last executing test programs: 4m23.884029605s ago: executing program 0 (id=736): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x50}, 0x28) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) unshare(0x2040400) pwritev2(r6, 0x0, 0x0, 0x7ff, 0x1c0000, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000080)={0x4000}) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) 4m22.313422159s ago: executing program 0 (id=739): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x20, 0x0, {0x5, 0x4, 0x0, 0x2, 0x4000, 0x1, 0xffff, 0x2, 0x11, 0x7, @empty, @rand_addr=0x64010100}}}}}}, 0x0) 4m21.716909167s ago: executing program 0 (id=746): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) 4m20.718844423s ago: executing program 0 (id=749): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x50}, 0x28) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) unshare(0x2040400) pwritev2(r6, 0x0, 0x0, 0x7ff, 0x1c0000, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000080)={0x4000}) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) 4m18.855481959s ago: executing program 0 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 4m17.489995705s ago: executing program 0 (id=757): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3e3, [{{0x9, 0x2, 0xfffffffffffffe00}}]}}, 0x0) 3m59.939178777s ago: executing program 32 (id=757): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3e3, [{{0x9, 0x2, 0xfffffffffffffe00}}]}}, 0x0) 1m53.87232243s ago: executing program 3 (id=1203): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c334b", 0x42}], 0x1, 0x3, 0x9) 1m53.443102281s ago: executing program 3 (id=1204): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) 1m52.140941005s ago: executing program 3 (id=1209): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f00000001c0)={[0x1]}) 1m51.620287556s ago: executing program 1 (id=1212): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) 1m50.455396723s ago: executing program 3 (id=1214): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) 1m49.98861676s ago: executing program 3 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffe0}, {0x2, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) 1m49.663897411s ago: executing program 3 (id=1217): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, 0x0}) 1m46.83104735s ago: executing program 1 (id=1221): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x101200, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) 1m46.6574916s ago: executing program 5 (id=1222): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x2003) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000140)=0x4) 1m46.381290647s ago: executing program 1 (id=1224): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) 1m46.102648998s ago: executing program 5 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x3c7, 0x9}) 1m45.966105094s ago: executing program 1 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x8001, 0x7f) 1m45.766968922s ago: executing program 5 (id=1227): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001bc0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd1ae30f00361ec04390e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f71c25a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb03673f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc9419d73415cda2130f50714600fb6241c6e955031795b2c2f564e5d39d4bb5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee80100000000000000ebd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4ec7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488ae9c0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa425ad4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d931c55a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3392443c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b3430797f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c717ed53db529a811662841b1dc43291e450ce9b8d7d80fcb44966d7ad4691a3787dffa25e238b93b9084229d2afc08a73a79a27a180dcfd91329dd840cf1ec85be2a524b3fc10d6faf48343958ece0515257fa14cb51642285bf10f3c4df4ebeec26dc51403ea445c43abeeebad281dc5dbb5e4f3ddbb196a16fd9c5c301c1d1665752c5184214a4bf359ac8a4cce8687bd546d486139ed092baff16b256eb20dcfd7c76a0d197442c6f8378601019988a73ca2d0530d41be46c6649e068bcf064bc3bdfb53f77e185aa02dc392297d6cfd91be5a47003df99a80838da7fc7eeb8421a7a72e65f43bc6367d6f240b577826b61e7e8e585c6b63c8fd198dfc932e9723a461a7469ae3e8cbe7b3b55de9528f2e7a4eabe658352819218ceb13688ecf72943d75fbf4b07ece2c9e324c92aabfd447dcbe2a3941aa046aa62e693bedb3fcaeca03aa7bc79aba218713bcc415936ca6f4425c4a68bfe53479ddeb072d66d996cc6be58daf2256dfad19aebdfd81f88e13e387fd08f5f75893ae6eff29c9fd3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x68, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x60}, 0x2c) 1m45.577290255s ago: executing program 1 (id=1228): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000001ed00000f030000000000009f440000000000006b0a00fe0000000073000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff6136fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92be0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f692199260b0cbbc3cdcd69e84175c1a693b4d98417c81de051865c7d34d5ddd7b816c9dfda79c45ab90bc7eea00eee2faec66807f81d82b3c379cb535c210a70880ff02fe83bd219b87390037aad9c1bf7512dce7694b71f5d1c53500f6af25460564bc637298e8804ac837223bb157a68da96644b47d43e0088bc1dd263ca46927da7b1dc27454e324d897fe33954baf"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x50}, 0x28) 1m44.627757124s ago: executing program 1 (id=1230): openat(0xffffffffffffffff, &(0x7f0000000040)='./proc/thread-self/fail-nth/file0\x00', 0x1, 0x102) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000040)=0xc) 1m43.728541085s ago: executing program 5 (id=1233): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000001540)=[{&(0x7f00000004c0)="3751f02b82f73ccfc7c43161c4ff26fa3893119fd147a1576d9456136ab5f15493", 0x21}, {&(0x7f0000000500)="d3e8a24fba584651e415a77c020235", 0xf}], 0x2) 1m43.234157716s ago: executing program 5 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='wwnn=0x3333333333333333', 0x17) 1m42.977408407s ago: executing program 5 (id=1235): unshare(0x28000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000002") 1m42.312973551s ago: executing program 2 (id=1239): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m41.043598207s ago: executing program 2 (id=1245): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m40.754023985s ago: executing program 2 (id=1246): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m40.548550351s ago: executing program 2 (id=1248): socket(0x10, 0x803, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000891424", @ANYRES64=r0], 0xb2) 1m40.418716495s ago: executing program 2 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x20440, 0x1) ioctl(r0, 0xc180fd07, &(0x7f0000000040)="0400000000000000000000008001000038010000010000000000000000000000000000000e601a14f3") 1m40.321786355s ago: executing program 2 (id=1250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x10, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x63}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x62, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) 1m33.130439478s ago: executing program 33 (id=1217): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, 0x0}) 1m28.179173039s ago: executing program 34 (id=1230): openat(0xffffffffffffffff, &(0x7f0000000040)='./proc/thread-self/fail-nth/file0\x00', 0x1, 0x102) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000040)=0xc) 1m26.464875559s ago: executing program 35 (id=1235): unshare(0x28000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000002") 