ T6670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 294.623770][ T6670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.649756][ T6670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.704239][ T6670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.148087][ T5489] 8021q: adding VLAN 0 to HW filter on device eth14 [ 295.633008][ T5973] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 295.784779][ T5973] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.784812][ T5973] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 295.784832][ T5973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.784863][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 295.784879][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 295.786539][ T5973] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 295.786567][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.786587][ T5973] usb 3-1: Product: syz [ 295.786601][ T5973] usb 3-1: Manufacturer: syz [ 295.883756][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 295.883779][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 295.896376][ T5973] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 295.896398][ T5973] cdc_wdm 3-1:1.0: Unknown control protocol [ 296.202917][ T37] usb 3-1: USB disconnect, device number 17 [ 296.325852][ T6654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.592474][ T1161] bridge_slave_1: left allmulticast mode [ 296.592508][ T1161] bridge_slave_1: left promiscuous mode [ 296.592828][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.697431][ T1161] bridge_slave_0: left allmulticast mode [ 296.697462][ T1161] bridge_slave_0: left promiscuous mode [ 296.697791][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.783986][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.863359][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.905924][ T1161] bond0 (unregistering): Released all slaves [ 305.989167][ T5489] 8021q: adding VLAN 0 to HW filter on device eth15 [ 306.155707][ T6654] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.175858][ T6670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.207791][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.207986][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.384977][ T1161] hsr_slave_0: left promiscuous mode [ 307.391781][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.449524][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.460782][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.468480][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.479903][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.541142][ T1161] hsr_slave_1: left promiscuous mode [ 307.543898][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.656835][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.264154][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 308.313256][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 308.854702][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.854875][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.993633][ T6870] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.040573][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.178915][ T5144] Bluetooth: hci6: command 0x0405 tx timeout [ 309.372728][ T6870] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.417077][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.439111][ T6670] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.439391][ T6870] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.498839][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.572354][ T6870] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.575716][ T5144] Bluetooth: hci0: command tx timeout [ 309.634843][ T6870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.820706][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.864347][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.893348][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.971454][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.972738][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.160940][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.161051][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.527053][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.535396][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.853271][ T5973] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 311.004925][ T5973] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.004956][ T5973] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.004975][ T5973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.005028][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 311.005049][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 311.008174][ T5973] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.008201][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.008213][ T5973] usb 3-1: Product: syz [ 311.008222][ T5973] usb 3-1: Manufacturer: syz [ 311.061327][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 311.061350][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 311.070114][ T5973] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 311.070136][ T5973] cdc_wdm 3-1:1.0: Unknown control protocol [ 311.345834][ T37] usb 3-1: USB disconnect, device number 18 [ 311.430454][ T5489] 8021q: adding VLAN 0 to HW filter on device eth16 [ 311.652744][ T5144] Bluetooth: hci0: command tx timeout [ 311.880672][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.947105][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.998549][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.002684][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.006343][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.062895][ T5830] Bluetooth: hci1: command tx timeout [ 314.278649][ T5144] Bluetooth: hci0: command tx timeout [ 314.278700][ T5144] Bluetooth: hci1: command tx timeout [ 314.278754][ T5144] Bluetooth: hci2: command tx timeout [ 315.992026][ T7077] CUSE: info not properly terminated [ 316.841112][ T5830] Bluetooth: hci2: command tx timeout [ 316.841152][ T5830] Bluetooth: hci1: command tx timeout [ 316.841177][ T5830] Bluetooth: hci0: command tx timeout [ 317.130585][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 317.452606][ T6815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 317.499994][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.500063][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.642141][ T6815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.642287][ T6815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.642310][ T6815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.642366][ T6815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.642394][ T6815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.655538][ T6815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.655570][ T6815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.655593][ T6815] usb 3-1: Product: syz [ 317.655608][ T6815] usb 3-1: Manufacturer: syz [ 317.776326][ T6815] cdc_wdm 3-1:1.0: skipping garbage [ 317.776350][ T6815] cdc_wdm 3-1:1.0: skipping garbage [ 317.803535][ T6815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 317.803560][ T6815] cdc_wdm 3-1:1.0: Unknown control protocol [ 317.840549][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 318.000244][ T5813] usb 3-1: USB disconnect, device number 19 [ 318.121344][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.121700][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.123728][ T7022] bridge_slave_0: entered allmulticast mode [ 318.127883][ T7022] bridge_slave_0: entered promiscuous mode [ 318.166572][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.166873][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.167204][ T7022] bridge_slave_1: entered allmulticast mode [ 318.171067][ T7022] bridge_slave_1: entered promiscuous mode [ 318.348451][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.392119][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.434088][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.434446][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.439250][ T7026] bridge_slave_0: entered allmulticast mode [ 318.459331][ T7026] bridge_slave_0: entered promiscuous mode [ 318.501569][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.501929][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.517060][ T7026] bridge_slave_1: entered allmulticast mode [ 318.519601][ T7026] bridge_slave_1: entered promiscuous mode [ 318.551066][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.625979][ T7022] team0: Port device team_slave_0 added [ 318.715965][ T7022] team0: Port device team_slave_1 added [ 318.852482][ T5834] Bluetooth: hci1: command tx timeout [ 318.852520][ T5834] Bluetooth: hci2: command tx timeout [ 318.896299][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.978069][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.036252][ T7054] chnl_net:caif_netlink_parms(): no params data found [ 319.051674][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.051686][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.051703][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.222490][ T1246] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 319.392679][ T1246] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 319.392717][ T1246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.392750][ T1246] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 319.392772][ T1246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.399728][ T1246] usb 3-1: config 0 descriptor?? [ 319.400690][ T7094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.497271][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.497292][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.497323][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.758636][ T7026] team0: Port device team_slave_0 added [ 319.812070][ T7026] team0: Port device team_slave_1 added [ 320.039539][ T1246] usbhid 3-1:0.0: can't add hid device: -71 [ 320.039683][ T1246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 320.065237][ T1246] usb 3-1: USB disconnect, device number 20 [ 320.158850][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.261334][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.261348][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.261365][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.341211][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.341276][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.341294][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.560464][ T7022] hsr_slave_0: entered promiscuous mode [ 320.561867][ T7022] hsr_slave_1: entered promiscuous mode [ 320.580706][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.580931][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.690430][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.690669][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.690868][ T7054] bridge_slave_0: entered allmulticast mode [ 320.718972][ T7054] bridge_slave_0: entered promiscuous mode [ 320.943025][ T5830] Bluetooth: hci2: command tx timeout [ 320.973056][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.973240][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.973495][ T7054] bridge_slave_1: entered allmulticast mode [ 320.975755][ T7054] bridge_slave_1: entered promiscuous mode [ 321.009745][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.009860][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.177713][ T7026] hsr_slave_0: entered promiscuous mode [ 321.179335][ T7026] hsr_slave_1: entered promiscuous mode [ 321.180538][ T7026] debugfs: 'hsr0' already exists in 'hsr' [ 321.180564][ T7026] Cannot create hsr debugfs directory [ 321.182788][ T5973] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 321.198479][ T7054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.291044][ T7054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.352489][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 321.355321][ T5973] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 321.355353][ T5973] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.355374][ T5973] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 321.355389][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.416935][ T5973] usb 3-1: config 0 descriptor?? [ 321.625531][ T7054] team0: Port device team_slave_0 added [ 321.834770][ T7054] team0: Port device team_slave_1 added [ 322.154964][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.154983][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.155012][ T7054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.248913][ T5973] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 322.248953][ T5973] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 322.248977][ T5973] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 322.249001][ T5973] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 322.249026][ T5973] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 322.305909][ T5973] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 322.364021][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.364041][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.364070][ T7054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.906742][ T7108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.907444][ T7108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.925642][ T5973] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -110 [ 323.081567][ T6815] usb 3-1: USB disconnect, device number 21 [ 323.212592][ T1161] bridge_slave_1: left allmulticast mode [ 323.212624][ T1161] bridge_slave_1: left promiscuous mode [ 323.212907][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.273657][ T1161] bridge_slave_0: left allmulticast mode [ 323.273681][ T1161] bridge_slave_0: left promiscuous mode [ 323.273893][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.412950][ T1161] bridge_slave_1: left allmulticast mode [ 323.412984][ T1161] bridge_slave_1: left promiscuous mode [ 323.413394][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.483345][ T1161] bridge_slave_0: left allmulticast mode [ 323.483368][ T1161] bridge_slave_0: left promiscuous mode [ 323.483554][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.593888][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.662590][ T1246] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 324.673679][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.703788][ T1161] bond0 (unregistering): Released all slaves [ 324.814456][ T1246] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.814490][ T1246] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 324.814508][ T1246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.814539][ T1246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 324.814555][ T1246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 324.816243][ T1246] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.816278][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.816290][ T1246] usb 3-1: Product: syz [ 324.816299][ T1246] usb 3-1: Manufacturer: syz [ 324.827510][ T1246] cdc_wdm 3-1:1.0: skipping garbage [ 324.827530][ T1246] cdc_wdm 3-1:1.0: skipping garbage [ 324.831187][ T1246] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 324.831208][ T1246] cdc_wdm 3-1:1.0: Unknown control protocol [ 325.029975][ T1246] usb 3-1: USB disconnect, device number 22 [ 325.263605][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.345062][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.365550][ T1161] bond0 (unregistering): Released all slaves [ 325.724634][ T7054] hsr_slave_0: entered promiscuous mode [ 325.726089][ T7054] hsr_slave_1: entered promiscuous mode [ 325.727195][ T7054] debugfs: 'hsr0' already exists in 'hsr' [ 325.727219][ T7054] Cannot create hsr debugfs directory [ 326.024423][ T1161] hsr_slave_0: left promiscuous mode [ 326.063465][ T1161] hsr_slave_1: left promiscuous mode [ 326.064639][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.105242][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.422475][ T1161] hsr_slave_0: left promiscuous mode [ 327.172718][ T1161] hsr_slave_1: left promiscuous mode [ 327.173966][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.213202][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.623638][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 327.643186][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 328.052928][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 328.094505][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 328.682418][ T1246] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 328.880772][ T1246] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 328.880806][ T1246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.880828][ T1246] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 328.880843][ T1246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.929638][ T1246] usb 3-1: config 0 descriptor?? [ 328.931271][ T7125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.409966][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.563124][ T1246] usbhid 3-1:0.0: can't add hid device: -71 [ 329.563264][ T1246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 329.650443][ T1246] usb 3-1: USB disconnect, device number 23 [ 330.832299][ T5973] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 330.869832][ T6870] veth0_vlan: entered promiscuous mode [ 330.975450][ T5489] 8021q: adding VLAN 0 to HW filter on device eth18 [ 330.994848][ T5973] usb 3-1: Using ep0 maxpacket: 8 [ 330.997331][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.997360][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 330.997387][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.997415][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.000597][ T5973] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 331.000628][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.000647][ T5973] usb 3-1: Product: syz [ 331.000661][ T5973] usb 3-1: Manufacturer: syz [ 331.000674][ T5973] usb 3-1: SerialNumber: syz [ 331.095630][ T6870] veth1_vlan: entered promiscuous mode [ 331.124177][ T5973] usb 3-1: config 0 descriptor?? [ 331.176094][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 331.208738][ T5973] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 332.299941][ T6870] veth0_macvtap: entered promiscuous mode [ 332.330977][ T6870] veth1_macvtap: entered promiscuous mode [ 332.956567][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.148199][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.293164][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.295601][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.296205][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.297418][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.487220][ T5973] imon:send_packet: packet tx failed (-71) [ 333.523448][ T5973] imon 3-1:0.0: panel buttons/knobs setup failed [ 333.582511][ T5973] rc_core: IR keymap rc-imon-pad not found [ 333.582536][ T5973] Registered IR keymap rc-empty [ 333.582631][ T5973] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 333.582651][ T5973] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 333.583045][ T5973] imon:send_packet: packet tx failed (-71) [ 333.602502][ T5973] imon 3-1:0.0: remote input dev register failed [ 333.602675][ T5973] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 333.831234][ T5973] imon 3-1:0.0: unable to initialize intf0, err 0 [ 333.831252][ T5973] imon:imon_probe: failed to initialize context! [ 333.831260][ T5973] imon 3-1:0.0: unable to register, err -19 [ 333.873870][ T5973] usb 3-1: USB disconnect, device number 24 [ 334.861267][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.861289][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.018476][ T1246] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 335.189627][ T1246] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.189661][ T1246] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.189682][ T1246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.189741][ T1246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 335.189769][ T1246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 335.219923][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.220168][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.252703][ T1246] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.252747][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.252767][ T1246] usb 3-1: Product: syz [ 335.252783][ T1246] usb 3-1: Manufacturer: syz [ 335.316892][ T1246] cdc_wdm 3-1:1.0: skipping garbage [ 335.316909][ T1246] cdc_wdm 3-1:1.0: skipping garbage [ 335.318623][ T1246] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 335.318643][ T1246] cdc_wdm 3-1:1.0: Unknown control protocol [ 335.392594][ T1161] bridge_slave_1: left allmulticast mode [ 335.392619][ T1161] bridge_slave_1: left promiscuous mode [ 335.392829][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.473959][ T1161] bridge_slave_0: left allmulticast mode [ 335.473983][ T1161] bridge_slave_0: left promiscuous mode [ 335.474193][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.517643][ T818] usb 3-1: USB disconnect, device number 25 [ 336.183595][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.243480][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.264611][ T1161] bond0 (unregistering): Released all slaves [ 338.542301][ T1161] hsr_slave_0: left promiscuous mode [ 338.596466][ T1161] hsr_slave_1: left promiscuous mode [ 338.616495][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.649424][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.210666][ T7195] netlink: 'syz.7.231': attribute type 1 has an invalid length. [ 340.229662][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 340.363395][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 344.297958][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 344.304080][ T7223] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 350.340540][ T7257] syz.2.246 (7257) used greatest stack depth: 17816 bytes left [ 352.409280][ T7022] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 352.496386][ T7022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.500740][ T7022] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 352.585997][ T7022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.589230][ T7022] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 352.800023][ T7022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.830019][ T7022] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 352.925877][ T7275] Bluetooth: MGMT ver 1.23 [ 352.931355][ T7022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.566268][ T7026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.648093][ T7026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.722708][ T7026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.307863][ T7026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.408859][ T7026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.544912][ T7026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.585276][ T7306] loop5: detected capacity change from 0 to 7 [ 356.070355][ T7306] Dev loop5: unable to read RDB block 7 [ 356.070387][ T7306] loop5: unable to read partition table [ 356.070550][ T7306] loop5: partition table beyond EOD, truncated [ 356.070577][ T7306] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.350270][ T7026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.381391][ T7026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.612442][ T1246] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 356.768374][ T1246] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.768408][ T1246] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.768427][ T1246] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.768503][ T1246] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.768531][ T1246] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.771387][ T1246] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.771420][ T1246] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.771443][ T1246] usb 8-1: Product: syz [ 356.771457][ T1246] usb 8-1: Manufacturer: syz [ 356.889045][ T1246] cdc_wdm 8-1:1.0: skipping garbage [ 356.889060][ T1246] cdc_wdm 8-1:1.0: skipping garbage [ 356.949228][ T1246] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 356.949252][ T1246] cdc_wdm 8-1:1.0: Unknown control protocol [ 356.995805][ T5973] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 357.064691][ T1246] usb 8-1: USB disconnect, device number 2 [ 357.163985][ T5973] usb 3-1: Using ep0 maxpacket: 8 [ 357.195038][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.195082][ T5973] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.195098][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.381223][ T5973] usb 3-1: config 0 descriptor?? [ 357.589935][ T7054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.630747][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.648227][ T7054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.653595][ T5973] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 357.694030][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.751826][ T7054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.821475][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.887780][ T7054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.946996][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.977054][ T1246] usb 3-1: USB disconnect, device number 26 [ 358.066522][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.653709][ T7022] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.838124][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.838327][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.986929][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.987158][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.386524][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.284486][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.546884][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.547314][ T6574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.631185][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.631372][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.736125][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.068712][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.293895][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.303347][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.389126][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.389356][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.541217][ T7368] dlm: plock device version mismatch: kernel (1.2.0), user (1.37.4294967295) [ 363.463083][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.972409][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.049493][ T7400] comedi comedi2: fl512: I/O base address not correctly aligned [ 366.106889][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.561489][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.609278][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.659898][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.678655][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.681207][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.863167][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.275'. [ 368.976376][ T7026] veth0_vlan: entered promiscuous mode [ 369.080751][ T7026] veth1_vlan: entered promiscuous mode [ 369.493243][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 370.852446][ T5834] Bluetooth: hci3: command tx timeout [ 370.896822][ T7054] veth0_vlan: entered promiscuous mode [ 372.320234][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.374863][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.378668][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.502620][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.534286][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.937137][ T5830] Bluetooth: hci3: command tx timeout [ 373.503500][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.775219][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.780103][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.804441][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.805933][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.772384][ T5834] Bluetooth: hci0: command tx timeout [ 375.012344][ T5834] Bluetooth: hci3: command tx timeout [ 375.462974][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.284'. [ 377.173172][ T5834] Bluetooth: hci1: command tx timeout [ 377.215576][ T5834] Bluetooth: hci0: command tx timeout [ 377.215616][ T5834] Bluetooth: hci3: command tx timeout [ 379.183502][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.185936][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.290607][ T5830] Bluetooth: hci0: command tx timeout [ 379.290646][ T5830] Bluetooth: hci1: command tx timeout [ 379.811285][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 379.828101][ T7519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.828306][ T7519] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 379.828412][ T7519] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 379.929353][ T7519] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 379.983855][ T7519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.984136][ T7519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.016999][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 380.081196][ T7519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.158465][ T7519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.158565][ T7519] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.321468][ T7519] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.489020][ T7519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.501137][ T7519] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 380.858012][ T7519] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 381.952327][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 381.952339][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 382.123606][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.296319][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.435731][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 384.175087][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 384.372373][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.910663][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 385.412166][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.412636][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.439479][ T7434] bridge_slave_0: entered allmulticast mode [ 385.464374][ T7434] bridge_slave_0: entered promiscuous mode [ 385.546271][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.546605][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.546964][ T7434] bridge_slave_1: entered allmulticast mode [ 385.597854][ T7434] bridge_slave_1: entered promiscuous mode [ 385.628354][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 386.087971][ T1246] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 386.177767][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.263861][ T1246] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 386.263895][ T1246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.283348][ T1246] usb 3-1: config 0 descriptor?? [ 386.297700][ T1246] cp210x 3-1:0.0: cp210x converter detected [ 386.311185][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.398592][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 386.470937][ T7577] tipc: Started in network mode [ 386.471043][ T7577] tipc: Node identity bbbbbb01, cluster identity 4711 [ 386.471396][ T7577] tipc: Enabled bearer , priority 10 [ 386.572610][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.890114][ T1246] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 386.890158][ T1246] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 386.902275][ T67] bridge_slave_1: left allmulticast mode [ 386.902304][ T67] bridge_slave_1: left promiscuous mode [ 386.902604][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.930675][ T1246] usb 3-1: cp210x converter now attached to ttyUSB0 [ 387.126988][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.607651][ T1246] usb 3-1: USB disconnect, device number 27 [ 387.755244][ T1246] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 387.804968][ T1246] cp210x 3-1:0.0: device disconnected [ 387.948087][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 389.027889][ T67] bridge_slave_0: left allmulticast mode [ 389.027923][ T67] bridge_slave_0: left promiscuous mode [ 389.028216][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.249733][ T7594] loop5: detected capacity change from 0 to 7 [ 389.254082][ T7594] Dev loop5: unable to read RDB block 7 [ 389.254128][ T7594] loop5: unable to read partition table [ 389.254571][ T7594] loop5: partition table beyond EOD, truncated [ 389.256240][ T7594] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 389.393030][ T7593] random: crng reseeded on system resumption [ 389.412291][ T7593] Restarting kernel threads ... [ 389.413764][ T7593] Done restarting kernel threads. [ 391.111389][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 392.049113][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.052480][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.060534][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.061605][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.064461][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.138534][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.152221][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.152449][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.153197][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.183301][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.186691][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.190611][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.193590][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.194343][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.219645][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.253440][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.254877][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.255003][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.256073][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.256390][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.257870][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.270272][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.435361][ T7598] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 392.521448][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.504980][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.528819][ T67] bond0 (unregistering): Released all slaves [ 394.042252][ T5911] tipc: Node number set to 3149642497 [ 394.112829][ T7434] team0: Port device team_slave_0 added [ 394.184068][ T7434] team0: Port device team_slave_1 added [ 394.338710][ T67] hsr_slave_0: left promiscuous mode [ 394.381189][ T67] hsr_slave_1: left promiscuous mode [ 394.382010][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.424189][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.455084][ T37] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 394.667043][ T37] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.667080][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.705305][ T37] usb 3-1: config 0 descriptor?? [ 394.769609][ T37] cp210x 3-1:0.0: cp210x converter detected [ 394.997239][ T7634] loop5: detected capacity change from 0 to 7 [ 395.026718][ T7634] Dev loop5: unable to read RDB block 7 [ 395.026767][ T7634] loop5: unable to read partition table [ 395.027013][ T7634] loop5: partition table beyond EOD, truncated [ 395.028758][ T7634] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.168393][ T37] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 395.168427][ T37] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 395.255131][ T37] usb 3-1: cp210x converter now attached to ttyUSB0 [ 395.592044][ T37] usb 3-1: USB disconnect, device number 28 [ 395.601892][ T7636] random: crng reseeded on system resumption [ 395.615155][ T7636] Restarting kernel threads ... [ 395.615909][ T7636] Done restarting kernel threads. [ 395.690943][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 395.716815][ T37] cp210x 3-1:0.0: device disconnected [ 396.293905][ T67] team0 (unregistering): Port device team_slave_1 removed [ 396.337565][ T67] team0 (unregistering): Port device team_slave_0 removed [ 396.892567][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.892587][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.892616][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.893672][ T7464] chnl_net:caif_netlink_parms(): no params data found [ 397.386465][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.386485][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.386518][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.641498][ T7675] loop5: detected capacity change from 0 to 7 [ 398.666506][ T7675] Dev loop5: unable to read RDB block 7 [ 398.666555][ T7675] loop5: unable to read partition table [ 398.666806][ T7675] loop5: partition table beyond EOD, truncated [ 398.666854][ T7675] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 398.840727][ T7434] hsr_slave_0: entered promiscuous mode [ 398.870945][ T7434] hsr_slave_1: entered promiscuous mode [ 399.068317][ T7679] random: crng reseeded on system resumption [ 399.084928][ T7679] Restarting kernel threads ... [ 399.086829][ T7679] Done restarting kernel threads. [ 399.305147][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 399.455280][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.455696][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.471134][ T7464] bridge_slave_0: entered allmulticast mode [ 399.476700][ T7464] bridge_slave_0: entered promiscuous mode [ 399.609203][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.609534][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.610057][ T7464] bridge_slave_1: entered allmulticast mode [ 399.614788][ T7464] bridge_slave_1: entered promiscuous mode [ 400.424746][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.592070][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.081583][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.081955][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.082311][ T7470] bridge_slave_0: entered allmulticast mode [ 402.092261][ T7470] bridge_slave_0: entered promiscuous mode [ 402.101920][ T7464] team0: Port device team_slave_0 added [ 402.455140][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.455565][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.455917][ T7470] bridge_slave_1: entered allmulticast mode [ 402.514303][ T7470] bridge_slave_1: entered promiscuous mode [ 402.543016][ T7464] team0: Port device team_slave_1 added [ 403.135808][ T7724] random: crng reseeded on system resumption [ 403.153524][ T7724] Restarting kernel threads ... [ 403.154771][ T7724] Done restarting kernel threads. [ 404.173998][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.214471][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.214491][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.214522][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.290805][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.294686][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.294699][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.294717][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.453291][ T7741] loop5: detected capacity change from 0 to 7 [ 404.471194][ T7741] Dev loop5: unable to read RDB block 7 [ 404.471223][ T7741] loop5: unable to read partition table [ 404.471365][ T7741] loop5: partition table beyond EOD, truncated [ 404.471397][ T7741] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.190668][ T7771] CUSE: info not properly terminated [ 408.022005][ T7776] random: crng reseeded on system resumption [ 408.049232][ T7776] Restarting kernel threads ... [ 408.051603][ T7776] Done restarting kernel threads. [ 408.903731][ T7470] team0: Port device team_slave_0 added [ 409.198195][ T7786] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 409.431698][ T7470] team0: Port device team_slave_1 added [ 409.623146][ T7464] hsr_slave_0: entered promiscuous mode [ 409.635042][ T7464] hsr_slave_1: entered promiscuous mode [ 409.640999][ T7464] debugfs: 'hsr0' already exists in 'hsr' [ 409.641027][ T7464] Cannot create hsr debugfs directory [ 409.988254][ T7796] sctp: [Deprecated]: syz.2.341 (pid 7796) Use of int in max_burst socket option. [ 409.988254][ T7796] Use struct sctp_assoc_value instead [ 411.104150][ T7809] CUSE: info not properly terminated [ 411.549677][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.549699][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.549730][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.270394][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.270408][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.270426][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.223871][ T7470] hsr_slave_0: entered promiscuous mode [ 413.257935][ T7470] hsr_slave_1: entered promiscuous mode [ 413.267056][ T7470] debugfs: 'hsr0' already exists in 'hsr' [ 413.267086][ T7470] Cannot create hsr debugfs directory [ 414.542253][ T7851] CUSE: info not properly terminated [ 415.692196][ T7857] random: crng reseeded on system resumption [ 417.037184][ T7857] Restarting kernel threads ... [ 417.038562][ T7857] Done restarting kernel threads. [ 417.213051][ T7434] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 417.300098][ T7434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.374686][ T7434] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.429036][ T7434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.958936][ T7903] ======================================================= [ 417.958936][ T7903] WARNING: The mand mount option has been deprecated and [ 417.958936][ T7903] and is ignored by this kernel. Remove the mand [ 417.958936][ T7903] option from the mount to silence this warning. [ 417.958936][ T7903] ======================================================= [ 417.977979][ T7434] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 418.049093][ T7434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.057085][ T7434] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.127665][ T7434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.052047][ T7924] CUSE: info not properly terminated [ 420.977101][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.013569][ T7935] random: crng reseeded on system resumption [ 421.988436][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.241401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.241603][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.509402][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.509582][ T6574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.031227][ T6683] bridge_slave_1: left allmulticast mode [ 423.031259][ T6683] bridge_slave_1: left promiscuous mode [ 423.031549][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.369961][ T7974] CUSE: info not properly terminated [ 423.967212][ T6683] bridge_slave_0: left allmulticast mode [ 423.967243][ T6683] bridge_slave_0: left promiscuous mode [ 423.967495][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.156352][ T6683] bridge_slave_1: left allmulticast mode [ 424.156387][ T6683] bridge_slave_1: left promiscuous mode [ 424.156698][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.217551][ T6683] bridge_slave_0: left allmulticast mode [ 424.217586][ T6683] bridge_slave_0: left promiscuous mode [ 424.217881][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.253647][ T7975] random: crng reseeded on system resumption [ 424.280938][ T7975] Restarting kernel threads ... [ 424.299964][ T7975] Done restarting kernel threads. [ 425.039888][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.125183][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.147610][ T6683] bond0 (unregistering): Released all slaves [ 425.605883][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.691762][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.715623][ T6683] bond0 (unregistering): Released all slaves [ 427.079617][ T6683] hsr_slave_0: left promiscuous mode [ 427.124029][ T6683] hsr_slave_1: left promiscuous mode [ 427.125403][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.166143][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.410962][ T6683] hsr_slave_0: left promiscuous mode [ 427.435101][ T8003] random: crng reseeded on system resumption [ 427.453733][ T6683] hsr_slave_1: left promiscuous mode [ 427.455146][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.481525][ T8003] Restarting kernel threads ... [ 427.482919][ T8003] Done restarting kernel threads. [ 427.497356][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.979042][ T6683] veth0_vlan: left promiscuous mode [ 428.285765][ T8029] CUSE: info not properly terminated [ 428.869636][ T6683] veth1_vlan: left promiscuous mode [ 428.869774][ T6683] veth0_vlan: left promiscuous mode [ 429.420916][ T6683] team0 (unregistering): Port device team_slave_1 removed [ 429.474514][ T6683] team0 (unregistering): Port device team_slave_0 removed [ 429.912698][ T6683] team0 (unregistering): Port device team_slave_1 removed [ 429.944013][ T6683] team0 (unregistering): Port device team_slave_0 removed [ 430.531216][ T6328] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 430.744940][ T6328] usb 3-1: Using ep0 maxpacket: 32 [ 430.750486][ T6328] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 430.750523][ T6328] usb 3-1: config 0 interface 0 has no altsetting 0 [ 430.750558][ T6328] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 430.750580][ T6328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.758386][ T6328] usb 3-1: config 0 descriptor?? [ 431.727651][ T6328] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 431.727710][ T6328] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 431.727738][ T6328] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 431.728222][ T6328] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 431.728253][ T6328] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 431.759462][ T6328] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 432.313174][ T6328] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -110 [ 433.189210][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.231503][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.245114][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.250961][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.255159][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.611877][ T37] usb 3-1: USB disconnect, device number 29 [ 435.491158][ T5489] 8021q: adding VLAN 0 to HW filter on device eth17 [ 435.554905][ T5830] Bluetooth: hci2: command tx timeout [ 436.297039][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.330997][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.342532][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.354708][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.375494][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.532165][ T8090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.572478][ T8090] team0: Port device bond1 added [ 437.809906][ T5834] Bluetooth: hci2: command tx timeout [ 437.982563][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.031648][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.038066][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.040454][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.042119][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.685923][ T8129] CUSE: info not properly terminated [ 439.428312][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 439.463168][ T5834] Bluetooth: hci3: command tx timeout [ 439.999042][ T5834] Bluetooth: hci2: command tx timeout [ 440.255605][ T5834] Bluetooth: hci5: command tx timeout [ 441.630354][ T5834] Bluetooth: hci3: command tx timeout [ 442.235131][ T5834] Bluetooth: hci2: command tx timeout [ 442.488927][ T5834] Bluetooth: hci5: command tx timeout [ 442.526093][ T8167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.169551][ T8184] CUSE: info not properly terminated [ 443.845959][ T5834] Bluetooth: hci3: command tx timeout [ 444.382541][ T8196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.471364][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.471479][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.479686][ T8199] netlink: 44 bytes leftover after parsing attributes in process `syz.7.414'. [ 444.700804][ T5834] Bluetooth: hci5: command tx timeout [ 445.574315][ T8211] overlayfs: failed to clone upperpath [ 446.070939][ T5834] Bluetooth: hci3: command tx timeout [ 446.931183][ T5834] Bluetooth: hci5: command tx timeout [ 447.139476][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.513326][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.514427][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.514799][ T8055] bridge_slave_0: entered allmulticast mode [ 447.546380][ T8055] bridge_slave_0: entered promiscuous mode [ 