last executing test programs: 8m23.911051255s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x8, "cc7bc99aebba087aaff0fa0f4658ca556b2280b486f02c32dc99ea830b66a5e7", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"db0bbced01eb0100000082f8ffffff0700000006000000c100000000cf00dd00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000480)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 8m20.164292024s ago: executing program 3 (id=11): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="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", 0x127}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 8m15.869398819s ago: executing program 3 (id=15): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8m13.624772438s ago: executing program 0 (id=18): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000fe01000002000000020000004422e100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB="030000008500000002000000020000000000000000"], 0x50) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) 8m11.095565161s ago: executing program 0 (id=20): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) 8m7.300333483s ago: executing program 0 (id=22): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$sg(0x0, 0x8000, 0x38182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 8m2.847404051s ago: executing program 3 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="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", 0x127}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r3}, './file0\x00'}) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7435}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x330}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2c, &(0x7f0000000080)=""/44, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0], &(0x7f0000000480)=[{0x0, 0x2, 0x1}, {0x5, 0x5, 0xd}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x75) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) 8m2.684078938s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff010000009b754a65e4c8f7e6f98e8dc6147dfef2d6138688a0ba2475c67f7bbd99dbe2e5a4a1c74424b5fee16f27944ad66126ca98cf2c0fce68758b36d2f3b1faecd66810e5ce228f"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 8m2.528345742s ago: executing program 3 (id=29): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m1.696318695s ago: executing program 1 (id=31): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000fe01000002000000020000004422e100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB="030000008500000002000000020000000000000000"], 0x50) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) 7m56.90778308s ago: executing program 1 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f", 0xd, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 7m53.386638599s ago: executing program 1 (id=37): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000400)="68909523539aa3629373a2b90dec44b33a0d2627d6601c99e264f2a58c3a65e02010221f81eaf61e77e324499ad5bd52b59fd58bda34bbfe9a48ee28e9fb6ca972a1cedf240ba0240cd86beb4b415c1c451ac633eebec5dfd7c701822ed17f5e1129971f040ac6b19f162e6ae35f42e2512b59d13c51d4d0848cdf03f47cfe6735a17a5bfefbce6666fb4410a7a65a537952418d9dc3b73d", 0x98) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7m52.449986947s ago: executing program 0 (id=39): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x5, 0x0, 0x0, @msi={0x3, 0x40, 0x5ed5e3c, 0x4e32cf73}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0xa7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000180c200000e88a82c00810038000011aa54dc1e7ea42188be58427ee0a5d1fe87dfc884fcba8678af9f6b71e257122659514f9a53f737ff1c0ec7361d8758b3e07fd3a4c9eb4b143912308d1d2c4b94a64bdb9f4a3bda6c18f0f09dd87ce0e2ab339925ff8d80474aed5ef5ccc2ce2d490ca0ce0507fb587d3e78149220c6e8f64c8a99b92092224c7a32ac2194068c3a929477c44dc550ec3c5d7d"], 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x6630, @mcast2, 0x4}}, 0x80, 0x0}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 7m50.855475973s ago: executing program 1 (id=41): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="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", 0x127}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r3}, './file0\x00'}) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7435}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x330}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2c, &(0x7f0000000080)=""/44, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0], &(0x7f0000000480)=[{0x0, 0x2, 0x1}, {0x5, 0x5, 0xd}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x75) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) 7m50.100101975s ago: executing program 1 (id=43): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000fe01000002000000020000004422e100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB="030000008500000002000000020000000000000000"], 0x50) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x2, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) 7m47.061668485s ago: executing program 32 (id=29): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m46.927356173s ago: executing program 0 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="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", 0x127}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r3}, './file0\x00'}) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7435}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x330}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2c, &(0x7f0000000080)=""/44, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0], &(0x7f0000000480)=[{0x0, 0x2, 0x1}, {0x5, 0x5, 0xd}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x75) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) 7m45.912253275s ago: executing program 0 (id=50): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 7m31.880831448s ago: executing program 33 (id=43): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000fe01000002000000020000004422e100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB="030000008500000002000000020000000000000000"], 0x50) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0xb8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x2, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) 7m28.038200417s ago: executing program 34 (id=50): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4m53.04136229s ago: executing program 4 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) 4m52.262176291s ago: executing program 4 (id=201): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) 4m51.76750406s ago: executing program 4 (id=202): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$sg(0x0, 0x8000, 0x38182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 4m49.915953456s ago: executing program 4 (id=204): openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffd, 0x32e}, 0x0, 0x0) 4m43.115106668s ago: executing program 4 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f0", 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2", 0x127}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8}, './file0\x00'}) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7435}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x330}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2c, &(0x7f0000000080)=""/44, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0], &(0x7f0000000480)=[{0x0, 0x2, 0x1}, {0x5, 0x5, 0xd}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x75) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) 4m42.308589942s ago: executing program 4 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000100060000050005000200000005e20300000000000900020073797a31000000000d000300686173683a6e6574000000000350f83e92cabd96e4ce7e5d528839362d5de10400a1479dc6bc6f2883acca17d3bf74855442eb862191673295a381f517f268d940b1fac905005a36e42025eecc2b8ba604ff7b2e7591ecf63d3e485c7cefea63867eb1e1cbe9677f22823e139bad35606e87105171f520a52b"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f00000001c0)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) 4m26.980862091s ago: executing program 35 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000100060000050005000200000005e20300000000000900020073797a31000000000d000300686173683a6e6574000000000350f83e92cabd96e4ce7e5d528839362d5de10400a1479dc6bc6f2883acca17d3bf74855442eb862191673295a381f517f268d940b1fac905005a36e42025eecc2b8ba604ff7b2e7591ecf63d3e485c7cefea63867eb1e1cbe9677f22823e139bad35606e87105171f520a52b"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f00000001c0)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) 3m14.829866735s ago: executing program 7 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) close(r1) 3m12.03855818s ago: executing program 7 (id=287): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f01c5b912000000b800000000ba010000000f3066ba610066b8006866ef0f0666ba2000b800800000efc7442400ea000000c7442402e1003b68ff2c2466430fd7fd451441c48255049592f8b04b460f78e4", 0x52}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0xb7, 0x0, 0x2004cb, 0x0, 0xffffffffffffffff, 0x1005, 0x7ffd, 0x1000202004, 0x1, 0x80000000, 0x0, 0x4], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r7, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 3m10.415683497s ago: executing program 7 (id=290): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000400)="68909523539aa3629373a2b90dec44b33a0d2627d6601c99e264f2a58c3a65e02010221f81eaf61e77e324499ad5bd52b59fd58bda34bbfe9a48ee28e9fb6ca972a1cedf240ba0240cd86beb4b415c1c451ac633eebec5dfd7c701822ed17f5e1129971f040ac6b19f162e6ae35f42e2512b59d13c51d4d0848cdf03f47cfe6735a17a5bfefbce6666fb4410a7a65a537952418d9dc3b73d", 0x98) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3m9.985263101s ago: executing program 7 (id=291): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08060001080006"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 3m9.683469699s ago: executing program 7 (id=292): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 3m7.806978408s ago: executing program 7 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x58}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(0xffffffffffffffff, r6, 0x0) 2m52.219627521s ago: executing program 36 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x58}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(0xffffffffffffffff, r6, 0x0) 33.111463222s ago: executing program 2 (id=442): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x8, 0x0, 0xfffffffc}) 28.929563131s ago: executing program 2 (id=447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 28.559688287s ago: executing program 2 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) 28.259928738s ago: executing program 2 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000100060000050005000200000005e20300000000000900020073797a31000000000d000300686173683a6e6574000000000350f83e92cabd96e4ce7e5d528839362d5de10400a1479dc6bc6f2883acca17d3bf74855442eb862191673295a381f517f268d940b1fac905005a36e42025eecc2b8ba604ff7b2e7591ecf63d3e485c7cefea63867eb1e1cbe9677f22823e139bad35606e87105171f520a52b"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f00000001c0)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 22.541239588s ago: executing program 2 (id=455): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 19.698269035s ago: executing program 2 (id=457): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 11.942259128s ago: executing program 8 (id=469): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) dup2(r5, 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xa, 0x1, 0x3ea, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1e, &(0x7f0000000240)=[0xc], 0x1, 0x0}) 11.69172645s ago: executing program 5 (id=470): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') geteuid() r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000600)={0x3, @null}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000040)={0x40, 0x1, 0xf, "c44f98aa786c46a2ffce0500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.434527058s ago: executing program 8 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 8.508699755s ago: executing program 8 (id=472): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 8.231959655s ago: executing program 5 (id=473): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x80}, &(0x7f0000000500), &(0x7f00000001c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) 6.527365311s ago: executing program 8 (id=474): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0), 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5.211200992s ago: executing program 5 (id=475): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$sg(0x0, 0x8000, 0x38182) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 3.405298461s ago: executing program 37 (id=457): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 3.31482746s ago: executing program 8 (id=477): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3fd, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0xd50, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x8, 0x1005, 0x4, 0x8, 0x2000038, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x0, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x10000, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x6, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9c, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10021, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0xc, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x7ffe, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x2, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0x8, 0x4, 0xfffffff7, 0x10000, 0x800007, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x200009, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x6, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xc) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.708371001s ago: executing program 5 (id=478): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) 1.399388507s ago: executing program 5 (id=479): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) dup2(r5, 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xa, 0x1, 0x3ea, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1e, &(0x7f0000000240)=[0xc], 0x1, 0x0}) 72.10892ms ago: executing program 5 (id=480): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xa3, &(0x7f0000000140)=""/163, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x400088d9}, 0x20000000) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r5, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xe8, 0xffff, 0x3, 0x3}, 0x10) 0s ago: executing program 8 (id=481): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009210600060122"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x4044800) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000070601031a000022601eb1000a00000a0f1b19e531daf0aaf7591c8f1f6a8439270c9dba69466a263c0ce5ff2fc5e6990ddc0bf5742eb8f53986126841acd6bebfec48db4db2fde17a8ddb27e3ef6dac31d7e2c9cb"], 0x14}, 0x1, 0x0, 0x0, 0xc44d1c01000bc49}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff"], 0x40) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x0, r3}) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) kernel