1m24.96810355s ago: executing program 4 (id=1273): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x101) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x1, 0x80}], 0x76) 1m23.715014352s ago: executing program 36 (id=1250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x10, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x63}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x62, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) 1m23.683965122s ago: executing program 4 (id=1275): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x20004, 0x0}) 1m21.61131244s ago: executing program 4 (id=1276): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m19.902841625s ago: executing program 4 (id=1277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000100)='eT', 0x2, 0x4a8) 1m18.631940942s ago: executing program 4 (id=1278): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) modify_ldt$read_default(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1ae) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/56], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x6, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x10000}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0xb8}}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004011}, 0x8000) r5 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x3}}) close(0x3) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x5b, 0x2c00) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000680)={{0x9, 0x1, 0x3, 0x7, 'syz1\x00', 0xffffd424}, 0x1, [0x80000000, 0x3, 0x9, 0x64, 0x8, 0x4, 0xa91e, 0x5, 0x7, 0x8, 0x861, 0x1, 0x9, 0x4, 0x8, 0x9, 0x7, 0x5, 0x80, 0x6, 0x5, 0xc16a, 0x3, 0x9, 0x3244, 0x100000000, 0x33, 0x807, 0x100000001, 0x3, 0x8, 0xda75, 0x6, 0x8000000000000000, 0x6, 0xfffffffffffffffa, 0x2, 0x5, 0x8, 0x3, 0x1c, 0x9, 0x2, 0x3a9, 0x1, 0xa, 0x6, 0xd1, 0x254, 0x8, 0x2, 0xfffffffffffffffb, 0x1, 0x80000000, 0x20868803, 0x4, 0x2, 0x3, 0xfffffffffffffffd, 0x1, 0x81, 0x3e78d4f3, 0x7, 0xfc30, 0x0, 0x7, 0x81, 0x5, 0xf, 0xfffffffffffffffe, 0x2, 0x7f, 0x8000000000000001, 0xfff, 0x4, 0x4, 0x9, 0x0, 0x100000001, 0x1, 0x3, 0x5152f9e0, 0x9, 0x8, 0x3, 0x8000000000000001, 0x3b6c54fb, 0x3, 0x1, 0x1, 0x4, 0x401, 0x8000, 0x8, 0x6, 0x3, 0x8, 0x4, 0x9, 0x0, 0x3, 0x81, 0xe29, 0x2, 0x8b7, 0x7f26, 0xc, 0xffffffffffff0001, 0x400, 0xffffffffffffffff, 0xeff, 0x6, 0x5, 0xa0, 0x4, 0x3, 0x8, 0xbedd, 0x10001, 0x101, 0x9, 0x1ff, 0x3, 0x3, 0x8, 0x8000000000000, 0x8, 0x3]}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0xc0f85403, &(0x7f0000000040)) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, 0x0, 0x0) 1m18.306737347s ago: executing program 4 (id=1279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x2, 0x0, [{0x40000083}, {0xb04, 0x0, 0x3275}]}) 1m1.557156978s ago: executing program 37 (id=1279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x2, 0x0, [{0x40000083}, {0xb04, 0x0, 0x3275}]}) 39.57174352s ago: executing program 6 (id=1292): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f00000002c0), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 38.523778637s ago: executing program 6 (id=1293): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000103) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100)) 30.189974934s ago: executing program 8 (id=1301): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 29.088754783s ago: executing program 6 (id=1302): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x2449, 0x2, 0x1}) 28.793782948s ago: executing program 8 (id=1303): openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) r0 = io_uring_setup(0x6615, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 28.432674857s ago: executing program 6 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) write(r0, 0x0, 0x0) 28.019453966s ago: executing program 6 (id=1305): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0) 26.204045352s ago: executing program 6 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffdfff}, {0x15, 0x1, 0x6, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1004, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) 25.138510094s ago: executing program 8 (id=1307): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 21.418951912s ago: executing program 9 (id=1274): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 21.414824901s ago: executing program 8 (id=1308): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x12163) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @local}}) connect$pptp(r6, 0x0, 0x0) io_uring_enter(r1, 0x7ff, 0x15bc, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="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", @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) 19.756701339s ago: executing program 9 (id=1309): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 19.44010403s ago: executing program 9 (id=1310): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 18.6927778s ago: executing program 8 (id=1311): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000fee000/0x11000)=nil, 0x11000, 0x6}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x902f, 0x3fff}) 17.234178625s ago: executing program 9 (id=1312): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x7, 0x2, 0x1000, 0xa, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x4, 0x8, 0x4, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 16.993769649s ago: executing program 8 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 16.631667415s ago: executing program 9 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x122, 0x0, 0x800}]}) 9.585063748s ago: executing program 38 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffdfff}, {0x15, 0x1, 0x6, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1004, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) 524.111636ms ago: executing program 39 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 0s ago: executing program 40 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x122, 0x0, 0x800}]}) kernel console output (not intermixed with test programs): form/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6 [ 360.435397][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.437847][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.438649][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.438896][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.439138][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.439380][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.439637][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.439869][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.441126][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.441379][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.999434][ T6009] scsi host1: uas [ 361.132783][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.157595][ T5814] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 361.157985][ T5814] usb 4-1: media controller created [ 361.202391][ T5780] usb 5-1: USB disconnect, device number 12 [ 361.202486][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 361.225200][ T6009] usb 1-1: USB disconnect, device number 8 [ 361.272396][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.531672][ T7911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.800022][ T7916] overlayfs: failed to resolve './file0': -2 [ 363.258478][ T5814] DVB: Unable to find symbol mt352_attach() [ 363.258509][ T5814] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 363.284175][ T5814] dvb-usb: bulk message failed: -22 (3/0) [ 363.310319][ T5814] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 