447.677411][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.677730][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.678043][ T8055] bridge_slave_1: entered allmulticast mode [ 447.705885][ T8055] bridge_slave_1: entered promiscuous mode [ 448.238201][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 449.251398][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.385898][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.566613][ T8055] team0: Port device team_slave_0 added [ 449.608950][ T8055] team0: Port device team_slave_1 added [ 449.869052][ T8257] fuse: fd is not a fuse device [ 449.913625][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.914061][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.914387][ T8091] bridge_slave_0: entered allmulticast mode [ 449.973976][ T8091] bridge_slave_0: entered promiscuous mode [ 450.386342][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.386364][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.386395][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.440575][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.440943][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.441343][ T8091] bridge_slave_1: entered allmulticast mode [ 450.448013][ T8091] bridge_slave_1: entered promiscuous mode [ 450.590774][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.590803][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.590838][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.625377][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.7.438'. [ 450.876584][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.993029][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.993175][ T8274] tipc: Enabling of bearer rejected, failed to enable media [ 451.185906][ T8055] hsr_slave_0: entered promiscuous mode [ 451.192284][ T8055] hsr_slave_1: entered promiscuous mode [ 451.194166][ T8055] debugfs: 'hsr0' already exists in 'hsr' [ 451.194197][ T8055] Cannot create hsr debugfs directory [ 451.304902][ T1040] bridge_slave_1: left allmulticast mode [ 451.304926][ T1040] bridge_slave_1: left promiscuous mode [ 451.305146][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.397122][ T1040] bridge_slave_0: left allmulticast mode [ 451.397147][ T1040] bridge_slave_0: left promiscuous mode [ 451.427128][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.773774][ T8287] syz.7.446 uses obsolete (PF_INET,SOCK_PACKET) [ 452.395131][ T818] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 452.395958][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.483288][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.525373][ T1040] bond0 (unregistering): Released all slaves [ 452.545379][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 452.557884][ T8091] team0: Port device team_slave_0 added [ 452.570260][ T818] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 452.571510][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.571567][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.571596][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.572648][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.572701][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.572729][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.573852][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.573905][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.573932][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.575016][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.575069][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.575096][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.631351][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.631410][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.631436][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.633390][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.633440][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.633475][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.634684][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.634750][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.634775][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.636856][ T818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.636903][ T818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.636929][ T818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.639545][ T818] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 452.639571][ T818] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 452.639591][ T818] usb 3-1: Product: syz [ 452.639605][ T818] usb 3-1: Manufacturer: syz [ 452.639618][ T818] usb 3-1: SerialNumber: syz [ 452.669791][ T818] usb 3-1: config 0 descriptor?? [ 452.724086][ T818] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 453.147237][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 453.422671][ T8091] team0: Port device team_slave_1 added [ 454.147644][ T1040] hsr_slave_0: left promiscuous mode [ 454.169056][ T1040] hsr_slave_1: left promiscuous mode [ 454.170421][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.235150][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.334245][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 455.378147][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 455.585833][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.585854][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.585884][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.797232][ T5841] usb 3-1: USB disconnect, device number 30 [ 455.883945][ T5841] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 455.989464][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.989479][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.989498][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.475563][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.477354][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.477660][ T8120] bridge_slave_0: entered allmulticast mode [ 456.534007][ T8120] bridge_slave_0: entered promiscuous mode [ 456.634368][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.634552][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.637742][ T8120] bridge_slave_1: entered allmulticast mode [ 456.643118][ T8120] bridge_slave_1: entered promiscuous mode [ 456.731068][ T8091] hsr_slave_0: entered promiscuous mode [ 456.739368][ T8091] hsr_slave_1: entered promiscuous mode [ 457.090486][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.461750][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.753830][ T8120] team0: Port device team_slave_0 added [ 457.794889][ T8120] team0: Port device team_slave_1 added [ 458.049936][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.049951][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.049969][ T8120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.119206][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.119220][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.119239][ T8120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.500160][ T8324] kexec: Could not allocate control_code_buffer [ 460.278706][ T8120] hsr_slave_0: entered promiscuous mode [ 460.287475][ T8120] hsr_slave_1: entered promiscuous mode [ 460.289879][ T8120] debugfs: 'hsr0' already exists in 'hsr' [ 460.289908][ T8120] Cannot create hsr debugfs directory [ 462.786924][ T1040] bridge_slave_1: left allmulticast mode [ 462.786956][ T1040] bridge_slave_1: left promiscuous mode [ 462.787274][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.869172][ T1040] bridge_slave_0: left allmulticast mode [ 462.869208][ T1040] bridge_slave_0: left promiscuous mode [ 462.869535][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.016996][ T1040] bridge_slave_1: left allmulticast mode [ 463.017031][ T1040] bridge_slave_1: left promiscuous mode [ 463.017351][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.104202][ T1040] bridge_slave_0: left allmulticast mode [ 463.104237][ T1040] bridge_slave_0: left promiscuous mode [ 463.104538][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.352600][ T8353] netlink: 72 bytes leftover after parsing attributes in process `syz.7.463'. [ 463.469038][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.597857][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.673865][ T1040] bond0 (unregistering): Released all slaves [ 464.270375][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.354859][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.452259][ T1040] bond0 (unregistering): Released all slaves [ 466.158398][ T1040] hsr_slave_0: left promiscuous mode [ 466.203580][ T1040] hsr_slave_1: left promiscuous mode [ 466.206067][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.249918][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.479574][ T1040] hsr_slave_0: left promiscuous mode [ 466.522249][ T1040] hsr_slave_1: left promiscuous mode [ 466.531460][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.568601][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.275172][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 468.375008][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 468.586362][ T5907] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 468.724734][ T5907] usb 3-1: device descriptor read/64, error -71 [ 469.107769][ T5907] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 469.248280][ T5907] usb 3-1: device descriptor read/64, error -71 [ 469.367455][ T5907] usb usb3-port1: attempt power cycle [ 469.439864][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 469.515465][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 469.782664][ T5907] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 469.804991][ T5907] usb 3-1: device descriptor read/8, error -71 [ 470.069508][ T5907] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 470.114591][ T5907] usb 3-1: device descriptor read/8, error -71 [ 470.241639][ T5907] usb usb3-port1: unable to enumerate USB device [ 475.377908][ T8055] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 475.658722][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.663833][ T8055] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 476.827757][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.912604][ T38] audit: type=1326 audit(1776604805.756:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c06cc819 code=0x7ffc0000 [ 476.912658][ T38] audit: type=1326 audit(1776604805.765:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c06cc819 code=0x7ffc0000 [ 476.912698][ T38] audit: type=1326 audit(1776604805.765:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02c06cc819 code=0x7ffc0000 [ 476.912740][ T38] audit: type=1326 audit(1776604805.774:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c06cc819 code=0x7ffc0000 [ 476.912780][ T38] audit: type=1326 audit(1776604805.774:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c06cc819 code=0x7ffc0000 [ 476.912819][ T38] audit: type=1326 audit(1776604805.774:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f02c06cc819 code=0x7ffc0000 [ 477.283740][ T8436] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 477.418278][ T8055] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 477.634232][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.658991][ T8055] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 477.777456][ T8055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.862820][ T8091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.146465][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.176298][ T8091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.245364][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.325230][ T8091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.458502][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.473287][ T8091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.508881][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.128710][ T8468] CUSE: info not properly terminated [ 480.918945][ T8120] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.069778][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.108288][ T8120] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.726345][ T8474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.743221][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.766715][ T8120] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.824704][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.844195][ T8120] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.863909][ T8477] overlayfs: failed to clone upperpath [ 481.899939][ T8120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.984123][ T8483] comedi comedi0: c6xdigio: I/O base address not correctly aligned [ 482.128325][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.342752][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.409347][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.410271][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.499833][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.499970][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.526874][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.664986][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.760250][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.761101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.830919][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.831058][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.913795][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.314538][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.575997][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.576449][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.758788][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.758901][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.853649][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.810872][ T8527] netlink: 164 bytes leftover after parsing attributes in process `syz.7.487'. [ 486.893224][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.910673][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.487'. [ 487.217916][ T8535] capability: warning: `syz.7.488' uses deprecated v2 capabilities in a way that may be insecure [ 487.355516][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.526147][ T8055] veth0_vlan: entered promiscuous mode [ 487.597518][ T8055] veth1_vlan: entered promiscuous mode [ 488.005606][ T8055] veth0_macvtap: entered promiscuous mode [ 488.069079][ T8055] veth1_macvtap: entered promiscuous mode [ 488.252902][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.332638][ T8091] veth0_vlan: entered promiscuous mode [ 488.414685][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.498336][ T6574] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.499235][ T8091] veth1_vlan: entered promiscuous mode [ 488.521414][ T6574] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.533193][ T6574] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.546791][ T6574] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.738539][ T8120] veth0_vlan: entered promiscuous mode [ 488.945137][ T8120] veth1_vlan: entered promiscuous mode [ 489.468082][ T8091] veth0_macvtap: entered promiscuous mode [ 489.679694][ T8091] veth1_macvtap: entered promiscuous mode [ 489.693205][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.693228][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.944114][ T8120] veth0_macvtap: entered promiscuous mode [ 490.111614][ T8120] veth1_macvtap: entered promiscuous mode [ 490.112261][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.112279][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.238777][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.455502][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.486163][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.518539][ T1308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.538693][ T1308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.542146][ T1308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.542445][ T1308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.583020][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.635204][ T1308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.720757][ T1308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.895835][ T1317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.939843][ T1317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.471555][ T8570] 9pnet_virtio: no channels available for device syz [ 498.548460][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.548484][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.720281][ T6683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.720306][ T6683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.042665][ T6574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.042689][ T6574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.802055][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.802080][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.054888][ T8627] overlayfs: failed to clone upperpath [ 501.120504][ T8629] overlayfs: missing 'lowerdir' [ 501.483443][ T8633] netlink: 240 bytes leftover after parsing attributes in process `syz.2.513'. [ 501.483470][ T8633] netlink: 64 bytes leftover after parsing attributes in process `syz.2.513'. [ 501.686919][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.763372][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.765903][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.771803][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.773677][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.037584][ T8639] Bluetooth: MGMT ver 1.23 [ 503.278735][ T1125] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.816653][ T8668] raw_sendmsg: syz.7.523 forgot to set AF_INET. Fix it! [ 504.906455][ T8668] ceph: No mds server is up or the cluster is laggy [ 504.912173][ T5830] Bluetooth: hci0: command tx timeout [ 504.988890][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 504.989702][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 505.316283][ T8669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.055546][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 506.219718][ T1125] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.266574][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 506.273474][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 506.273508][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 506.273543][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 506.279901][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 506.279933][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.279952][ T9] usb 3-1: Product: syz [ 506.279966][ T9] usb 3-1: Manufacturer: syz [ 506.279980][ T9] usb 3-1: SerialNumber: syz [ 506.387807][ T9] usb 3-1: config 0 descriptor?? [ 506.398571][ T8683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 506.464757][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 506.464784][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 506.644495][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.644888][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.657851][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 507.064698][ T9] usb 3-1: USB disconnect, device number 35 [ 507.064800][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 507.120857][ T5830] Bluetooth: hci0: command tx timeout [ 507.963027][ T1125] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.111576][ T8704] futex_wake_op: syz.6.536 tries to shift op by 144; fix this program [ 508.691350][ T8713] futex_wake_op: syz.2.539 tries to shift op by 144; fix this program [ 509.348329][ T5830] Bluetooth: hci0: command tx timeout [ 510.129890][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.129959][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.592290][ T1125] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.564242][ T38] audit: type=1326 audit(1776604838.771:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.7.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540705c819 code=0x7ffc0000 [ 512.505556][ T5830] Bluetooth: hci0: command tx timeout [ 512.526934][ T38] audit: type=1326 audit(1776604838.771:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.7.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540705c819 code=0x7ffc0000 [ 512.526992][ T38] audit: type=1326 audit(1776604838.780:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.7.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f540705c819 code=0x7ffc0000 [ 512.527033][ T38] audit: type=1326 audit(1776604838.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.7.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540705c819 code=0x7ffc0000 [ 512.527077][ T38] audit: type=1326 audit(1776604838.780:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.7.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f540705c819 code=0x7ffc0000 [ 512.527120][ T38] audit: type=1326 audit(1776604838.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.7.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f540705c819 code=0x7ffc0000 [ 512.699439][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 512.888837][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.888877][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.888902][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 512.888951][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.888977][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.904633][ T9] usb 3-1: config 0 descriptor?? [ 512.987839][ T8634] chnl_net:caif_netlink_parms(): no params data found [ 516.070296][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 516.438252][ T8748] syz.7.549 (8748) used greatest stack depth: 17528 bytes left [ 521.225218][ T5907] usb 3-1: USB disconnect, device number 36 [ 523.114695][ T8789] random: crng reseeded on system resumption [ 523.126895][ T8789] Restarting kernel threads ... [ 523.127794][ T8789] Done restarting kernel threads. [ 523.804254][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.804703][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.805058][ T8634] bridge_slave_0: entered allmulticast mode [ 523.860861][ T8634] bridge_slave_0: entered promiscuous mode [ 524.007516][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.007875][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.054139][ T8634] bridge_slave_1: entered allmulticast mode [ 524.112213][ T8634] bridge_slave_1: entered promiscuous mode [ 524.322696][ T37] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 524.486915][ T1125] bridge_slave_1: left allmulticast mode [ 524.486950][ T1125] bridge_slave_1: left promiscuous mode [ 524.487281][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.549803][ T37] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 524.549868][ T37] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 524.549898][ T37] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.551354][ T37] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 524.551387][ T37] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 524.551403][ T37] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.552580][ T37] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 524.552612][ T37] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 524.552628][ T37] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.556209][ T37] usb 7-1: string descriptor 0 read error: -22 [ 524.556302][ T37] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 524.556318][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.638923][ T1125] bridge_slave_0: left allmulticast mode [ 524.638955][ T1125] bridge_slave_0: left promiscuous mode [ 524.639219][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.128263][ T37] adutux 7-1:168.0: interrupt endpoints not found [ 525.365939][ T37] usb 7-1: USB disconnect, device number 2 [ 525.588832][ T8806] tmpfs: Bad value for 'mpol' [ 526.219915][ T5830] Bluetooth: hci6: unexpected event for opcode 0x0c7b [ 526.884072][ T5841] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 527.229159][ T5841] usb 9-1: device descriptor read/64, error -71 [ 527.671584][ T8820] random: crng reseeded on system resumption [ 527.688329][ T8820] Restarting kernel threads ... [ 527.689971][ T8820] Done restarting kernel threads. [ 527.913085][ T5841] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 528.347300][ T5841] usb 9-1: device descriptor read/64, error -71 [ 528.495562][ T5841] usb usb9-port1: attempt power cycle [ 528.619432][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.683303][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.728762][ T1125] bond0 (unregistering): Released all slaves [ 528.773776][ T8808] batman_adv: batadv0: Adding interface: gretap1 [ 528.773802][ T8808] batman_adv: batadv0: Interface activated: gretap1 [ 529.067378][ T5841] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 529.089378][ T5841] usb 9-1: device descriptor read/8, error -71 [ 529.430606][ T5841] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 529.488614][ T5841] usb 9-1: device descriptor read/8, error -71 [ 529.564092][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.564517][ T8830] sit0: Master is either lo or non-ether device [ 529.616850][ T5841] usb usb9-port1: unable to enumerate USB device [ 530.534323][ T5830] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 530.534544][ T5830] Bluetooth: hci6: Injecting HCI hardware error event [ 530.538555][ T5830] Bluetooth: hci6: hardware error 0x00 [ 531.798956][ T8849] random: crng reseeded on system resumption [ 531.812245][ T8849] Restarting kernel threads ... [ 531.813584][ T8849] Done restarting kernel threads. [ 532.084797][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.760368][ T5830] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 535.456187][ T8877] random: crng reseeded on system resumption [ 535.465404][ T8877] Restarting kernel threads ... [ 535.466161][ T8877] Done restarting kernel threads. [ 538.674460][ T5841] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 539.577516][ T5841] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 539.577623][ T5841] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 539.577656][ T5841] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.787868][ T5841] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 539.788025][ T5841] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 539.788059][ T5841] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.808043][ T5841] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 539.808224][ T5841] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 539.808255][ T5841] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 540.039009][ T5841] usb 9-1: string descriptor 0 read error: -22 [ 540.039383][ T5841] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 540.039421][ T5841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.043666][ T5841] usb 9-1: can't set config #168, error -71 [ 541.526577][ T8891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 542.275050][ T5841] usb 9-1: USB disconnect, device number 6 [ 543.427024][ T8634] team0: Port device team_slave_0 added [ 543.512707][ T8634] team0: Port device team_slave_1 added [ 543.963880][ T1125] hsr_slave_0: left promiscuous mode [ 544.028117][ T1125] hsr_slave_1: left promiscuous mode [ 544.028992][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.029012][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.092458][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.092479][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.684526][ T1125] veth1_macvtap: left promiscuous mode [ 544.684651][ T1125] veth0_macvtap: left promiscuous mode [ 544.684966][ T1125] veth1_vlan: left promiscuous mode [ 544.685186][ T1125] veth0_vlan: left promiscuous mode [ 544.978452][ T8910] 9pnet_virtio: no channels available for device syz [ 545.284383][ T8912] random: crng reseeded on system resumption [ 545.293667][ T8912] Restarting kernel threads ... [ 545.297463][ T8912] Done restarting kernel threads. [ 545.705757][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 545.749827][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 546.185683][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.185696][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.188989][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.237630][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.237648][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.237676][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.525341][ T8634] hsr_slave_0: entered promiscuous mode [ 546.533911][ T8634] hsr_slave_1: entered promiscuous mode [ 546.641518][ T8920] fuse: fd is not a fuse device [ 549.002474][ T8941] overlayfs: failed to clone upperpath [ 549.150782][ T8944] overlayfs: failed to resolve './file0': -2 [ 551.935112][ T5489] 8021q: adding VLAN 0 to HW filter on device eth17 [ 553.967613][ T8978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.371756][ T5910] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 554.539844][ T5910] usb 9-1: Using ep0 maxpacket: 8 [ 554.556379][ T5910] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 554.556413][ T5910] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 554.556474][ T5910] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.556521][ T5910] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 554.556556][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.957141][ T5910] usbtmc 9-1:16.0: bulk endpoints not found [ 557.747793][ T9018] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 557.747867][ T9018] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 557.747938][ T9018] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 557.818006][ T9018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 557.919156][ T9018] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 559.353574][ T9027] netlink: 'syz.6.631': attribute type 39 has an invalid length. [ 559.416742][ T9029] netlink: 32 bytes leftover after parsing attributes in process `syz.6.631'. [ 559.539174][ T9031] binder: 9026:9031 ioctl c0285840 200000000000 returned -22 [ 559.739882][ T5910] usb 9-1: USB disconnect, device number 7 [ 560.399491][ T9043] input: syz1 as /devices/virtual/input/input10 [ 562.485187][ T9069] netlink: 'syz.6.638': attribute type 1 has an invalid length. [ 566.389549][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 567.049583][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 567.110348][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 567.110383][ T9] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.110437][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.110486][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.110511][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.228267][ T9] usbtmc 7-1:16.0: bulk endpoints not found [ 567.398156][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 568.262476][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.325830][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.340091][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.350828][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.374279][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.507001][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.7.651'. [ 569.609199][ T5910] usb 7-1: USB disconnect, device number 3 [ 570.882921][ T5830] Bluetooth: hci1: command tx timeout [ 572.003643][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.7.658'. [ 572.003662][ T9164] openvswitch: netlink: Flow key attr not present in new flow. [ 572.450702][ T9170] CUSE: info not properly terminated [ 572.626452][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 573.038682][ T9175] netlink: 'syz.7.662': attribute type 1 has an invalid length. [ 573.038708][ T9175] netlink: 'syz.7.662': attribute type 4 has an invalid length. [ 573.038723][ T9175] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.662'. [ 573.158947][ T5834] Bluetooth: hci1: command tx timeout [ 573.617457][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 573.777663][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 573.780599][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 573.780630][ T9] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 573.780683][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.780729][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 573.780755][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.982524][ T9] usbtmc 9-1:16.0: bulk endpoints not found [ 574.295119][ T38] audit: type=1800 audit(1776604897.492:16): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.667" name="nullb0" dev="tmpfs" ino=1105 res=0 errno=0 [ 574.760298][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.669'. [ 574.760623][ T9190] openvswitch: netlink: Flow key attr not present in new flow. [ 575.328348][ T5834] Bluetooth: hci1: command tx timeout [ 576.037270][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.053841][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.685342][ T818] usb 9-1: USB disconnect, device number 8 [ 577.549787][ T5834] Bluetooth: hci1: command tx timeout [ 579.029310][ T9113] chnl_net:caif_netlink_parms(): no params data found [ 580.043785][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.679'. [ 580.043932][ T9225] openvswitch: netlink: Flow actions attr not present in new flow. [ 580.569206][ T9227] tipc: Can't bind to reserved service type 2 [ 581.760064][ T5928] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 581.987673][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.988071][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.988376][ T9113] bridge_slave_0: entered allmulticast mode [ 581.991618][ T9113] bridge_slave_0: entered promiscuous mode [ 582.048814][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 582.055358][ T9247] CUSE: info not properly terminated [ 582.341593][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.345086][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.345470][ T9113] bridge_slave_1: entered allmulticast mode [ 582.350521][ T9113] bridge_slave_1: entered promiscuous mode [ 582.367917][ T5928] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 582.367950][ T5928] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 582.368004][ T5928] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.368028][ T5928] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.368053][ T5928] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 582.368099][ T5928] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 582.368126][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.540703][ T5928] usbtmc 7-1:16.0: bulk endpoints not found [ 582.961695][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.985065][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.361096][ T9113] team0: Port device team_slave_0 added [ 583.401917][ T9113] team0: Port device team_slave_1 added [ 583.563974][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.563988][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.564006][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.659518][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.661192][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.661217][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.782140][ T1011] bridge_slave_1: left allmulticast mode [ 583.782177][ T1011] bridge_slave_1: left promiscuous mode [ 583.782483][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.879095][ T1011] bridge_slave_0: left allmulticast mode [ 583.879131][ T1011] bridge_slave_0: left promiscuous mode [ 583.879453][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.786659][ T6328] usb 7-1: USB disconnect, device number 4 [ 585.339993][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.6.691'. [ 585.340011][ T9273] openvswitch: netlink: Flow actions attr not present in new flow. [ 585.360714][ T1011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.379138][ T9260] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 585.379168][ T9260] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 585.411710][ T9266] vhci_hcd: connection closed [ 585.526164][ T9260] vhci_hcd vhci_hcd.0: Device attached [ 585.589137][ T99] vhci_hcd vhci_hcd.2: stop threads [ 585.601159][ T99] vhci_hcd vhci_hcd.2: release socket [ 586.170644][ T99] vhci_hcd vhci_hcd.2: disconnect device [ 586.389269][ T1011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.167128][ T1011] bond0 (unregistering): Released all slaves [ 593.521438][ T9113] hsr_slave_0: entered promiscuous mode [ 593.582925][ T9296] CUSE: info not properly terminated [ 593.843899][ T9113] hsr_slave_1: entered promiscuous mode [ 593.859613][ T9113] debugfs: 'hsr0' already exists in 'hsr' [ 593.859643][ T9113] Cannot create hsr debugfs directory [ 594.106297][ T1011] hsr_slave_0: left promiscuous mode [ 594.146803][ T1011] hsr_slave_1: left promiscuous mode [ 594.262832][ T818] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 594.316603][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.354484][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.448068][ T818] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.448111][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 594.448141][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 594.448172][ T818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.448217][ T818] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.448243][ T818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.536205][ T818] usb 3-1: config 0 descriptor?? [ 594.537690][ T9299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 595.071223][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071262][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071290][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071316][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071344][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071369][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071395][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071421][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071445][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.071470][ T818] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 595.353293][ T818] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 595.397079][ T818] usb 3-1: USB disconnect, device number 37 [ 595.695063][ T9316] fido_id[9316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 596.197855][ T1011] team0 (unregistering): Port device team_slave_1 removed [ 596.315113][ T1011] team0 (unregistering): Port device team_slave_0 removed [ 596.325580][ T5841] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 596.517881][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 596.522722][ T5841] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 596.522756][ T5841] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 596.522819][ T5841] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.522844][ T5841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.522869][ T5841] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.522917][ T5841] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 596.522943][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.657938][ T5841] usbtmc 3-1:16.0: bulk endpoints not found [ 597.832308][ T5489] 8021q: adding VLAN 0 to HW filter on device eth17 [ 598.622966][ T9341] CUSE: info not properly terminated [ 599.371538][ T818] usb 3-1: USB disconnect, device number 38 [ 599.400474][ T9351] ADFS-fs (loop8): error: unable to read block 3, try 0 [ 600.400837][ T9361] 9pnet_virtio: no channels available for device syz [ 600.733878][ T9363] openvswitch: netlink: ct_state flags 03001eac unsupported [ 601.980675][ T9370] netlink: 48 bytes leftover after parsing attributes in process `syz.7.713'. [ 603.470834][ T5489] 8021q: adding VLAN 0 to HW filter on device eth18 [ 700.834068][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.834188][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.784380][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 715.784400][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8120/5:b..l [ 715.784437][ C0] rcu: (detected by 0, t=10502 jiffies, g=55653, q=180 ncpus=2) [ 715.784457][ C0] task:syz-executor state:R running task stack:21208 pid:8120 tgid:8120 ppid:8111 task_flags:0x400140 flags:0x00080000 [ 715.784530][ C0] Call Trace: [ 715.784539][ C0] [ 715.784554][ C0] __schedule+0x169e/0x54f0 [ 715.784620][ C0] ? __pfx___schedule+0x10/0x10 [ 715.784646][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 715.784684][ C0] preempt_schedule_irq+0x4d/0xa0 [ 715.784708][ C0] irqentry_exit+0x14f/0x730 [ 715.784730][ C0] ? trace_irq_disable+0x3b/0x140 [ 715.784761][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 715.784784][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 715.784812][ C0] Code: ff ff ff e8 b1 f2 95 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b ed d5 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 28 fc ef [ 715.784830][ C0] RSP: 0018:ffffc900049e7288 EFLAGS: 00000286 [ 715.784847][ C0] RAX: d4685a13b47c2e00 RBX: 0000000000000000 RCX: 0000000000000046 [ 715.784863][ C0] RDX: 00000000dbd1ab37 RSI: ffffffff8d8b3bc3 RDI: ffffffff8ba84960 [ 715.784878][ C0] RBP: ffffffff82353b56 R08: ffffffff82353b56 R09: ffffffff8dfc8100 [ 715.784893][ C0] R10: dffffc0000000000 R11: fffff94000464ce9 R12: 0000000000000002 [ 715.784908][ C0] R13: ffffffff8dfc8100 R14: 0000000000000000 R15: 0000000000000246 [ 715.784926][ C0] ? page_table_check_set+0x126/0x510 [ 715.784959][ C0] ? page_table_check_set+0x126/0x510 [ 715.784998][ C0] ? page_table_check_set+0x126/0x510 [ 715.785028][ C0] page_table_check_set+0x143/0x510 [ 715.785057][ C0] ? page_table_check_set+0x126/0x510 [ 715.785093][ C0] copy_pmd_range+0x350b/0x5550 [ 715.785161][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 715.785195][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 715.785230][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 715.785266][ C0] copy_page_range+0xaf4/0x1120 [ 715.785310][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 715.785340][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 715.785365][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 715.785387][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 715.785414][ C0] dup_mmap+0xf4c/0x1d50 [ 715.785468][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 715.785499][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 715.785549][ C0] ? copy_mm+0x130/0x4a0 [ 715.785573][ C0] ? copy_mm+0x130/0x4a0 [ 715.785611][ C0] copy_mm+0x13b/0x4a0 [ 715.785637][ C0] copy_process+0x1f24/0x4460 [ 715.785678][ C0] ? copy_process+0xd87/0x4460 [ 715.785712][ C0] ? __pfx_copy_process+0x10/0x10 [ 715.785750][ C0] kernel_clone+0x2d7/0x940 [ 715.785779][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 715.785824][ C0] __x64_sys_clone+0x1b6/0x230 [ 715.785853][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 715.785897][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 715.785929][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.785952][ C0] do_syscall_64+0x15f/0xf80 [ 715.785974][ C0] ? trace_irq_disable+0x3b/0x140 [ 715.785998][ C0] ? clear_bhb_loop+0x40/0x90 [ 715.786024][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.786045][ C0] RIP: 0033:0x7f34d9345292 [ 715.786063][ C0] RSP: 002b:00007ffd06ed7b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 715.786083][ C0] RAX: ffffffffffffffda RBX: 00007ffd06ed7b40 RCX: 00007f34d9345292 [ 715.786098][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 715.786111][ C0] RBP: 00007ffd06ed7ccc R08: 0000000000000000 R09: 0000000000000001 [ 715.786124][ C0] R10: 000055557bcc67d0 R11: 0000000000000246 R12: 0000000000000001 [ 715.786137][ C0] R13: 000055557bcd99f0 R14: 000000000008f033 R15: 00007ffd06ed7d20 [ 715.786172][ C0] [ 715.786180][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g55653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 715.786203][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=27188 [ 715.786215][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g55653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 715.786237][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 715.786248][ C0] rcu: RCU grace-period kthread stack dump: [ 715.786256][ C0] task:rcu_preempt state:I stack:27480 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 715.786318][ C0] Call Trace: [ 715.786325][ C0] [ 715.786337][ C0] __schedule+0x169e/0x54f0 [ 715.786357][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 715.786414][ C0] ? __pfx___schedule+0x10/0x10 [ 715.786445][ C0] ? schedule+0x90/0x360 [ 715.786470][ C0] schedule+0x164/0x360 [ 715.786493][ C0] schedule_timeout+0x158/0x2c0 [ 715.786526][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 715.786548][ C0] ? __pfx_process_timeout+0x10/0x10 [ 715.786576][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 715.786600][ C0] ? prepare_to_swait_event+0x340/0x370 [ 715.786631][ C0] rcu_gp_fqs_loop+0x312/0x11b0 [ 715.786661][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 715.786686][ C0] ? rcu_gp_init+0x136b/0x1610 [ 715.786717][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 715.786742][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 715.786771][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 715.786799][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 715.786828][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 715.786853][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 715.786878][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 715.786902][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 715.786932][ C0] kthread+0x388/0x470 [ 715.786959][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 715.786984][ C0] ? __pfx_kthread+0x10/0x10 [ 715.787012][ C0] ret_from_fork+0x514/0xb70 [ 715.787039][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 715.787061][ C0] ? __switch_to+0xc79/0x1410 [ 715.787095][ C0] ? __pfx_kthread+0x10/0x10 [ 715.787123][ C0] ret_from_fork_asm+0x1a/0x30 [ 715.787166][ C0] [ 715.787173][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 715.787183][ C0] Sending NMI from CPU 0 to CPUs 1: [ 715.787210][ C1] NMI backtrace for cpu 1 [ 715.787227][ C1] CPU: 1 UID: 0 PID: 9382 Comm: iou-sqp-9381 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 715.787246][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 715.787255][ C1] RIP: 0010:check_preemption_disabled+0x29/0xe0 [ 715.787284][ C1] Code: 90 55 41 57 41 56 53 65 8b 05 a7 df 3f 07 65 8b 0d 9c df 3f 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 9c <59> f7 c1 00 02 00 00 74 ea 65 4c 8b 3d 4e df 3f 07 41 f6 47 2f 04 [ 715.787299][ C1] RSP: 0018:ffffc90003fd7a70 EFLAGS: 00000046 [ 715.787314][ C1] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: 0000000080000000 [ 715.787325][ C1] RDX: 0000000000000000 RSI: ffffffff8d66989f RDI: ffffffff8ba84960 [ 715.787337][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 715.787347][ C1] R10: dffffc0000000000 R11: ffffed100742eb89 R12: 0000000000000246 [ 715.787360][ C1] R13: ffff88803a175c40 R14: ffff88805d41c4d8 R15: dffffc0000000000 [ 715.787372][ C1] FS: 00007f54052b66c0(0000) GS:ffff888125fba000(0000) knlGS:0000000000000000 [ 715.787387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.787399][ C1] CR2: 0000200000bbdffc CR3: 00000000374c8000 CR4: 00000000003526f0 [ 715.787416][ C1] Call Trace: [ 715.787423][ C1] [ 715.787432][ C1] lock_is_held_type+0x5a/0x150 [ 715.787452][ C1] io_sqring_entries+0x10f/0x300 [ 715.787474][ C1] io_sq_thread+0x996/0x1d60 [ 715.787504][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 715.787528][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 715.787552][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 715.787570][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 715.787588][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 715.787607][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 715.787630][ C1] ? reacquire_held_locks+0x104/0x190 [ 715.787652][ C1] ? rt_spin_lock+0x1e0/0x400 [ 715.787677][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 715.787697][ C1] ? rt_spin_unlock+0x14f/0x200 [ 715.787722][ C1] ? rt_spin_unlock+0x160/0x200 [ 715.787743][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 715.787763][ C1] ret_from_fork+0x514/0xb70 [ 715.787782][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 715.787800][ C1] ? __switch_to+0xc79/0x1410 [ 715.787824][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 715.787844][ C1] ret_from_fork_asm+0x1a/0x30 [ 715.787871][ C1] [ 720.712053][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.741984][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 SYZFAIL: failed to send rpc fd=3 want=752 sent=0 n=-1 (errno 32: Broken pipe) [ 720.770511][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.787242][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.799590][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.134758][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 723.149254][ T5834] Bluetooth: hci0: command tx timeout [ 725.762947][ T7424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.466946][ T7424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.098514][ T7424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.366788][ T7424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0