console output (not intermixed with test programs): terface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.156374][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.186036][ T6179] team0: Port device team_slave_0 added [ 198.188086][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.188099][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.188124][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.687413][ T6179] team0: Port device team_slave_1 added [ 198.769274][ T6332] input: syz0 as /devices/virtual/input/input9 [ 202.135753][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.135774][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.135801][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.423710][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.911888][ T6347] input: syz0 as /devices/virtual/input/input10 [ 203.266991][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.267010][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.267036][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.372454][ T6180] hsr_slave_0: entered promiscuous mode [ 203.373325][ T6180] hsr_slave_1: entered promiscuous mode [ 203.373918][ T6180] debugfs: 'hsr0' already exists in 'hsr' [ 203.373937][ T6180] Cannot create hsr debugfs directory [ 203.399738][ T6119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.642329][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.724014][ T6119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.297888][ T6357] ubi31: attaching mtd0 [ 204.434884][ T6357] ubi31: scanning is finished [ 205.509051][ T6119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.650127][ T6357] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 205.873726][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.972558][ T6179] hsr_slave_0: entered promiscuous mode [ 205.987655][ T6179] hsr_slave_1: entered promiscuous mode [ 205.995911][ T6179] debugfs: 'hsr0' already exists in 'hsr' [ 205.995940][ T6179] Cannot create hsr debugfs directory [ 205.997463][ T6119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.352153][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.289919][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.951570][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.971086][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.991481][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.992349][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.831532][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.884464][ T6403] ubi31: attaching mtd0 [ 211.960023][ T6403] ubi31: scanning is finished [ 212.957939][ T5807] Bluetooth: hci0: command tx timeout [ 213.584431][ T6403] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 213.599360][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.016476][ T5807] Bluetooth: hci0: command tx timeout [ 215.163213][ T6407] syz.2.108 (6407): drop_caches: 2 [ 215.389408][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.499415][ T6180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.602252][ T6180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.988450][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.072805][ T6180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.421830][ T6180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.095549][ T5805] Bluetooth: hci0: command tx timeout [ 217.597162][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 217.597226][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 218.879160][ T6179] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.016460][ T6179] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.078413][ T6179] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.175809][ T60] Bluetooth: hci0: command tx timeout [ 219.177429][ T6179] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.234751][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.286114][ T67] bridge_slave_1: left allmulticast mode [ 219.286136][ T67] bridge_slave_1: left promiscuous mode [ 219.286314][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.384827][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 219.387119][ T67] bridge_slave_0: left allmulticast mode [ 219.387150][ T67] bridge_slave_0: left promiscuous mode [ 219.387282][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.387310][ T31] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.387335][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.387678][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.453284][ T31] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 219.453320][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.453339][ T31] usb 5-1: Product: syz [ 219.453355][ T31] usb 5-1: Manufacturer: syz [ 219.453370][ T31] usb 5-1: SerialNumber: syz [ 219.503393][ T31] usb 5-1: config 0 descriptor?? [ 219.529237][ T67] bridge_slave_1: left allmulticast mode [ 219.529271][ T67] bridge_slave_1: left promiscuous mode [ 219.529495][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.610105][ T67] bridge_slave_0: left allmulticast mode [ 219.610138][ T67] bridge_slave_0: left promiscuous mode [ 219.610748][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.910684][ T31] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 219.910722][ T31] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 221.536837][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.625461][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.650035][ T67] bond0 (unregistering): Released all slaves [ 221.980456][ T5966] usb 5-1: USB disconnect, device number 5 [ 222.085578][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.705710][ T6457] ubi31: attaching mtd0 [ 222.782452][ T6457] ubi31: scanning is finished [ 223.590021][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.628429][ T67] bond0 (unregistering): Released all slaves [ 223.690800][ T6179] kthread_run failed with err -4 [ 223.925495][ T6457] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 224.042395][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.055045][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.057603][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.058854][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.059598][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.140792][ T6390] chnl_net:caif_netlink_parms(): no params data found [ 226.197778][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.197856][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.198036][ T6390] bridge_slave_0: entered allmulticast mode [ 226.207175][ T6390] bridge_slave_0: entered promiscuous mode [ 226.219178][ T5807] Bluetooth: hci4: command tx timeout [ 226.255463][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.255541][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.255731][ T6390] bridge_slave_1: entered allmulticast mode [ 226.257351][ T6390] bridge_slave_1: entered promiscuous mode [ 228.231286][ T6501] input: syz0 as /devices/virtual/input/input11 [ 228.294819][ T5807] Bluetooth: hci4: command tx timeout [ 228.687329][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.710287][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.713474][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.733927][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.755752][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.503745][ T5807] Bluetooth: hci4: command tx timeout [ 230.724295][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.823042][ T6510] fuse: Unknown parameter 'fd00000000000000000000' [ 230.868645][ T5807] Bluetooth: hci2: command tx timeout [ 231.321101][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.822163][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 232.535228][ T5807] Bluetooth: hci4: command tx timeout [ 232.941554][ T5807] Bluetooth: hci2: command tx timeout [ 235.163154][ T5807] Bluetooth: hci2: command tx timeout [ 235.853536][ T6525] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 236.524661][ T6390] team0: Port device team_slave_0 added [ 236.594102][ T6390] team0: Port device team_slave_1 added [ 236.889009][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.889022][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.889039][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.975198][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.975212][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.975230][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.224887][ T67] hsr_slave_0: left promiscuous mode [ 237.254837][ T5807] Bluetooth: hci2: command tx timeout [ 237.287330][ T67] hsr_slave_1: left promiscuous mode [ 237.288095][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.288113][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.335778][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.335800][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.524733][ T67] hsr_slave_0: left promiscuous mode [ 237.544757][ T67] hsr_slave_1: left promiscuous mode [ 237.545619][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.545638][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.605552][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.605574][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.747996][ T67] veth1_macvtap: left promiscuous mode [ 237.748069][ T67] veth0_macvtap: left promiscuous mode [ 237.748222][ T67] veth1_vlan: left promiscuous mode [ 237.748337][ T67] veth0_vlan: left promiscuous mode [ 237.915130][ T67] veth1_macvtap: left promiscuous mode [ 237.915268][ T67] veth0_macvtap: left promiscuous mode [ 237.954429][ T67] veth1_vlan: left promiscuous mode [ 237.960399][ T67] veth0_vlan: left promiscuous mode [ 238.947129][ T6542] binder: 6537:6542 ioctl c0306201 2000000003c0 returned -14 [ 241.187126][ T6548] input: syz0 as /devices/virtual/input/input12 [ 241.540066][ T6551] fuse: Unknown parameter 'fd00000000000000000000' [ 242.255945][ T67] team0 (unregistering): Port device team_slave_1 removed [ 242.297062][ T67] team0 (unregistering): Port device team_slave_0 removed [ 243.674898][ T907] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 243.948096][ T907] usb 5-1: Using ep0 maxpacket: 16 [ 243.983974][ T907] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 243.984010][ T907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.984031][ T907] usb 5-1: Product: syz [ 243.984046][ T907] usb 5-1: Manufacturer: syz [ 243.984061][ T907] usb 5-1: SerialNumber: syz [ 243.994398][ T907] usb 5-1: config 0 descriptor?? [ 244.413090][ T907] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 244.444228][ T907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.446104][ T907] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 244.446238][ T907] usb 5-1: media controller created [ 244.474508][ T907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.632830][ T907] zl10353_read_register: readreg error (reg=127, ret==0) [ 244.633021][ T907] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 244.633072][ T907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 244.656052][ T907] usb 5-1: USB disconnect, device number 6 [ 244.678176][ T67] team0 (unregistering): Port device team_slave_1 removed [ 244.858888][ T67] team0 (unregistering): Port device team_slave_0 removed [ 244.865239][ T907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 246.306496][ T6390] hsr_slave_0: entered promiscuous mode [ 246.307431][ T6390] hsr_slave_1: entered promiscuous mode [ 246.596770][ T6463] chnl_net:caif_netlink_parms(): no params data found [ 249.720031][ T6502] chnl_net:caif_netlink_parms(): no params data found [ 249.928884][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.928962][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.929106][ T6463] bridge_slave_0: entered allmulticast mode [ 249.931017][ T6463] bridge_slave_0: entered promiscuous mode [ 250.062599][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.062743][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.063010][ T6463] bridge_slave_1: entered allmulticast mode [ 250.093827][ T6463] bridge_slave_1: entered promiscuous mode [ 250.615163][ T6605] input: syz0 as /devices/virtual/input/input13 [ 250.812853][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.912096][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.368634][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.368861][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.369085][ T6502] bridge_slave_0: entered allmulticast mode [ 251.372949][ T6502] bridge_slave_0: entered promiscuous mode [ 251.409709][ T6463] team0: Port device team_slave_0 added [ 251.410854][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.411076][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.414009][ T6502] bridge_slave_1: entered allmulticast mode [ 251.427653][ T6502] bridge_slave_1: entered promiscuous mode [ 251.439590][ T6463] team0: Port device team_slave_1 added [ 251.954830][ T6610] netlink: 156 bytes leftover after parsing attributes in process `syz.4.142'. [ 253.670634][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.697733][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.697753][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.697783][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.056802][ T6617] binder: 6614:6617 ioctl c0306201 2000000003c0 returned -14 [ 256.179173][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.186521][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.186538][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.186579][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.293991][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'. [ 256.332941][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.333023][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.482576][ T6502] team0: Port device team_slave_0 added [ 256.586764][ T6502] team0: Port device team_slave_1 added [ 257.370720][ T6463] hsr_slave_0: entered promiscuous mode [ 257.394284][ T6463] hsr_slave_1: entered promiscuous mode [ 257.419305][ T6463] debugfs: 'hsr0' already exists in 'hsr' [ 257.419341][ T6463] Cannot create hsr debugfs directory [ 257.513132][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.513156][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.513173][ T6502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.068509][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.068523][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.068563][ T6502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.947845][ T6643] input: syz0 as /devices/virtual/input/input14 [ 259.572547][ T6502] hsr_slave_0: entered promiscuous mode [ 259.589093][ T6502] hsr_slave_1: entered promiscuous mode [ 259.590593][ T6502] debugfs: 'hsr0' already exists in 'hsr' [ 259.590612][ T6502] Cannot create hsr debugfs directory [ 259.690513][ T6390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.910292][ T6390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.499528][ T6390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.630939][ T6390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.003515][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 265.318237][ T6671] syz.2.153 (6671): drop_caches: 2 [ 268.696680][ T6684] netlink: 156 bytes leftover after parsing attributes in process `syz.4.155'. [ 269.839647][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 271.819640][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.886731][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.888118][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.908582][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.925832][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.274096][ T67] bridge_slave_1: left allmulticast mode [ 272.274130][ T67] bridge_slave_1: left promiscuous mode [ 272.275632][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.416338][ T67] bridge_slave_0: left allmulticast mode [ 272.416372][ T67] bridge_slave_0: left promiscuous mode [ 272.416670][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.460239][ T6697] kvm: kvm [6695]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 272.608150][ T67] bridge_slave_1: left allmulticast mode [ 272.608173][ T67] bridge_slave_1: left promiscuous mode [ 272.608343][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.706728][ T67] bridge_slave_0: left allmulticast mode [ 272.706752][ T67] bridge_slave_0: left promiscuous mode [ 272.706933][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.859120][ T67] bridge_slave_1: left allmulticast mode [ 272.859144][ T67] bridge_slave_1: left promiscuous mode [ 272.859307][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.987753][ T67] bridge_slave_0: left allmulticast mode [ 272.987774][ T67] bridge_slave_0: left promiscuous mode [ 272.987945][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.610083][ T6718] overlayfs: failed to resolve './file0': -2 [ 274.192325][ T5807] Bluetooth: hci5: command tx timeout [ 274.397266][ T6724] netlink: 156 bytes leftover after parsing attributes in process `syz.4.161'. [ 275.634910][ T6727] binder: 6725:6727 ioctl c0306201 0 returned -14 [ 275.669085][ T6727] binder: 6725:6727 ioctl c0306201 0 returned -14 [ 275.675674][ T6727] binder: 6725:6727 ioctl c0306201 200000001440 returned -11 [ 276.214750][ T5807] Bluetooth: hci5: command tx timeout [ 276.967209][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.788372][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.031603][ T67] bond0 (unregistering): Released all slaves [ 278.294773][ T5807] Bluetooth: hci5: command tx timeout [ 278.726346][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.825427][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.897489][ T67] bond0 (unregistering): Released all slaves [ 279.095972][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.205529][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.286521][ T67] bond0 (unregistering): Released all slaves [ 279.434790][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 279.618915][ T5879] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 279.619050][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.619081][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.619105][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.619154][ T5879] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.619179][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.693116][ T5879] usb 3-1: config 0 descriptor?? [ 281.750523][ T5807] Bluetooth: hci5: command tx timeout [ 282.241054][ T5879] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 282.343467][ T5879] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 282.400250][ T5879] usb 3-1: USB disconnect, device number 8 [ 282.498237][ T6755] fido_id[6755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 282.544803][ T101] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.594834][ T67] hsr_slave_0: left promiscuous mode [ 282.615660][ T67] hsr_slave_1: left promiscuous mode [ 282.616343][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.666166][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.694786][ T101] usb 5-1: Using ep0 maxpacket: 32 [ 282.696894][ T101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.696928][ T101] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 282.696943][ T101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.699708][ T101] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 282.699734][ T101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.699747][ T101] usb 5-1: Product: syz [ 282.699756][ T101] usb 5-1: Manufacturer: syz [ 282.699765][ T101] usb 5-1: SerialNumber: syz [ 282.703861][ T101] usb 5-1: config 0 descriptor?? [ 283.150801][ T67] hsr_slave_0: left promiscuous mode [ 283.227381][ T101] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 283.227433][ T101] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 283.736384][ T67] hsr_slave_1: left promiscuous mode [ 283.737664][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.775555][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.914811][ T67] hsr_slave_0: left promiscuous mode [ 283.955163][ T67] hsr_slave_1: left promiscuous mode [ 283.955969][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.005612][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.463708][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.480476][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.482195][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.483649][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.484298][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.937815][ T67] team0 (unregistering): Port device team_slave_1 removed [ 284.986080][ T67] team0 (unregistering): Port device team_slave_0 removed [ 285.313168][ T101] usb 5-1: USB disconnect, device number 7 [ 286.416574][ T67] team0 (unregistering): Port device team_slave_1 removed [ 286.455730][ T67] team0 (unregistering): Port device team_slave_0 removed [ 286.633958][ T60] Bluetooth: hci0: command tx timeout [ 287.135377][ T67] team0 (unregistering): Port device team_slave_1 removed [ 287.165528][ T67] team0 (unregistering): Port device team_slave_0 removed [ 289.164872][ T5807] Bluetooth: hci0: command tx timeout [ 291.116531][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.124042][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.144382][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.173441][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.183767][ T5807] Bluetooth: hci0: command tx timeout [ 291.190298][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 291.835114][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 293.269379][ T5807] Bluetooth: hci6: command tx timeout [ 293.269668][ T5807] Bluetooth: hci0: command tx timeout [ 293.898901][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.899046][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.899320][ T6690] bridge_slave_0: entered allmulticast mode [ 293.902717][ T6690] bridge_slave_0: entered promiscuous mode [ 293.966237][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.966374][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.966635][ T6690] bridge_slave_1: entered allmulticast mode [ 294.005155][ T6690] bridge_slave_1: entered promiscuous mode [ 294.223917][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.335213][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.896725][ T6768] chnl_net:caif_netlink_parms(): no params data found [ 294.950786][ T6690] team0: Port device team_slave_0 added [ 295.143867][ T6690] team0: Port device team_slave_1 added [ 295.394873][ T60] Bluetooth: hci6: command tx timeout [ 295.592928][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.592947][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.592966][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.656206][ T6788] chnl_net:caif_netlink_parms(): no params data found [ 295.689766][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.689785][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.689802][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.877574][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.877651][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.877810][ T6768] bridge_slave_0: entered allmulticast mode [ 295.879491][ T6768] bridge_slave_0: entered promiscuous mode [ 295.972825][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.972912][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.973098][ T6768] bridge_slave_1: entered allmulticast mode [ 295.984026][ T6768] bridge_slave_1: entered promiscuous mode [ 296.270780][ T6690] hsr_slave_0: entered promiscuous mode [ 296.284310][ T6690] hsr_slave_1: entered promiscuous mode [ 296.307515][ T6690] debugfs: 'hsr0' already exists in 'hsr' [ 296.307539][ T6690] Cannot create hsr debugfs directory [ 296.359085][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.442538][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.641192][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.641272][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.641458][ T6788] bridge_slave_0: entered allmulticast mode [ 296.643089][ T6788] bridge_slave_0: entered promiscuous mode [ 296.787628][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.787770][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.787936][ T6788] bridge_slave_1: entered allmulticast mode [ 296.796779][ T6788] bridge_slave_1: entered promiscuous mode [ 296.825984][ T6768] team0: Port device team_slave_0 added [ 296.926683][ T6768] team0: Port device team_slave_1 added [ 297.093127][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.179666][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.180975][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.180987][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.181003][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.427432][ T60] Bluetooth: hci6: command tx timeout [ 297.703330][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.703350][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.703501][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.186877][ T6788] team0: Port device team_slave_0 added [ 298.503974][ T6788] team0: Port device team_slave_1 added [ 299.511653][ T60] Bluetooth: hci6: command tx timeout [ 303.519329][ T6768] hsr_slave_0: entered promiscuous mode [ 303.542142][ T6768] hsr_slave_1: entered promiscuous mode [ 303.542808][ T6768] debugfs: 'hsr0' already exists in 'hsr' [ 303.542834][ T6768] Cannot create hsr debugfs directory [ 303.568381][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.568400][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.568429][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.835621][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.835634][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.835652][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.002367][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 305.158881][ T6788] hsr_slave_0: entered promiscuous mode [ 305.161593][ T6788] hsr_slave_1: entered promiscuous mode [ 305.163757][ T6788] debugfs: 'hsr0' already exists in 'hsr' [ 305.163776][ T6788] Cannot create hsr debugfs directory [ 309.612691][ T6896] binder: 6887:6896 ioctl c0306201 2000000003c0 returned -14 [ 311.420101][ T6690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.911605][ T67] bridge_slave_1: left allmulticast mode [ 311.911642][ T67] bridge_slave_1: left promiscuous mode [ 311.911954][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.546842][ T67] bridge_slave_0: left allmulticast mode [ 313.546874][ T67] bridge_slave_0: left promiscuous mode [ 313.547179][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.652815][ T67] bridge_slave_1: left allmulticast mode [ 313.652851][ T67] bridge_slave_1: left promiscuous mode [ 313.653148][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.968886][ T67] bridge_slave_0: left allmulticast mode [ 314.968922][ T67] bridge_slave_0: left promiscuous mode [ 314.969191][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.059924][ T67] bridge_slave_1: left allmulticast mode [ 315.059948][ T67] bridge_slave_1: left promiscuous mode [ 315.060111][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.217361][ T67] bridge_slave_0: left allmulticast mode [ 315.217395][ T67] bridge_slave_0: left promiscuous mode [ 315.217702][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.865686][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.995723][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.159390][ T6922] input: syz0 as /devices/virtual/input/input16 [ 316.181902][ T67] bond0 (unregistering): Released all slaves [ 316.638693][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.716145][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.782135][ T67] bond0 (unregistering): Released all slaves [ 317.385352][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.467997][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.547709][ T67] bond0 (unregistering): Released all slaves [ 317.744263][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.744375][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.767923][ T6690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.980640][ T6690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.019658][ T6690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.099317][ T6957] binder: 6948:6957 ioctl c0306201 2000000003c0 returned -14 [ 321.295796][ T6954] syz.2.198 (6954): drop_caches: 2 [ 321.984992][ T67] hsr_slave_0: left promiscuous mode [ 322.034922][ T67] hsr_slave_1: left promiscuous mode [ 322.036061][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.499442][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.918372][ T6968] ubi31: attaching mtd0 [ 323.920672][ T6968] ubi31: scanning is finished [ 323.923353][ T67] hsr_slave_0: left promiscuous mode [ 323.954702][ T67] hsr_slave_1: left promiscuous mode [ 323.955795][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.015910][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.209081][ T6968] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 324.384773][ T67] hsr_slave_0: left promiscuous mode [ 324.404340][ T6976] input: syz0 as /devices/virtual/input/input17 [ 324.434819][ T67] hsr_slave_1: left promiscuous mode [ 324.440079][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.489012][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.256052][ T67] team0 (unregistering): Port device team_slave_1 removed [ 325.365800][ T67] team0 (unregistering): Port device team_slave_0 removed [ 326.096251][ T67] team0 (unregistering): Port device team_slave_1 removed [ 326.138371][ T67] team0 (unregistering): Port device team_slave_0 removed [ 326.525564][ T67] team0 (unregistering): Port device team_slave_1 removed [ 326.566101][ T67] team0 (unregistering): Port device team_slave_0 removed [ 