363.408320][ T5814] usb 4-1: USB disconnect, device number 9 [ 363.426843][ T5780] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 364.236160][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 364.760513][ T5814] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 366.882902][ T7964] overlayfs: failed to resolve './file0': -2 [ 366.942962][ T6009] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 367.114983][ T6009] usb 1-1: Using ep0 maxpacket: 32 [ 367.124656][ T6009] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 367.878626][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.878712][ T6009] usb 1-1: Product: syz [ 367.878768][ T6009] usb 1-1: Manufacturer: syz [ 367.878830][ T6009] usb 1-1: SerialNumber: syz [ 368.108166][ T6009] usb 1-1: config 0 descriptor?? [ 368.156952][ T6009] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 368.157029][ T6009] dvb-usb: bulk message failed: -22 (4/0) [ 368.157041][ T6009] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 368.157141][ T6009] dvb-usb: bulk message failed: -22 (5/0) [ 368.157151][ T6009] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 368.309753][ T1724] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 368.479526][ T1724] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 368.481153][ T1724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 368.481199][ T1724] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.481242][ T1724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.483026][ T6009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.486428][ T6009] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 368.486487][ T6009] usb 1-1: media controller created [ 368.625430][ T1724] usb 3-1: config 0 descriptor?? [ 368.639702][ T7969] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 368.639838][ T7969] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 368.695009][ T5814] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 368.878731][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 368.880007][ T5814] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 368.881896][ T5814] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 368.881924][ T5814] usb 5-1: config 0 has no interface number 0 [ 368.881972][ T5814] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 368.881999][ T5814] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 368.887024][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.887052][ T5814] usb 5-1: Product: syz [ 368.887068][ T5814] usb 5-1: Manufacturer: syz [ 368.887085][ T5814] usb 5-1: SerialNumber: syz [ 368.979337][ T5814] usb 5-1: config 0 descriptor?? [ 368.980691][ T7974] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 368.980990][ T7974] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 369.238505][ T7974] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 369.239224][ T7974] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 369.400981][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.462075][ T1724] hid_parser_main: 36 callbacks suppressed [ 369.462105][ T1724] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x2 [ 369.462138][ T1724] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x3 [ 369.462166][ T1724] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x1 [ 369.462196][ T1724] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x2 [ 369.538458][ T5814] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 370.466718][ T1724] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 370.493847][ T1724] magicmouse 0003:05AC:0265.0006: magicmouse input not registered [ 370.553351][ T1724] magicmouse 0003:05AC:0265.0006: probe with driver magicmouse failed with error -12 [ 370.581450][ T5814] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 370.581485][ T5814] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 370.581751][ T5814] asix 5-1:0.34: probe with driver asix failed with error -71 [ 370.669449][ T5814] usb 5-1: USB disconnect, device number 13 [ 370.747867][ T1724] usb 3-1: USB disconnect, device number 11 [ 370.750377][ T6009] usb 1-1: selecting invalid altsetting 3 [ 370.750400][ T6009] ttusb2: set interface to alts=3 failed [ 370.976547][ T7984] fido_id[7984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 371.137416][ T6009] DVB: Unable to find symbol tda10086_attach() [ 371.137436][ T6009] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 371.138399][ T6009] dvb-usb: bulk message failed: -22 (4/0) [ 371.138420][ T6009] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 371.138573][ T6009] dvb-usb: bulk message failed: -22 (5/0) [ 371.138589][ T6009] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 371.138687][ T6009] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 371.215886][ T6009] usb 1-1: USB disconnect, device number 9 [ 371.298966][ T6009] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 375.335015][ T5780] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 375.670451][ T5780] usb 5-1: Using ep0 maxpacket: 32 [ 375.692793][ T5780] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 375.700542][ T5780] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 375.729305][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.729333][ T5780] usb 5-1: Product: syz [ 375.729371][ T5780] usb 5-1: Manufacturer: syz [ 375.729386][ T5780] usb 5-1: SerialNumber: syz [ 375.807199][ T5780] usb 5-1: config 0 descriptor?? [ 375.808635][ T8023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.857864][ T5780] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.220944][ T6009] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 376.411242][ T6009] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.412785][ T6009] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.412812][ T6009] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 376.412832][ T6009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.412877][ T6009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 376.412909][ T6009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 376.480337][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.480366][ T6009] usb 4-1: Product: syz [ 376.480384][ T6009] usb 4-1: Manufacturer: syz [ 376.785256][ T6009] cdc_wdm 4-1:1.0: skipping garbage [ 376.785280][ T6009] cdc_wdm 4-1:1.0: skipping garbage [ 376.900905][ T6009] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 376.900930][ T6009] cdc_wdm 4-1:1.0: Unknown control protocol [ 377.414813][ T6009] usb 4-1: USB disconnect, device number 10 [ 380.133034][ T5780] usb 5-1: USB disconnect, device number 14 [ 380.421656][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 380.437096][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.769'. [ 380.437705][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.769'. [ 382.305203][ T6384] udevd[6384]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.597973][ T204] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 384.082408][ T8105] bridge0: port 3(macsec1) entered blocking state [ 384.082636][ T8105] bridge0: port 3(macsec1) entered disabled state [ 384.082861][ T8105] macsec1: entered allmulticast mode [ 384.082879][ T8105] bridge0: entered allmulticast mode [ 384.082946][ T8105] bridge0: entered promiscuous mode [ 384.236466][ T204] usb 4-1: Using ep0 maxpacket: 32 [ 384.237468][ T204] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 384.239281][ T204] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.242909][ T204] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 384.242937][ T204] usb 4-1: Product: syz [ 384.242954][ T204] usb 4-1: Manufacturer: syz [ 384.242971][ T204] usb 4-1: SerialNumber: syz [ 384.260482][ T204] usb 4-1: config 0 descriptor?? [ 384.296895][ T204] hub 4-1:0.0: bad descriptor, ignoring hub [ 384.296939][ T204] hub 4-1:0.0: probe with driver hub failed with error -5 [ 384.516160][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.516347][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.636718][ T8105] macsec1: left allmulticast mode [ 384.636745][ T8105] bridge0: left allmulticast mode [ 386.264880][ T5721] bridge0: left promiscuous mode [ 386.805958][ T5780] usb 4-1: USB disconnect, device number 11 [ 387.429853][ T8141] xt_hashlimit: max too large, truncated to 1048576 [ 391.212137][ T5721] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 391.233418][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 391.386515][ T5721] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 391.394472][ T5721] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.394503][ T5721] usb 2-1: config 0 has no interface number 0 [ 391.433681][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.433715][ T5721] usb 2-1: Product: syz [ 391.433746][ T5721] usb 2-1: Manufacturer: syz [ 391.433763][ T5721] usb 2-1: SerialNumber: syz [ 391.483251][ T5721] usb 2-1: config 0 descriptor?? [ 391.825577][ T5721] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 391.906485][ T5721] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 391.907134][ T5721] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 391.907189][ T5721] usb 2-1: media controller created [ 392.081654][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.460129][ T5721] usb 2-1: USB disconnect, device number 8 [ 396.007490][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.035543][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 396.035570][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 396.067148][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.070918][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.075169][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.077331][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.274431][ T1002] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 398.450552][ T1002] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 398.452452][ T1002] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 398.452484][ T1002] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 398.452526][ T1002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.465716][ T5602] Bluetooth: hci5: command tx timeout [ 398.569225][ T1002] usb 3-1: probing VID:PID(0424:012C) [ 398.621039][ T5780] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 398.725961][ T1002] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 398.726000][ T1002] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 398.726021][ T1002] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 398.726040][ T1002] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 398.726060][ T1002] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 398.806167][ T5780] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 398.915181][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.915208][ T5780] usb 5-1: Product: syz [ 398.915298][ T5780] usb 5-1: Manufacturer: syz [ 398.915314][ T5780] usb 5-1: SerialNumber: syz [ 399.076004][ T1002] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 399.138474][ T8269] netlink: 87 bytes leftover after parsing attributes in process `syz.3.840'. [ 399.443925][ T1002] vub300 3-1:1.0: probe with driver vub300 failed with error -71 [ 399.493310][ T1002] usb 3-1: USB disconnect, device number 12 [ 399.927524][ T5780] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 399.927606][ T5780] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 399.984633][ T5780] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.009382][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.058736][ T5780] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 400.114145][ T5780] usb 5-1: USB disconnect, device number 15 [ 400.309164][ T8285] overlayfs: failed to resolve './file0': -2 [ 400.711703][ T5602] Bluetooth: hci5: command tx timeout [ 400.998370][ T204] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 401.166478][ T204] usb 2-1: Using ep0 maxpacket: 16 [ 401.167627][ T204] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.169260][ T204] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 401.169285][ T204] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.169306][ T204] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.175390][ T204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.175419][ T204] usb 2-1: Product: syz [ 401.175442][ T204] usb 2-1: Manufacturer: syz [ 401.175457][ T204] usb 2-1: SerialNumber: syz [ 401.248923][ T204] usb 2-1: 0:2 : does not exist [ 402.965285][ T5602] Bluetooth: hci5: command tx timeout [ 403.530496][ T204] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 403.743450][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.788837][ T8320] overlayfs: failed to resolve './file0': -2 [ 403.866602][ T204] usb 2-1: USB disconnect, device number 9 [ 404.031377][ T8318] vlan2: entered allmulticast mode [ 404.031395][ T8318] bond0: entered allmulticast mode [ 404.031406][ T8318] bond_slave_0: entered allmulticast mode [ 404.031423][ T8318] bond_slave_1: entered allmulticast mode [ 404.442057][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 404.547301][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.218563][ T5602] Bluetooth: hci5: command tx timeout [ 405.868599][ T8349] overlayfs: failed to resolve './file0': -2 [ 405.945850][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.855487][ T8365] netlink: 'syz.1.877': attribute type 2 has an invalid length. [ 408.146260][ T8366] block device autoloading is deprecated and will be removed. [ 408.370032][ T8366] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd4": -EINTR [ 408.384393][ T5780] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 408.546417][ T8366] XFS (nbd4): io_pages changed from 0 to 1024, not restoring. [ 408.546451][ T8366] XFS (nbd4): ra_pages changed from 0 to 64, not restoring. [ 408.589613][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.608538][ T5780] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 408.610147][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.610221][ T5780] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 408.610266][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.040509][ T8380] overlayfs: failed to resolve './file0': -2 [ 409.059651][ T8365] ´: entered promiscuous mode [ 409.227742][ C0] usb 4-1: received EP1 urb->status = -2 [ 409.227820][ T5780] usb 4-1: unable to init card! (ret=-110) [ 409.269182][ T5780] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 409.415647][ T8385] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.429182][ T5593] team_slave_0: entered promiscuous mode [ 409.446346][ T5593] team_slave_1: entered promiscuous mode [ 409.641073][ T5814] usb 4-1: USB disconnect, device number 12 [ 412.555138][ T8419] overlayfs: failed to resolve './file0': -2 [ 415.020486][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 415.183134][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 415.184031][ T31] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 415.186797][ T31] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 415.186826][ T31] usb 4-1: config 0 has no interface number 0 [ 415.186875][ T31] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 415.190282][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.190310][ T31] usb 4-1: Product: syz [ 415.190326][ T31] usb 4-1: Manufacturer: syz [ 415.190341][ T31] usb 4-1: SerialNumber: syz [ 415.294374][ T31] usb 4-1: config 0 descriptor?? [ 415.333448][ T31] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 415.623253][ T31] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 415.642638][ T31] usb 4-1: USB disconnect, device number 13 [ 415.730572][ T31] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 415.755318][ T31] cypress_m8 4-1:0.35: device disconnected [ 415.796948][ T12] bridge_slave_1: left allmulticast mode [ 415.797160][ T12] bridge_slave_1: left promiscuous mode [ 415.827871][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.222357][ T12] bridge_slave_0: left allmulticast mode [ 417.222397][ T12] bridge_slave_0: left promiscuous mode [ 417.222670][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.097903][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.162356][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.186012][ T12] bond0 (unregistering): Released all slaves [ 418.657691][ T8490] netlink: 148 bytes leftover after parsing attributes in process `syz.2.914'. [ 418.797848][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 418.837879][ T8484] tipc: Started in network mode [ 418.837920][ T8484] tipc: Node identity e0000001, cluster identity 4711 [ 418.837965][ T8484] tipc: Enabling of bearer rejected, failed to enable media [ 419.301723][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.301903][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.302125][ T8228] bridge_slave_0: entered allmulticast mode [ 419.305814][ T8228] bridge_slave_0: entered promiscuous mode [ 419.452737][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.452874][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.453096][ T8228] bridge_slave_1: entered allmulticast mode [ 419.456302][ T8228] bridge_slave_1: entered promiscuous mode [ 419.640185][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.673708][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.086000][ T8228] team0: Port device team_slave_0 added [ 420.107103][ T8228] team0: Port device team_slave_1 added [ 420.583031][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.583051][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.583082][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.637126][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.637152][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.637183][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.140094][ T5814] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 421.501601][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 421.776968][ T5814] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 421.779329][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.936079][ T5814] usb 2-1: config 0 descriptor?? [ 421.970483][ T5814] gspca_main: sunplus-2.14.0 probing 041e:400b [ 422.017876][ T5602] Bluetooth: hci5: command tx timeout [ 422.662895][ T8228] hsr_slave_0: entered promiscuous mode [ 422.721329][ T8228] hsr_slave_1: entered promiscuous mode [ 422.732817][ T8228] debugfs: 'hsr0' already exists in 'hsr' [ 422.732847][ T8228] Cannot create hsr debugfs directory [ 422.745484][ T8550] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 422.855851][ T5814] gspca_sunplus: reg_r err -71 [ 422.855992][ T5814] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 422.877236][ T5814] usb 2-1: USB disconnect, device number 10 [ 423.405467][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.839004][ T8564] vlan0: entered allmulticast mode [ 423.841937][ T8564] bond0: entered allmulticast mode [ 424.943371][ T8563] lo speed is unknown, defaulting to 1000 [ 425.206974][ T8563] lo speed is unknown, defaulting to 1000 [ 425.422146][ T8563] lo speed is unknown, defaulting to 1000 [ 425.767916][ T8563] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 425.767964][ T8563] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 425.768009][ T8563] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 425.948503][ T8563] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 426.179149][ T8563] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 426.748537][ T8588] netlink: 168 bytes leftover after parsing attributes in process `syz.3.950'. [ 426.775625][ T8563] lo speed is unknown, defaulting to 1000 [ 426.916074][ T8593] netlink: 168 bytes leftover after parsing attributes in process `syz.3.950'. [ 426.920750][ T8563] lo speed is unknown, defaulting to 1000 [ 427.044618][ T8563] lo speed is unknown, defaulting to 1000 [ 427.087600][ T8563] lo speed is unknown, defaulting to 1000 [ 427.179498][ T8563] lo speed is unknown, defaulting to 1000 [ 427.261385][ T8563] lo speed is unknown, defaulting to 1000 [ 428.040565][ T12] hsr_slave_0: left promiscuous mode [ 428.085771][ T12] hsr_slave_1: left promiscuous mode [ 428.101341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.101479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.120358][ T5780] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 428.127627][ T5593] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 428.194129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.194160][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.281409][ T5593] usb 3-1: Using ep0 maxpacket: 32 [ 428.282575][ T5780] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 428.284221][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.284278][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.290724][ T5593] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 428.338744][ T5593] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 428.365999][ T5780] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 428.375489][ T5780] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 428.375558][ T5780] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 428.382223][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.382300][ T5593] usb 3-1: Product: syz [ 428.382345][ T5593] usb 3-1: Manufacturer: syz [ 428.382384][ T5593] usb 3-1: SerialNumber: syz [ 428.511640][ T5780] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 428.511740][ T5780] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 428.525122][ T5780] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 428.571570][ T5780] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 428.571666][ T5780] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 428.607942][ T5593] usb 3-1: config 0 descriptor?? [ 428.645549][ T5593] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 428.674024][ T5780] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 428.720901][ T5593] dvb-usb: bulk message failed: -22 (2/0) [ 428.752727][ T12] veth1_macvtap: left promiscuous mode [ 428.753112][ T12] veth0_macvtap: left promiscuous mode [ 428.753360][ T12] veth1_vlan: left promiscuous mode [ 428.755658][ T12] veth0_vlan: left promiscuous mode [ 428.788967][ T5593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 428.790657][ T5593] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 428.790718][ T5593] usb 3-1: media controller created [ 428.852866][ T8615] cxusb: i2c wr: len=80 is too big! [ 428.852866][ T8615] [ 428.905314][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.969300][ T5593] usb 3-1: selecting invalid altsetting 7 [ 428.969323][ T5593] cxusb: set interface failed [ 428.969337][ T5593] dvb-usb: bulk message failed: -22 (1/0) [ 429.041136][ T5593] DVB: Unable to find symbol lgdt330x_attach() [ 429.041150][ T5593] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 429.200037][ T5593] rc_core: IR keymap