326.982456][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.100237][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.116339][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.118478][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.197545][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.197633][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.265235][ T6690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.265262][ T6690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.668805][ T6994] syz.2.206 (6994): drop_caches: 2 [ 330.799815][ T6768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.899907][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.903481][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.927491][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.927949][ T6768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.929146][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.929997][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.066656][ T6768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.381350][ T6768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.994693][ T5890] hid-generic FFF9:8004:0000.0002: unknown main item tag 0x0 [ 331.994745][ T5890] hid-generic FFF9:8004:0000.0002: unknown main item tag 0x0 [ 332.141613][ T5890] hid-generic FFF9:8004:0000.0002: hidraw0: HID vffffff.fd Device [syz0] on syz0 [ 332.290818][ T7027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 333.197240][ T60] Bluetooth: hci2: command tx timeout [ 333.670838][ T6788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 333.760808][ T6788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.878378][ T7042] input: syz0 as /devices/virtual/input/input18 [ 333.952882][ T6788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.051450][ T6788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.927563][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 334.989620][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.229212][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.254911][ T60] Bluetooth: hci2: command tx timeout [ 335.303141][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.305341][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.305594][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.305846][ T7005] bridge_slave_0: entered allmulticast mode [ 335.317619][ T7005] bridge_slave_0: entered promiscuous mode [ 335.354830][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.354993][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.355311][ T7005] bridge_slave_1: entered allmulticast mode [ 335.365366][ T7005] bridge_slave_1: entered promiscuous mode [ 335.447837][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.448010][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.477604][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.568432][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.640242][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.640394][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.644099][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.787045][ T7073] syz.2.214 (7073): drop_caches: 2 [ 337.334695][ T60] Bluetooth: hci2: command tx timeout [ 337.454244][ T7005] team0: Port device team_slave_0 added [ 337.517005][ T7005] team0: Port device team_slave_1 added [ 337.531811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.532035][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.843857][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.843875][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.843891][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.066531][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.066546][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.066563][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.068104][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.068194][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.702905][ T7005] hsr_slave_0: entered promiscuous mode [ 338.717421][ T7005] hsr_slave_1: entered promiscuous mode [ 339.415227][ T60] Bluetooth: hci2: command tx timeout [ 339.787765][ T67] bridge_slave_1: left allmulticast mode [ 339.787798][ T67] bridge_slave_1: left promiscuous mode [ 339.788064][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.865792][ T67] bridge_slave_0: left allmulticast mode [ 339.865814][ T67] bridge_slave_0: left promiscuous mode [ 339.866132][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.449264][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.535774][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.578405][ T67] bond0 (unregistering): Released all slaves [ 341.954884][ T67] hsr_slave_0: left promiscuous mode [ 341.994892][ T67] hsr_slave_1: left promiscuous mode [ 341.996161][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.026406][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.524666][ T907] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 342.704635][ T907] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.707731][ T907] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.707766][ T907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.707786][ T907] usb 3-1: Product: syz [ 342.707802][ T907] usb 3-1: Manufacturer: syz [ 342.707818][ T907] usb 3-1: SerialNumber: syz [ 342.766474][ T907] usb 3-1: config 0 descriptor?? [ 342.780967][ T67] team0 (unregistering): Port device team_slave_1 removed [ 342.835365][ T67] team0 (unregistering): Port device team_slave_0 removed [ 343.033418][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.389093][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.896415][ T6768] veth0_vlan: entered promiscuous mode [ 343.933211][ T6768] veth1_vlan: entered promiscuous mode [ 344.032975][ T6768] veth0_macvtap: entered promiscuous mode [ 344.148988][ T6768] veth1_macvtap: entered promiscuous mode [ 344.326282][ T7005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.437336][ T7005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.503821][ T7005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.531279][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.545550][ T7005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.609288][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.651856][ T3627] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.665492][ T3627] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.669028][ T3627] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.673143][ T3627] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.773468][ T6788] veth0_vlan: entered promiscuous mode [ 344.866891][ T6788] veth1_vlan: entered promiscuous mode [ 345.116708][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.116732][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.183042][ T6788] veth0_macvtap: entered promiscuous mode [ 345.222677][ T6788] veth1_macvtap: entered promiscuous mode [ 345.401458][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.473447][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.483804][ T5966] usb 3-1: USB disconnect, device number 9 [ 345.505002][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.535137][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.536519][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.538180][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.576420][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.634290][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.752492][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.965551][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.970952][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.971346][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.972832][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.093090][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.093263][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.244750][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 347.414873][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 347.418561][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.418590][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.419959][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.419988][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.420010][ T31] usb 3-1: Manufacturer: syz [ 347.498058][ T31] usb 3-1: config 0 descriptor?? [ 347.580451][ T60] Bluetooth: hci4: command tx timeout [ 347.671084][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.682724][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.693726][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.759151][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.761607][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.900282][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.900510][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.796469][ T907] usb 3-1: USB disconnect, device number 10 [ 349.038127][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.611863][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.655329][ T60] Bluetooth: hci4: command tx timeout [ 349.894775][ T60] Bluetooth: hci0: command tx timeout [ 350.122676][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.270771][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.287549][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.303353][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.318342][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.320457][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.597206][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.994713][ T5890] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 351.126278][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 351.134681][ T5890] usb 3-1: device descriptor read/64, error -71 [ 351.406827][ T5890] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 351.536613][ T5890] usb 3-1: device descriptor read/64, error -71 [ 351.575002][ T7163] chnl_net:caif_netlink_parms(): no params data found [ 351.596010][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.596238][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.596495][ T7144] bridge_slave_0: entered allmulticast mode [ 351.598375][ T7144] bridge_slave_0: entered promiscuous mode [ 351.620709][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.620837][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.621562][ T7144] bridge_slave_1: entered allmulticast mode [ 351.624345][ T7144] bridge_slave_1: entered promiscuous mode [ 351.629140][ T13] bridge_slave_1: left allmulticast mode [ 351.629176][ T13] bridge_slave_1: left promiscuous mode [ 351.629431][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.680941][ T5890] usb usb3-port1: attempt power cycle [ 351.727309][ T13] bridge_slave_0: left allmulticast mode [ 351.727341][ T13] bridge_slave_0: left promiscuous mode [ 351.727576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.734891][ T5807] Bluetooth: hci4: command tx timeout [ 351.974825][ T5807] Bluetooth: hci0: command tx timeout [ 352.024855][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 352.049366][ T5890] usb 3-1: device descriptor read/8, error -71 [ 352.304794][ T5890] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 352.340087][ T5890] usb 3-1: device descriptor read/8, error -71 [ 352.446657][ T5890] usb usb3-port1: unable to enumerate USB device [ 352.454897][ T5807] Bluetooth: hci3: command tx timeout [ 352.497009][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.575537][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.630082][ T13] bond0 (unregistering): Released all slaves [ 352.800477][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.851784][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.931245][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.188331][ T7144] team0: Port device team_slave_0 added [ 353.230905][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.231140][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.231408][ T7163] bridge_slave_0: entered allmulticast mode [ 353.268504][ T7163] bridge_slave_0: entered promiscuous mode [ 353.304220][ T7144] team0: Port device team_slave_1 added [ 353.305593][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.305716][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.305935][ T7163] bridge_slave_1: entered allmulticast mode [ 353.308626][ T7163] bridge_slave_1: entered promiscuous mode [ 353.544882][ T13] hsr_slave_0: left promiscuous mode [ 353.584765][ T13] hsr_slave_1: left promiscuous mode [ 353.586900][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.586927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.628620][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.628643][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.685977][ T13] veth1_macvtap: left promiscuous mode [ 353.686047][ T13] veth0_macvtap: left promiscuous mode [ 353.686226][ T13] veth1_vlan: left promiscuous mode [ 353.686332][ T13] veth0_vlan: left promiscuous mode [ 353.815125][ T5807] Bluetooth: hci4: command tx timeout [ 354.792268][ T60] Bluetooth: hci3: command tx timeout [ 354.792373][ T5807] Bluetooth: hci0: command tx timeout [ 356.175212][ T13] team0 (unregistering): Port device team_slave_1 removed [ 356.223304][ T7212] evm: overlay not supported [ 356.232348][ T13] team0 (unregistering): Port device team_slave_0 removed [ 356.816955][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.816974][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.817004][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.864698][ T5807] Bluetooth: hci0: command tx timeout [ 356.864744][ T5807] Bluetooth: hci3: command tx timeout [ 356.906696][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.929544][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.929565][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.929605][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.934257][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.947497][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 357.297019][ T7163] team0: Port device team_slave_0 added [ 357.392389][ T7163] team0: Port device team_slave_1 added [ 357.484065][ T7144] hsr_slave_0: entered promiscuous mode [ 357.492002][ T7144] hsr_slave_1: entered promiscuous mode [ 357.493168][ T7144] debugfs: 'hsr0' already exists in 'hsr' [ 357.493196][ T7144] Cannot create hsr debugfs directory [ 357.599911][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.599930][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.599959][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.839647][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.839668][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.839698][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.934819][ T60] Bluetooth: hci3: command tx timeout [ 359.014887][ T7228] syz.2.229 (7228): drop_caches: 2 [ 359.452834][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.453054][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.453270][ T7172] bridge_slave_0: entered allmulticast mode [ 359.465354][ T7172] bridge_slave_0: entered promiscuous mode [ 359.528658][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.528827][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.529105][ T7172] bridge_slave_1: entered allmulticast mode [ 359.532097][ T7172] bridge_slave_1: entered promiscuous mode [ 359.993068][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.046717][ T7163] hsr_slave_0: entered promiscuous mode [ 360.049656][ T7163] hsr_slave_1: entered promiscuous mode [ 360.050780][ T7163] debugfs: 'hsr0' already exists in 'hsr' [ 360.050807][ T7163] Cannot create hsr debugfs directory [ 360.058802][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.361304][ T7172] team0: Port device team_slave_0 added [ 360.417101][ T7005] veth0_vlan: entered promiscuous mode [ 360.427624][ T7172] team0: Port device team_slave_1 added [ 361.324773][ T101] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 361.459076][ T101] usb 3-1: device descriptor read/64, error -71 [ 361.704981][ T101] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 361.727712][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.727733][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.727761][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.770645][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.770662][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.770688][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.876218][ T101] usb 3-1: device descriptor read/64, error -71 [ 361.963833][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.985098][ T101] usb usb3-port1: attempt power cycle [ 362.018255][ T7005] veth1_vlan: entered promiscuous mode [ 362.281765][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.324713][ T101] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 362.347681][ T101] usb 3-1: device descriptor read/8, error -71 [ 362.454039][ T7172] hsr_slave_0: entered promiscuous mode [ 362.459646][ T7172] hsr_slave_1: entered promiscuous mode [ 362.460669][ T7172] debugfs: 'hsr0' already exists in 'hsr' [ 362.460696][ T7172] Cannot create hsr debugfs directory [ 362.614846][ T101] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 362.637348][ T101] usb 3-1: device descriptor read/8, error -71 [ 362.639730][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.746236][ T101] usb usb3-port1: unable to enumerate USB device [ 363.098656][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.360013][ T7005] veth0_macvtap: entered promiscuous mode [ 363.494797][ T7005] veth1_macvtap: entered promiscuous mode [ 363.867004][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.926229][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.953364][ T7163] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.992031][ T7163] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 364.172121][ T7242] syz.2.232 (7242): drop_caches: 2 [ 364.222449][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.289708][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.353339][ T7163] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 365.416301][ T7163] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 365.650846][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.758756][ T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.799993][ T145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.804345][ T145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.807374][ T145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.881365][ T7144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.955162][ T7144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.126874][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.205674][ T5890] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 367.260753][ T7144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.302207][ T7144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 367.354756][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 367.356643][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.356674][ T5890] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.358035][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.358056][ T5890] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.358068][ T5890] usb 3-1: Manufacturer: syz [ 367.363183][ T5890] usb 3-1: config 0 descriptor?? [ 367.932221][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.932245][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.236070][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.236094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.286660][ T13] bridge_slave_1: left allmulticast mode [ 368.286693][ T13] bridge_slave_1: left promiscuous mode [ 368.286982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.365899][ T13] bridge_slave_0: left allmulticast mode [ 368.365923][ T13] bridge_slave_0: left promiscuous mode [ 368.366112][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.428338][ T13] bridge_slave_1: left allmulticast mode [ 368.428362][ T13] bridge_slave_1: left promiscuous mode [ 368.428521][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.489528][ T13] bridge_slave_0: left allmulticast mode [ 368.489552][ T13] bridge_slave_0: left promiscuous mode [ 368.489716][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.799634][ T5966] usb 3-1: USB disconnect, device number 19 [ 369.264813][ T5966] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 369.414737][ T5966] usb 3-1: Using ep0 maxpacket: 8 [ 369.420394][ T5966] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.420426][ T5966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.420442][ T5966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.420456][ T5966] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.420484][ T5966] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.420499][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.578074][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.634428][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.646618][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.652225][ T5966] usb 3-1: GET_CAPABILITIES returned 0 [ 369.652260][ T5966] usbtmc 3-1:16.0: can't read capabilities [ 369.690404][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.737085][ T13] bond0 (unregistering): Released all slaves [ 369.870496][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.871419][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.871470][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.871508][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.871546][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873040][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873085][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873123][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873161][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873387][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873427][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873465][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873502][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873762][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873832][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.873902][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.890127][ T5890] usb 3-1: USB disconnect, device number 20 [ 370.365922][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.448034][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.488265][ T13] bond0 (unregistering): Released all slaves [ 371.509906][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.522096][ T7172] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 371.723789][ T5879] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 371.770865][ T7172] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 372.084502][ T5879] usb 3-1: device descriptor read/64, error -71 [ 372.574930][ T5879] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 372.718736][ T5879] usb 3-1: device descriptor read/64, error -71 [ 372.758925][ T7279] syz.5.239 (7279): drop_caches: 2 [ 372.848665][ T5879] usb usb3-port1: attempt power cycle [ 372.861713][ T7172] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 372.973469][ T7172] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 373.196108][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 373.225830][ T5879] usb 3-1: device descriptor read/8, error -71 [ 373.452669][ T7163] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.464680][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 373.485950][ T5879] usb 3-1: device descriptor read/8, error -71 [ 373.555276][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.595222][ T5879] usb usb3-port1: unable to enumerate USB device [ 374.926658][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.926833][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.966073][ T7311] syz.2.243 (7311): drop_caches: 2 [ 375.073732][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.073842][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.597801][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.682617][ T7316] fuse: Bad value for 'fd' [ 375.779682][ T13] hsr_slave_0: left promiscuous mode [ 375.816103][ T13] hsr_slave_1: left promiscuous mode [ 375.817052][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.817071][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.887071][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.887101][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.094704][ T5801] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 377.147986][ T5801] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 377.148068][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.148094][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.148140][ T5801] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.148164][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.162915][ T5801] usb 3-1: config 0 descriptor?? [ 377.201566][ T13] hsr_slave_0: left promiscuous mode [ 377.220946][ T5801] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 377.245790][ T13] hsr_slave_1: left promiscuous mode [ 377.246521][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.246543][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.273446][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.273476][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.327133][ T13] veth1_macvtap: left promiscuous mode [ 377.327270][ T13] veth0_macvtap: left promiscuous mode [ 377.327498][ T13] veth1_vlan: left promiscuous mode [ 377.327606][ T13] veth0_vlan: left promiscuous mode [ 377.424902][ T13] veth1_macvtap: left promiscuous mode [ 377.424971][ T13] veth0_macvtap: left promiscuous mode [ 377.425121][ T13] veth1_vlan: left promiscuous mode [ 377.425237][ T13] veth0_vlan: left promiscuous mode [ 378.167081][ T13] team0 (unregistering): Port device team_slave_1 removed [ 378.201113][ T13] team0 (unregistering): Port device team_slave_0 removed [ 378.785760][ T13] team0 (unregistering): Port device team_slave_1 removed [ 378.816427][ T13] team0 (unregistering): Port device team_slave_0 removed [ 379.089543][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.089810][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.181259][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.181330][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.211704][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.211849][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.223937][ T5801] usb 3-1: USB disconnect, device number 25 [ 380.115471][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.502991][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.570762][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.571279][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.136235][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.136381][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.759491][ T5879] hid-generic FFF9:8004:0000.0003: unknown main item tag 0x0 [ 388.759518][ T5879] hid-generic FFF9:8004:0000.0003: unknown main item tag 0x0 [ 388.819383][ T5879] hid-generic FFF9:8004:0000.0003: hidraw0: HID vffffff.fd Device [syz0] on syz0 [ 389.117954][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.122272][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.123419][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.185170][ T7374] fuse: Bad value for 'fd' [ 390.920650][ T7381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.382162][ T7380] ubi31: attaching mtd0 [ 391.383876][ T7380] ubi31: scanning is finished [ 391.767109][ T7392] input: syz1 as /devices/virtual/input/input19 [ 392.430703][ T7380] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 392.679781][ T5801] hid-generic FFF9:8004:0000.0004: unknown main item tag 0x0 [ 392.679817][ T5801] hid-generic FFF9:8004:0000.0004: unknown main item tag 0x0 [ 392.963153][ T5801] hid-generic FFF9:8004:0000.0004: hidraw0: HID vffffff.fd Device [syz0] on syz0 [ 393.990048][ T7172] veth0_vlan: entered promiscuous mode [ 394.340843][ T7163] veth0_vlan: entered promiscuous mode [ 394.363749][ T7172] veth1_vlan: entered promiscuous mode [ 394.413839][ T7144] veth0_vlan: entered promiscuous mode [ 397.125328][ T7163] veth1_vlan: entered promiscuous mode [ 398.536401][ T7144] veth1_vlan: entered promiscuous mode [ 398.673501][ T7172] veth0_macvtap: entered promiscuous mode [ 398.745310][ T7172] veth1_macvtap: entered promiscuous mode [ 399.367380][ T7163] veth0_macvtap: entered promiscuous mode [ 399.384221][ T7144] veth0_macvtap: entered promiscuous mode [ 399.407188][ T7163] veth1_macvtap: entered promiscuous mode [ 399.421506][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.469977][ T7144] veth1_macvtap: entered promiscuous mode [ 399.502576][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.543707][ T1179] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.550667][ T1179] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.557849][ T1179] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.562611][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.563014][ T1179] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.568116][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.613035][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.650274][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.828116][ T3557] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.882652][ T3557] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.945671][ T3557] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.952671][ T3557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.136384][ T3557] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.044611][ T7357] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.277829][ T1179] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.674732][ T1179] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.797926][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.797951][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.130896][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.130921][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.390506][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.390530][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.818428][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.818452][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.192373][ T5879] hid-generic FFF9:8004:0000.0005: unknown main item tag 0x0 [ 406.192412][ T5879] hid-generic FFF9:8004:0000.0005: unknown main item tag 0x0 [ 406.313901][ T5879] hid-generic FFF9:8004:0000.0005: hidraw0: HID vffffff.fd Device [syz0] on syz0 [ 409.602382][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.650230][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.684481][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.691839][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.719879][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.867911][ T5807] Bluetooth: hci5: command tx timeout [ 414.074109][ T5807] Bluetooth: hci5: command tx timeout [ 416.167639][ T5807] Bluetooth: hci5: command tx timeout [ 416.690112][ T172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.553763][ T7535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.080540][ T172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.142338][ T7539] netlink: 44 bytes leftover after parsing attributes in process `syz.7.275'. [ 418.234624][ T5807] Bluetooth: hci5: command tx timeout [ 422.098988][ T172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.598309][ T5966] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 423.662575][ T172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.724778][ T5966] usb 3-1: device descriptor read/64, error -71 [ 423.994721][ T5966] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 424.167321][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 424.214940][ T5966] usb 3-1: device descriptor read/64, error -71 [ 424.343050][ T5966] usb usb3-port1: attempt power cycle [ 424.694753][ T5966] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 424.756908][ T5966] usb 3-1: device descriptor read/8, error -71 [ 424.980712][ T7576] binder: 7572:7576 ioctl c0306201 2000000003c0 returned -14 [ 424.994669][ T5966] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 425.016467][ T5966] usb 3-1: device descriptor read/8, error -71 [ 425.125229][ T5966] usb usb3-port1: unable to enumerate USB device [ 431.146598][ T7602] syz.2.296 (7602): drop_caches: 2 [ 431.835507][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.835584][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.835969][ T7479] bridge_slave_0: entered allmulticast mode [ 431.845230][ T7479] bridge_slave_0: entered promiscuous mode [ 431.863301][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.877362][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.877984][ T7479] bridge_slave_1: entered allmulticast mode [ 431.899091][ T7479] bridge_slave_1: entered promiscuous mode [ 432.197594][ T172] bridge_slave_1: left allmulticast mode [ 432.197726][ T172] bridge_slave_1: left promiscuous mode [ 432.202410][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.613604][ T172] bridge_slave_0: left allmulticast mode [ 434.613627][ T172] bridge_slave_0: left promiscuous mode [ 434.613806][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.982583][ T5870] hid-generic FFF9:8004:0000.0006: unknown main item tag 0x0 [ 434.982622][ T5870] hid-generic FFF9:8004:0000.0006: unknown main item tag 0x0 [ 435.096038][ T5870] hid-generic FFF9:8004:0000.0006: hidraw0: HID vffffff.fd Device [syz0] on syz0 [ 435.215472][ T7627] binder: 7618:7627 ioctl c0306201 2000000003c0 returned -14 [ 437.244295][ T7630] syz.5.305 (7630): drop_caches: 2 [ 437.399206][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.581509][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.626625][ T172] bond0 (unregistering): Released all slaves [ 438.687443][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.709392][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.468214][ T7479] team0: Port device team_slave_0 added [ 439.504095][ T7479] team0: Port device team_slave_1 added [ 439.515182][ T7643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.297'. [ 441.048696][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.048746][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.318745][ T7662] netlink: 44 bytes leftover after parsing attributes in process `syz.5.306'. [ 444.052074][ T7667] ubi31: attaching mtd0 [ 444.133155][ T7667] ubi31: scanning is finished [ 447.217816][ T7673] syz.8.315 (7673): drop_caches: 2 [ 447.417293][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.417324][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.417356][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.638048][ T7667] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 447.878219][ T172] hsr_slave_0: left promiscuous mode [ 447.896944][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.926640][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.944472][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.977089][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.985162][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.986095][ T172] hsr_slave_1: left promiscuous mode [ 447.988232][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.988260][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.145683][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.145704][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.399629][ T172] veth1_macvtap: left promiscuous mode [ 448.399704][ T172] veth0_macvtap: left promiscuous mode [ 448.399860][ T172] veth1_vlan: left promiscuous mode [ 448.399967][ T172] veth0_vlan: left promiscuous mode [ 450.064658][ T5807] Bluetooth: hci4: command tx timeout [ 452.401667][ T5807] Bluetooth: hci4: command tx timeout [ 452.584764][ T172] team0 (unregistering): Port device team_slave_1 removed [ 452.626148][ T172] team0 (unregistering): Port device team_slave_0 removed [ 452.900018][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.900032][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.900051][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.981541][ T7721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.455239][ T5807] Bluetooth: hci4: command tx timeout [ 454.573397][ T7479] hsr_slave_0: entered promiscuous mode [ 454.607973][ T7479] hsr_slave_1: entered promiscuous mode [ 454.632351][ T7479] debugfs: 'hsr0' already exists in 'hsr' [ 454.632383][ T7479] Cannot create hsr debugfs directory [ 454.734049][ T7732] fuse: Unknown parameter 'fd00000000000000000000' [ 454.851913][ T7735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.324'. [ 456.534751][ T60] Bluetooth: hci4: command tx timeout [ 457.870875][ T7746] syz.2.325 (7746): drop_caches: 2 [ 458.380816][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 460.564706][ T5938] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 460.754673][ T5938] usb 9-1: Using ep0 maxpacket: 32 [ 460.823194][ T5938] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.823230][ T5938] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.823258][ T5938] usb 9-1: config 0 interface 0 has no altsetting 0 [ 460.856543][ T5938] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 460.856581][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.856605][ T5938] usb 9-1: Product: syz [ 460.856622][ T5938] usb 9-1: Manufacturer: syz [ 460.856638][ T5938] usb 9-1: SerialNumber: syz [ 460.944663][ T5938] usb 9-1: config 0 descriptor?? [ 462.028551][ T5938] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 462.435640][ T5938] gs_usb 9-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 462.497544][ T7786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.575133][ T172] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.786740][ T5938] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -22 [ 463.550180][ T5938] usb 9-1: USB disconnect, device number 2 [ 463.851033][ T7808] No control pipe specified [ 464.513521][ T172] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.508551][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 468.029433][ T172] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.386051][ T7842] netlink: 44 bytes leftover after parsing attributes in process `syz.5.337'. [ 468.440461][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.462178][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.463709][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.479926][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.480786][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.606031][ T172] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.302613][ T7854] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 472.317859][ T7854] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 473.096808][ T5807] Bluetooth: hci3: command tx timeout [ 473.305778][ T7872] input: syz0 as /devices/virtual/input/input20 [ 475.174756][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 475.175037][ T60] Bluetooth: hci3: command tx timeout [ 475.335372][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 477.254757][ T5805] Bluetooth: hci3: command tx timeout [ 478.781022][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 479.353669][ T5807] Bluetooth: hci3: command tx timeout [ 480.209628][ T5879] usb 6-1: device descriptor read/all, error -71 [ 480.347966][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.348111][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.353890][ T7678] bridge_slave_0: entered allmulticast mode [ 480.386778][ T7678] bridge_slave_0: entered promiscuous mode [ 480.441487][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.441635][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.441876][ T7678] bridge_slave_1: entered allmulticast mode [ 480.475256][ T7678] bridge_slave_1: entered promiscuous mode [ 481.206333][ T7898] overlayfs: failed to resolve './file0': -2 [ 481.901647][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.088496][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.515529][ T7907] syz.8.346 (7907): drop_caches: 2 [ 485.310495][ T7913] syz.2.348 (7913): drop_caches: 2 [ 486.814669][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 486.853176][ T7678] team0: Port device team_slave_0 added [ 486.956359][ T7931] siw: device registration error -23 [ 487.889150][ T7678] team0: Port device team_slave_1 added [ 488.037373][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.037393][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.037423][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.115749][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.115769][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.115801][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.420851][ T7678] hsr_slave_0: entered promiscuous mode [ 488.441591][ T7678] hsr_slave_1: entered promiscuous mode [ 488.442740][ T7678] debugfs: 'hsr0' already exists in 'hsr' [ 488.442768][ T7678] Cannot create hsr debugfs directory [ 488.950444][ T7843] chnl_net:caif_netlink_parms(): no params data found [ 489.655311][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 490.794219][ T9] usb 3-1: device descriptor read/all, error -71 [ 490.889581][ T7950] overlayfs: failed to resolve './file1': -2 [ 492.919180][ T172] bridge_slave_1: left allmulticast mode [ 492.919203][ T172] bridge_slave_1: left promiscuous mode [ 492.919380][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.065543][ T172] bridge_slave_0: left allmulticast mode [ 493.065567][ T172] bridge_slave_0: left promiscuous mode [ 493.065753][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.826412][ T7971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.304741][ T5870] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 494.494608][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 494.498660][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.498692][ T5870] usb 3-1: config 0 has no interfaces? [ 494.512621][ T5870] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 494.512657][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 494.512680][ T5870] usb 3-1: Product: syz [ 494.512696][ T5870] usb 3-1: Manufacturer: syz [ 494.512712][ T5870] usb 3-1: SerialNumber: syz [ 495.701890][ T5870] usb 3-1: config 0 descriptor?? [ 495.937515][ T5879] usb 3-1: USB disconnect, device number 32 [ 498.172334][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.256806][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.298232][ T172] bond0 (unregistering): Released all slaves [ 499.027652][ T8019] overlayfs: failed to resolve './file1': -2 [ 501.991138][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.991283][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.991772][ T7843] bridge_slave_0: entered allmulticast mode [ 502.011826][ T7843] bridge_slave_0: entered promiscuous mode [ 502.037280][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.037453][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.037754][ T7843] bridge_slave_1: entered allmulticast mode [ 502.066418][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.066518][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.070071][ T7843] bridge_slave_1: entered promiscuous mode [ 504.484756][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.650280][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.677308][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.691976][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.711457][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.712468][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.012795][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.233193][ T8061] input: syz1 as /devices/virtual/input/input21 [ 505.418907][ T7843] team0: Port device team_slave_0 added [ 505.489108][ T7843] team0: Port device team_slave_1 added [ 506.277290][ T8073] netlink: 156 bytes leftover after parsing attributes in process `syz.5.370'. [ 507.733593][ T8075] ubi31: attaching mtd0 [ 507.735459][ T8075] ubi31: scanning is finished [ 508.074880][ T5807] Bluetooth: hci5: command tx timeout [ 508.215212][ T172] hsr_slave_0: left promiscuous mode [ 508.300813][ T172] hsr_slave_1: left promiscuous mode [ 508.302025][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.302055][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.655964][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.655988][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.782543][ T172] veth1_macvtap: left promiscuous mode [ 509.782661][ T172] veth0_macvtap: left promiscuous mode [ 509.782834][ T172] veth1_vlan: left promiscuous mode [ 509.784887][ T172] veth0_vlan: left promiscuous mode [ 509.788984][ T8075] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 510.154631][ T5805] Bluetooth: hci5: command tx timeout [ 510.699418][ T172] team0 (unregistering): Port device team_slave_1 removed [ 510.758490][ T172] team0 (unregistering): Port device team_slave_0 removed [ 511.082329][ T8097] overlayfs: failed to resolve './file1': -2 [ 512.214856][ T5805] Bluetooth: hci5: command tx timeout [ 513.381195][ T8108] syz.2.375 (8108): drop_caches: 2 [ 