rc-dvico-portable not found [ 429.200062][ T5593] Registered IR keymap rc-empty [ 429.252043][ T5593] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 429.279305][ T5593] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 429.345265][ T1724] usb 2-1: USB disconnect, device number 11 [ 429.361473][ T5593] dvb-usb: schedule remote query interval to 100 msecs. [ 429.365924][ T5593] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 429.402416][ T5593] usb 3-1: USB disconnect, device number 13 [ 429.483686][ T1724] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 429.667777][ T1724] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 429.680594][ T1724] keyspan 2-1:1.0: device disconnected [ 429.697730][ T8635] netlink: 'syz.2.963': attribute type 83 has an invalid length. [ 430.047917][ T5593] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 430.516836][ T12] team0 (unregistering): Port device team_slave_1 removed [ 430.586775][ T12] team0 (unregistering): Port device team_slave_0 removed [ 430.983900][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 431.178309][ T8641] dummy0: entered allmulticast mode [ 431.192120][ T8641] dummy0: left allmulticast mode [ 432.453782][ T8659] use of bytesused == 0 is deprecated and will be removed in the future, [ 432.453799][ T8659] use the actual size instead. [ 432.980712][ T8228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.136750][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.139482][ T8228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 433.227510][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.241433][ T8228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 433.485055][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.496155][ T8228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.856693][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.925831][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.061964][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 435.549761][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.637891][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.638085][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.656048][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.711936][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.972262][ T38] kauditd_printk_skb: 65 callbacks suppressed [ 437.972284][ T38] audit: type=1326 audit(1789577170.803:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 437.974214][ T38] audit: type=1326 audit(1789577170.803:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 438.032607][ T38] audit: type=1326 audit(1789577170.832:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 438.032667][ T38] audit: type=1326 audit(1789577170.832:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 438.032716][ T38] audit: type=1326 audit(1789577170.832:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 438.032764][ T38] audit: type=1326 audit(1789577170.841:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 438.032813][ T38] audit: type=1326 audit(1789577170.841:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 438.303914][ T38] audit: type=1326 audit(1789577170.841:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8747 comm="syz.3.993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 442.213268][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.836319][ T8801] overlayfs: failed to resolve './file0': -2 [ 446.591062][ T8829] rnbd_client L127: Can't parse path i: -93 [ 446.632452][ T8228] veth0_vlan: entered promiscuous mode [ 446.762470][ T8228] veth1_vlan: entered promiscuous mode [ 447.272951][ T8228] veth0_macvtap: entered promiscuous mode [ 447.394855][ T8228] veth1_macvtap: entered promiscuous mode [ 447.651641][ T5593] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 447.712738][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.828420][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.879634][ T5593] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 447.881302][ T5593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 447.881331][ T5593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 447.881354][ T5593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 447.881379][ T5593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 448.008234][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.008264][ T5593] usb 5-1: Product: syz [ 448.008279][ T5593] usb 5-1: Manufacturer: syz [ 448.008293][ T5593] usb 5-1: SerialNumber: syz [ 448.097483][ T1498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.098681][ T1481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.098726][ T1481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.098766][ T1481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.204634][ T5593] usb 5-1: config 0 descriptor?? [ 448.532790][ T5593] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 448.968166][ T8850] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 448.999480][ T10] usb 5-1: USB disconnect, device number 16 [ 450.030125][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.030203][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.447591][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 450.704298][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 450.726740][ T31] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 450.744950][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.795442][ T31] usb 4-1: config 0 descriptor?? [ 450.955869][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.955895][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.156522][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 454.585849][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 454.588599][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 454.588663][ T31] usb 4-1: media controller created [ 454.922249][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.160618][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.160646][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.443682][ T31] az6027: usb out operation failed. (-71) [ 455.452831][ T31] az6027: usb out operation failed. (-71) [ 455.452911][ T31] stb0899_attach: Driver disabled by Kconfig [ 455.452943][ T31] az6027: no front-end attached [ 455.452943][ T31] [ 455.608847][ T31] az6027: usb out operation failed. (-71) [ 455.608873][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 455.663367][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 455.725274][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 455.725301][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 455.907070][ T31] usb 4-1: USB disconnect, device number 14 [ 457.282012][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 458.285442][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 458.940280][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 459.773161][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.773227][ T31] usb 4-1: Product: syz [ 459.773297][ T31] usb 4-1: Manufacturer: syz [ 459.773315][ T31] usb 4-1: SerialNumber: syz [ 461.449558][ T31] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 461.449620][ T31] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 461.705307][ T31] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 461.736528][ T31] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 461.812786][ T31] usb 4-1: USB disconnect, device number 15 [ 467.776628][ T9020] pimreg: tun_chr_ioctl cmd 1074025672 [ 467.776660][ T9020] pimreg: ignored: set checksum enabled [ 469.693453][ T1724] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 