514.389784][ T5805] Bluetooth: hci5: command tx timeout [ 514.632264][ T8115] netlink: 44 bytes leftover after parsing attributes in process `syz.8.378'. [ 514.653167][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.653189][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.653221][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.904770][ T5938] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 515.211215][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.211236][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.211266][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.703554][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.703644][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 515.703695][ T5938] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 515.703721][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.761480][ T5938] usb 3-1: config 0 descriptor?? [ 515.780189][ T5938] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 515.873720][ T7843] hsr_slave_0: entered promiscuous mode [ 515.881707][ T7843] hsr_slave_1: entered promiscuous mode [ 515.882818][ T7843] debugfs: 'hsr0' already exists in 'hsr' [ 515.882846][ T7843] Cannot create hsr debugfs directory [ 518.910576][ T8144] netlink: 44 bytes leftover after parsing attributes in process `syz.8.382'. [ 520.034723][ T5801] usb 3-1: USB disconnect, device number 33 [ 525.827301][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 525.920624][ T8172] overlayfs: failed to resolve './file1': -2 [ 526.164936][ T8177] netlink: 44 bytes leftover after parsing attributes in process `syz.5.388'. [ 527.283400][ T8186] input: syz1 as /devices/virtual/input/input22 [ 528.998917][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.000977][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.001265][ T8055] bridge_slave_0: entered allmulticast mode [ 529.004863][ T8055] bridge_slave_0: entered promiscuous mode [ 529.008356][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.008556][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.008752][ T8055] bridge_slave_1: entered allmulticast mode [ 529.011750][ T8055] bridge_slave_1: entered promiscuous mode [ 530.400039][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.402659][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.459034][ T5938] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 531.954967][ T5938] usb 9-1: Using ep0 maxpacket: 8 [ 531.985199][ T5938] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.985255][ T5938] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.000872][ T5938] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 532.000922][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.000944][ T5938] usb 9-1: Product: syz [ 532.000960][ T5938] usb 9-1: Manufacturer: syz [ 532.000974][ T5938] usb 9-1: SerialNumber: syz [ 532.108808][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.131650][ T5938] usb 9-1: config 0 descriptor?? [ 532.147752][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.152777][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.162314][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.174477][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.285912][ T5938] usb 9-1: can't set config #0, error -71 [ 532.321018][ T5938] usb 9-1: USB disconnect, device number 3 [ 532.824943][ T8236] overlayfs: failed to resolve './file1': -2 [ 532.950551][ T8055] team0: Port device team_slave_0 added [ 532.954291][ T8055] team0: Port device team_slave_1 added [ 534.803697][ T5807] Bluetooth: hci3: command tx timeout [ 534.852500][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.852520][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.852548][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.885548][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.885567][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.885599][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.859709][ T5805] Bluetooth: hci3: command tx timeout [ 537.035468][ T8055] hsr_slave_0: entered promiscuous mode [ 537.037994][ T8055] hsr_slave_1: entered promiscuous mode [ 537.039163][ T8055] debugfs: 'hsr0' already exists in 'hsr' [ 537.039203][ T8055] Cannot create hsr debugfs directory [ 538.934687][ T5805] Bluetooth: hci3: command tx timeout [ 539.817236][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 539.944002][ T172] bridge_slave_1: left allmulticast mode [ 539.944037][ T172] bridge_slave_1: left promiscuous mode [ 539.944325][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.027317][ T172] bridge_slave_0: left allmulticast mode [ 540.027356][ T172] bridge_slave_0: left promiscuous mode [ 540.027658][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.115760][ T172] bridge_slave_1: left allmulticast mode [ 540.115799][ T172] bridge_slave_1: left promiscuous mode [ 540.116546][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.230857][ T172] bridge_slave_0: left allmulticast mode [ 540.230881][ T172] bridge_slave_0: left promiscuous mode [ 540.231052][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.785811][ T8292] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 541.014857][ T5805] Bluetooth: hci3: command tx timeout [ 541.671063][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.451386][ T8298] syz.2.408 (8298): drop_caches: 2 [ 543.012520][ T8301] overlayfs: failed to resolve './file1': -2 [ 543.063022][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.154380][ T172] bond0 (unregistering): Released all slaves [ 543.773513][ T8304] capability: warning: `syz.8.409' uses deprecated v2 capabilities in a way that may be insecure [ 545.314838][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.447794][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.581598][ T172] bond0 (unregistering): Released all slaves [ 548.615253][ T172] hsr_slave_0: left promiscuous mode [ 548.636041][ T172] hsr_slave_1: left promiscuous mode [ 548.636878][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.689194][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.874653][ T5938] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 548.944649][ T172] hsr_slave_0: left promiscuous mode [ 548.985067][ T172] hsr_slave_1: left promiscuous mode [ 548.986228][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.034592][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 549.043789][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.043823][ T5938] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 549.045587][ T5938] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 549.045619][ T5938] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 549.045639][ T5938] usb 3-1: Manufacturer: syz [ 549.058454][ T5938] usb 3-1: config 0 descriptor?? [ 549.095125][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.951988][ T101] usb 3-1: USB disconnect, device number 34 [ 552.081594][ T8353] siw: device registration error -23 [ 555.494626][ T8207] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 556.038772][ T8207] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 556.038808][ T8207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.038828][ T8207] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.038867][ T8207] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.038891][ T8207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.097331][ T8207] usb 3-1: config 0 descriptor?? [ 556.516312][ T172] team0 (unregistering): Port device team_slave_1 removed [ 556.521626][ T8207] usb 3-1: string descriptor 0 read error: -71 [ 556.541425][ T8207] usb 3-1: USB disconnect, device number 35 [ 556.627572][ T172] team0 (unregistering): Port device team_slave_0 removed [ 559.535624][ T172] team0 (unregistering): Port device team_slave_1 removed [ 559.587214][ T172] team0 (unregistering): Port device team_slave_0 removed [ 560.116831][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.117049][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.119927][ T8226] bridge_slave_0: entered allmulticast mode [ 560.147650][ T8226] bridge_slave_0: entered promiscuous mode [ 560.173124][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.173269][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.173526][ T8226] bridge_slave_1: entered allmulticast mode [ 560.198899][ T8226] bridge_slave_1: entered promiscuous mode [ 560.915895][ T8377] syz.2.423 (8377): drop_caches: 2 [ 561.587365][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.592911][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.321119][ T8226] team0: Port device team_slave_0 added [ 562.325032][ T8207] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 562.340912][ T8226] team0: Port device team_slave_1 added [ 562.547922][ T8207] usb 6-1: Using ep0 maxpacket: 8 [ 562.916563][ T8207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.916602][ T8207] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 563.004500][ T8207] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 563.004545][ T8207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.004567][ T8207] usb 6-1: Product: syz [ 563.004583][ T8207] usb 6-1: Manufacturer: syz [ 563.004600][ T8207] usb 6-1: SerialNumber: syz [ 563.020438][ T8207] usb 6-1: config 0 descriptor?? [ 563.090556][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.090578][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.090610][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.144056][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.144077][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.144108][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.330637][ T8226] hsr_slave_0: entered promiscuous mode [ 563.332406][ T8226] hsr_slave_1: entered promiscuous mode [ 563.333465][ T8226] debugfs: 'hsr0' already exists in 'hsr' [ 563.358102][ T8226] Cannot create hsr debugfs directory [ 563.488920][ T5886] usb 6-1: USB disconnect, device number 4 [ 563.503169][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.503253][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.386968][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.468135][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.489699][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.491079][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.492394][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.524817][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 570.534728][ T5807] Bluetooth: hci4: command tx timeout [ 570.734635][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 570.736996][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 570.759591][ T5886] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 570.759628][ T5886] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 570.759651][ T5886] usb 6-1: Product: syz [ 570.759665][ T5886] usb 6-1: Manufacturer: syz [ 570.759681][ T5886] usb 6-1: SerialNumber: syz [ 571.272461][ T5886] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 571.272490][ T5886] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 571.272511][ T5886] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 571.272532][ T5886] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 571.669710][ T5886] usb 6-1: palm_os_3_probe - error -110 getting bytes available request [ 571.670742][ T5886] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 571.990627][ T5886] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 572.008626][ T5886] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 572.052126][ T5886] usb 6-1: USB disconnect, device number 5 [ 572.089352][ T5886] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 572.107665][ T5886] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 572.110059][ T5886] visor 6-1:1.0: device disconnected [ 572.634892][ T5807] Bluetooth: hci4: command tx timeout [ 572.894172][ T7715] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 573.156141][ T7715] usb 9-1: Using ep0 maxpacket: 8 [ 573.891393][ T8451] siw: device registration error -23 [ 574.477295][ T7715] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.477332][ T7715] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.477360][ T7715] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.477386][ T7715] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.477437][ T7715] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 574.477463][ T7715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.829179][ T5807] Bluetooth: hci4: command tx timeout [ 575.197084][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.199208][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.224935][ T7715] usb 9-1: GET_CAPABILITIES returned 0 [ 575.224995][ T7715] usbtmc 9-1:16.0: can't read capabilities [ 575.753536][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.753633][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.753721][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.754090][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.754168][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.754244][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.754736][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.754818][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.755147][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.755225][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.755302][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.755660][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.755746][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.755822][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.756185][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.756265][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 575.844046][ T5886] usb 9-1: USB disconnect, device number 4 [ 577.077579][ T5807] Bluetooth: hci4: command tx timeout [ 577.326877][ T7715] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 577.885539][ T8479] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 578.347772][ T7715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.347836][ T7715] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 578.347886][ T7715] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 578.347912][ T7715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.596700][ T7715] usb 3-1: config 0 descriptor?? [ 578.694037][ T7715] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 579.658984][ T8409] chnl_net:caif_netlink_parms(): no params data found [ 579.976050][ T5886] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 580.162023][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.162062][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 580.162091][ T5886] usb 9-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 580.162106][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.222494][ T5886] usb 9-1: config 0 descriptor?? [ 580.258791][ T5886] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 581.058359][ T5938] usb 3-1: USB disconnect, device number 36 [ 581.466406][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.468292][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.469064][ T8409] bridge_slave_0: entered allmulticast mode [ 581.479306][ T8409] bridge_slave_0: entered promiscuous mode [ 581.524662][ T5938] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 581.559394][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.559472][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.559634][ T8409] bridge_slave_1: entered allmulticast mode [ 581.565245][ T8409] bridge_slave_1: entered promiscuous mode [ 581.645339][ T8226] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 581.709153][ T5938] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 581.709186][ T5938] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 581.709233][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 581.709277][ T5938] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.709300][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.752670][ T8226] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 581.830890][ T5938] usb 3-1: config 0 descriptor?? [ 581.869407][ T5938] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 581.882919][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.888491][ T8226] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 582.010492][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.017183][ T8226] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 582.436223][ T8409] team0: Port device team_slave_0 added [ 582.461681][ T8409] team0: Port device team_slave_1 added [ 582.785011][ T8526] netlink: 44 bytes leftover after parsing attributes in process `syz.5.444'. [ 583.562829][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.562851][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.562883][ T8409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.620364][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.620383][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.620411][ T8409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.746840][ T5886] usb 9-1: USB disconnect, device number 5 [ 583.814776][ T8539] netlink: 44 bytes leftover after parsing attributes in process `syz.5.445'. [ 584.036872][ T8409] hsr_slave_0: entered promiscuous mode [ 584.039371][ T8409] hsr_slave_1: entered promiscuous mode [ 584.040689][ T8409] debugfs: 'hsr0' already exists in 'hsr' [ 584.040719][ T8409] Cannot create hsr debugfs directory [ 585.122947][ T172] bridge_slave_1: left allmulticast mode [ 585.123009][ T172] bridge_slave_1: left promiscuous mode [ 585.123315][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.211912][ T5938] usb 3-1: USB disconnect, device number 37 [ 585.517631][ T172] bridge_slave_0: left allmulticast mode [ 585.517670][ T172] bridge_slave_0: left promiscuous mode [ 585.518021][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.609574][ T172] bridge_slave_1: left allmulticast mode [ 585.609611][ T172] bridge_slave_1: left promiscuous mode [ 585.609881][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.990794][ T8551] netlink: 44 bytes leftover after parsing attributes in process `syz.2.450'. [ 586.066392][ T172] bridge_slave_0: left allmulticast mode [ 586.066429][ T172] bridge_slave_0: left promiscuous mode [ 586.066703][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.266898][ T8554] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 587.230008][ T8541] siw: device registration error -23 [ 588.862080][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.124016][ T8567] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 590.050751][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.166314][ T172] bond0 (unregistering): Released all slaves [ 590.477823][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.555515][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.627426][ T172] bond0 (unregistering): Released all slaves [ 590.724923][ T8570] netlink: 44 bytes leftover after parsing attributes in process `syz.5.454'. [ 591.862507][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.883863][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.890436][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.891580][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.931580][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 592.756098][ T172] hsr_slave_0: left promiscuous mode [ 592.861151][ T172] hsr_slave_1: left promiscuous mode [ 592.863114][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.911679][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.117952][ T172] hsr_slave_0: left promiscuous mode [ 593.186237][ T172] hsr_slave_1: left promiscuous mode [ 593.294742][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.376456][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.054680][ T5807] Bluetooth: hci5: command tx timeout [ 595.027230][ T172] team0 (unregistering): Port device team_slave_1 removed [ 595.033783][ T8587] overlayfs: failed to resolve './file1': -2 [ 595.497831][ T172] team0 (unregistering): Port device team_slave_0 removed [ 595.528554][ T8589] binder: 8583:8589 ioctl c0306201 2000000003c0 returned -14 [ 596.239272][ T8595] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 597.128836][ T5807] Bluetooth: hci5: command tx timeout [ 597.324620][ T5886] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 597.528444][ T5886] usb 9-1: Using ep0 maxpacket: 8 [ 597.895688][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 597.895725][ T5886] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 597.915411][ T5886] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 597.915446][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.915467][ T5886] usb 9-1: Product: syz [ 597.915481][ T5886] usb 9-1: Manufacturer: syz [ 597.915494][ T5886] usb 9-1: SerialNumber: syz [ 597.920919][ T5886] usb 9-1: config 0 descriptor?? [ 598.246369][ T5886] usb 9-1: USB disconnect, device number 6 [ 598.676441][ T172] team0 (unregistering): Port device team_slave_1 removed [ 598.825898][ T172] team0 (unregistering): Port device team_slave_0 removed [ 598.874899][ T8603] ubi31: attaching mtd0 [ 598.876749][ T8603] ubi31: scanning is finished [ 598.909602][ T8606] netlink: 44 bytes leftover after parsing attributes in process `syz.8.464'. [ 599.524789][ T5807] Bluetooth: hci5: command tx timeout [ 599.825841][ T8609] overlayfs: failed to resolve './file0': -2 [ 599.906151][ T8603] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 599.906178][ T8603] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 599.906190][ T8603] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 599.906200][ T8603] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 599.906211][ T8603] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 599.906221][ T8603] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 599.906232][ T8603] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1597563550 [ 599.906245][ T8603] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 599.914537][ T8610] ubi31: background thread "ubi_bgt31d" started, PID 8610 [ 601.707296][ T5807] Bluetooth: hci5: command tx timeout [ 602.901037][ T8630] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 608.888757][ T8572] chnl_net:caif_netlink_parms(): no params data found [ 610.156651][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.156786][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.156959][ T8572] bridge_slave_0: entered allmulticast mode [ 610.166569][ T8572] bridge_slave_0: entered promiscuous mode [ 610.714104][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.714264][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.714638][ T8572] bridge_slave_1: entered allmulticast mode [ 610.717370][ T8572] bridge_slave_1: entered promiscuous mode [ 610.786120][ T8656] overlayfs: failed to resolve './file1': -2 [ 610.865048][ T8409] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 611.109562][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 611.109586][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 611.109607][ T5807] Tainted: [L]=SOFTLOCKUP [ 611.109612][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 611.109621][ T5807] Workqueue: hci0 hci_rx_work [ 611.109774][ T5807] Call Trace: [ 611.109780][ T5807] [ 611.109785][ T5807] dump_stack_lvl+0xe8/0x150 [ 611.109860][ T5807] sysfs_create_dir_ns+0x271/0x2a0 [ 611.109918][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 611.110002][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 611.110019][ T5807] ? rt_spin_unlock+0x160/0x200 [ 611.110036][ T5807] kobject_add_internal+0x631/0xd10 [ 611.110090][ T5807] kobject_add+0x163/0x240 [ 611.110107][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 611.110124][ T5807] ? get_device_parent+0x370/0x3a0 [ 611.110197][ T5807] device_add+0x408/0xb80 [ 611.110214][ T5807] hci_conn_add_sysfs+0xd5/0x210 [ 611.110250][ T5807] le_conn_complete_evt+0xf1d/0x1430 [ 611.110286][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 611.110301][ T5807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.110320][ T5807] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.110370][ T5807] ? skb_pull_data+0xfb/0x200 [ 611.110421][ T5807] hci_le_conn_complete_evt+0x187/0x470 [ 611.110439][ T5807] hci_event_packet+0x7af/0x12c0 [ 611.110461][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 611.110501][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 611.110518][ T5807] ? rt_spin_unlock+0x14f/0x200 [ 611.110538][ T5807] ? hci_send_to_monitor+0xe2/0x590 [ 611.110555][ T5807] hci_rx_work+0x3ee/0x1030 [ 611.110577][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 611.110616][ T5807] process_scheduled_works+0xb02/0x1830 [ 611.110651][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.110673][ T5807] ? assign_work+0x3d5/0x5e0 [ 611.110693][ T5807] worker_thread+0xa50/0xfc0 [ 611.110727][ T5807] kthread+0x388/0x470 [ 611.110740][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 611.110757][ T5807] ? __pfx_kthread+0x10/0x10 [ 611.110771][ T5807] ret_from_fork+0x51e/0xb90 [ 611.110802][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 611.110818][ T5807] ? __switch_to+0xc7d/0x1450 [ 611.110847][ T5807] ? __pfx_kthread+0x10/0x10 [ 611.110861][ T5807] ret_from_fork_asm+0x1a/0x30 [ 611.110884][ T5807] [ 611.110924][ T5807] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 611.110951][ T5807] Bluetooth: hci0: failed to register connection device [ 611.551652][ T8409] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 611.583618][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.603909][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.606964][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.610997][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.611931][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.726617][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.753226][ T8661] ubi: mtd0 is already attached to ubi31 [ 611.799776][ T8409] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 612.277370][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.279054][ T8409] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 613.481643][ T8677] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 613.934531][ T5805] Bluetooth: hci3: command tx timeout [ 614.130314][ T8572] team0: Port device team_slave_0 added [ 614.249628][ T8572] team0: Port device team_slave_1 added [ 614.708058][ T8685] siw: device registration error -23 [ 614.775431][ T7715] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 615.656918][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 615.657037][ T9] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 615.657063][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.657093][ T9] Tainted: [L]=SOFTLOCKUP [ 615.657101][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 615.657116][ T9] Workqueue: events l2cap_info_timeout [ 615.657181][ T9] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 615.657261][ T9] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 24 fc 08 cc 66 66 66 66 66 66 2e [ 615.657282][ T9] RSP: 0018:ffffc900000e7828 EFLAGS: 00010202 [ 615.657326][ T9] RAX: dffffc0000000000 RBX: ffffffff88ec968e RCX: 0000000080000001 [ 615.657343][ T9] RDX: 0000000000000000 RSI: ffffffff88ec968e RDI: 000000000000006b [ 615.657359][ T9] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 615.657372][ T9] R10: dffffc0000000000 R11: ffffffff8a22b300 R12: 0000000000000000 [ 615.657388][ T9] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 615.657403][ T9] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 615.657421][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.657437][ T9] CR2: 0000001b3281dff8 CR3: 0000000060228000 CR4: 00000000003526f0 [ 615.657458][ T9] Call Trace: [ 615.657468][ T9] [ 615.657477][ T9] __kasan_check_byte+0x12/0x40 [ 615.657538][ T9] lock_acquire+0x79/0x2e0 [ 615.657573][ T9] lock_sock_nested+0x3e/0x130 [ 615.657626][ T9] ? l2cap_sock_ready_cb+0x46/0x160 [ 615.657654][ T9] l2cap_sock_ready_cb+0x46/0x160 [ 615.657682][ T9] l2cap_conn_start+0x779/0xff0 [ 615.657709][ T9] ? __pfx_l2cap_conn_start+0x10/0x10 [ 615.657737][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.657770][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.657802][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 615.657834][ T9] ? mutex_lock_nested+0x152/0x1d0 [ 615.657857][ T9] ? l2cap_info_timeout+0x60/0xa0 [ 615.657881][ T9] l2cap_info_timeout+0x68/0xa0 [ 615.657901][ T9] ? process_scheduled_works+0xa25/0x1830 [ 615.657930][ T9] process_scheduled_works+0xb02/0x1830 [ 615.657972][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.658004][ T9] ? assign_work+0x3d5/0x5e0 [ 615.658034][ T9] worker_thread+0xa50/0xfc0 [ 615.658076][ T9] kthread+0x388/0x470 [ 615.658098][ T9] ? __pfx_worker_thread+0x10/0x10 [ 615.658127][ T9] ? __pfx_kthread+0x10/0x10 [ 615.658158][ T9] ret_from_fork+0x51e/0xb90 [ 615.658190][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 615.658219][ T9] ? __switch_to+0xc7d/0x1450 [ 615.658246][ T9] ? __pfx_kthread+0x10/0x10 [ 615.658269][ T9] ret_from_fork_asm+0x1a/0x30 [ 615.658297][ T9] [ 615.658305][ T9] Modules linked in: [ 615.658322][ T9] ---[ end trace 0000000000000000 ]--- [ 615.658335][ T9] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 615.658358][ T9] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 24 fc 08 cc 66 66 66 66 66 66 2e [ 615.658377][ T9] RSP: 0018:ffffc900000e7828 EFLAGS: 00010202 [ 615.658396][ T9] RAX: dffffc0000000000 RBX: ffffffff88ec968e RCX: 0000000080000001 [ 615.658412][ T9] RDX: 0000000000000000 RSI: ffffffff88ec968e RDI: 000000000000006b [ 615.658427][ T9] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 615.658441][ T9] R10: dffffc0000000000 R11: ffffffff8a22b300 R12: 0000000000000000 [ 615.658457][ T9] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 615.658472][ T9] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 615.658490][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.658505][ T9] CR2: 0000001b3281dff8 CR3: 0000000060228000 CR4: 00000000003526f0 [ 615.658558][ T9] Kernel panic - not syncing: Fatal exception [ 615.658907][ T9] Kernel Offset: disabled