469.950001][ T1724] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 469.961176][ T1724] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 469.961231][ T1724] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 469.961261][ T1724] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 470.973540][ T1724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.973574][ T1724] usb 6-1: Product: syz [ 470.973591][ T1724] usb 6-1: Manufacturer: syz [ 470.973608][ T1724] usb 6-1: SerialNumber: syz [ 471.051932][ T1724] usb 6-1: config 0 descriptor?? [ 471.067385][ T9037] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.067629][ T9037] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.087385][ T1724] usb 6-1: ucan: probing device on interface #0 [ 471.747258][ T1724] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 471.964472][ T1724] usb 6-1: USB disconnect, device number 2 [ 473.126405][ T5814] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 473.305990][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 473.307594][ T5814] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 473.309400][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 473.309436][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 473.346146][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.346240][ T5814] usb 5-1: Product: syz [ 473.346292][ T5814] usb 5-1: Manufacturer: syz [ 473.346344][ T5814] usb 5-1: SerialNumber: syz [ 473.399664][ T5814] usb 5-1: config 0 descriptor?? [ 473.442864][ T5814] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 473.442904][ T5814] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 474.156356][ T5814] em28xx 5-1:0.0: chip ID is em2828X [ 475.371454][ T5814] usb 5-1: USB disconnect, device number 17 [ 475.375082][ T5814] em28xx 5-1:0.0: Disconnecting em28xx [ 475.845630][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 476.020535][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 476.020578][ T10] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 476.022231][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.087775][ T10] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 476.087811][ T10] usb 2-1: Product: syz [ 476.087829][ T10] usb 2-1: Manufacturer: syz [ 476.229003][ T5814] em28xx: Freeing device [ 476.251070][ T10] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 476.251287][ T10] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 476.666675][ T10] usb 2-1: USB disconnect, device number 12 [ 478.510487][ T9177] syz_tun: entered promiscuous mode [ 478.571027][ T9177] macvtap1: entered promiscuous mode [ 478.571346][ T9177] macvtap1: entered allmulticast mode [ 478.571370][ T9177] syz_tun: entered allmulticast mode [ 478.886448][ T9188] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 479.485239][ T37] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 479.648714][ T37] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 479.654423][ T37] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 479.654478][ T37] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 479.654510][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 479.654547][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.812532][ T37] usb 5-1: config 0 descriptor?? [ 481.675286][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675328][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x6 [ 481.675359][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x1 [ 481.675388][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675417][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675445][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675474][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675502][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675530][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.675558][ T37] aureal 0003:0755:2626.0007: unknown main item tag 0x0 [ 481.909095][ T37] aureal 0003:0755:2626.0007: hidraw0: USB HID vff.fd Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 483.013905][ T37] usb 5-1: USB disconnect, device number 18 [ 483.428442][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 483.634325][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 483.652705][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 483.655485][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.689287][ T10] usb 4-1: config 0 descriptor?? [ 484.035521][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 484.121982][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.127992][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 484.128160][ T10] usb 4-1: media controller created [ 484.253348][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.312278][ T10] az6027: usb out operation failed. (-71) [ 485.312740][ T10] az6027: usb out operation failed. (-71) [ 485.312757][ T10] stb0899_attach: Driver disabled by Kconfig [ 485.312849][ T10] az6027: no front-end attached [ 485.312849][ T10] [ 485.313265][ T10] az6027: usb out operation failed. (-71) [ 485.313319][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 485.372199][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 485.483616][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 485.483645][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 485.512930][ T10] usb 4-1: USB disconnect, device number 16 [ 485.630085][ T9261] syz.3.1134 uses obsolete (PF_INET,SOCK_PACKET) [ 486.544946][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 487.016002][ T9281] overlayfs: failed to resolve './file0': -2 [ 493.387877][ T1002] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 493.740450][ T1002] usb 4-1: Using ep0 maxpacket: 16 [ 493.741305][ T1002] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 493.789847][ T1002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.789879][ T1002] usb 4-1: Product: syz [ 493.789895][ T1002] usb 4-1: Manufacturer: syz [ 493.789912][ T1002] usb 4-1: SerialNumber: syz [ 493.860199][ T1002] usb 4-1: config 0 descriptor?? [ 493.898265][ T1002] gspca_main: spca508-2.14.0 probing 041e:4018 [ 494.202830][ T1002] gspca_spca508: reg_read err -32 [ 494.206690][ T1002] gspca_spca508: reg_read err -32 [ 494.430083][ T1002] gspca_spca508: reg_read err -71 [ 494.430484][ T1002] gspca_spca508: reg_read err -71 [ 494.430887][ T1002] gspca_spca508: reg write: error -71 [ 494.430972][ T1002] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 494.474360][ T1002] usb 4-1: USB disconnect, device number 17 [ 496.219411][ T9325] overlayfs: failed to resolve './file0': -2 [ 499.490217][ T9343] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 501.963502][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.168661][ T5814] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 502.197468][ T9343] batadv0: entered allmulticast mode [ 502.208552][ T9343] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 502.373688][ T5814] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 502.375858][ T5814] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 502.375915][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 502.375946][ T5814] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.375974][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 502.376012][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 502.551523][ T5814] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 502.551587][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 502.551616][ T5814] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.551644][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 502.551672][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 502.590989][ T5814] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 502.591047][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 502.591075][ T5814] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.591102][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 502.591130][ T5814] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 502.756454][ T5814] usb 2-1: string descriptor 0 read error: -22 [ 502.756617][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.960993][ T9369] overlayfs: failed to resolve './file0': -2 [ 505.766998][ T5814] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 506.014283][ T5814] usb 2-1: USB disconnect, device number 13 [ 506.862566][ T1484] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 507.294366][ T1484] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 507.451936][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 507.638848][ T10] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 507.642230][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.642265][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.642305][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.792412][ T10] usb 4-1: config 0 descriptor?? [ 508.505666][ T10] hid_parser_main: 5 callbacks suppressed [ 508.505764][ T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 508.505799][ T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 508.505827][ T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 508.505855][ T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 508.505895][ T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 508.667841][ T10] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 508.729557][ T10] usb 4-1: USB disconnect, device number 18 [ 512.507848][ T9415] fido_id[9415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 514.747556][ T9439] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.492729][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.492808][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.503558][ T5720] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 516.004639][ T9453] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 516.004663][ T9453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1198'. [ 516.004697][ T9453] nbd: illegal input index 65550 [ 516.108539][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 516.452957][ T204] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 516.782628][ T204] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 516.784399][ T204] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.784424][ T204] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.838844][ T204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 516.838875][ T204] usb 4-1: SerialNumber: syz [ 516.950625][ T5720] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.950662][ T5720] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.075410][ T5720] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 517.075443][ T5720] usb 2-1: Product: syz [ 517.075460][ T5720] usb 2-1: Manufacturer: syz [ 517.353951][ T204] usb 4-1: 0:2 : does not exist [ 517.616448][ T204] usb 4-1: USB disconnect, device number 19 [ 517.898336][ T5720] hub 2-1:4.0: USB hub found [ 518.048376][ T9294] udevd[9294]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.058930][ T5720] hub 2-1:4.0: 4 ports detected [ 518.085009][ T5720] hub 2-1:4.0: insufficient power available to use all downstream ports [ 519.612975][ T9473] block2mtd: illegal erase size [ 520.251975][ T5720] hub 2-1:4.0: set hub depth failed [ 520.489467][ T5720] usb 2-1: USB disconnect, device number 14 [ 520.632007][ T38] audit: type=1326 audit(1789577248.191:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.632056][ T38] audit: type=1326 audit(1789577248.191:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.727253][ T38] audit: type=1326 audit(1789577248.283:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.728038][ T38] audit: type=1326 audit(1789577248.283:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.728261][ T38] audit: type=1326 audit(1789577248.283:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.778036][ T38] audit: type=1326 audit(1789577248.320:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.778240][ T38] audit: type=1326 audit(1789577248.339:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.778530][ T38] audit: type=1326 audit(1789577248.339:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.792965][ T38] audit: type=1326 audit(1789577248.348:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 520.793408][ T38] audit: type=1326 audit(1789577248.348:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9476 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde56b7e159 code=0x7ffc0000 [ 522.010844][ T9491] input: syz0 as /devices/virtual/input/input10 [ 523.403138][ T9294] udevd[9294]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 527.263201][ T9526] sd 0:0:1:0: PR command failed: 1026 [ 527.263299][ T9526] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 527.263373][ T9526] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 527.442359][ T9529] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 532.686316][ T9582] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in; [ 532.686316][ T9582] program syz.2.1248 not setting count and/or reply_len properly [ 534.081828][ T9598] kAFS: Invalid Command on /proc/fs/afs/cells file [ 534.575727][ T9600] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1254'. [ 540.966995][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.186866][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.190447][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.191581][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.320246][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.222351][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 542.384553][ T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 542.386230][ T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.386265][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 542.386300][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.454774][ T10] usb 5-1: config 0 descriptor?? [ 542.972764][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972803][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972829][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972856][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972882][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972910][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972936][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972967][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.972993][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 542.973020][ T10] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 543.166412][ T10] itetech 0003:06CB:73F5.0009: hidraw0: USB HID v0.03 Device [HID 06cb:73f5] on usb-dummy_hcd.4-1/input0 [ 543.224163][ T10] usb 5-1: USB disconnect, device number 19 [ 543.426402][ T9638] fido_id[9638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 543.644865][ T5602] Bluetooth: hci2: command tx timeout [ 543.649289][ T9621] lo speed is unknown, defaulting to 1000 [ 544.721766][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.721960][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.722161][ T9621] bridge_slave_0: entered allmulticast mode [ 544.749877][ T9621] bridge_slave_0: entered promiscuous mode [ 544.796802][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.797034][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.797240][ T9621] bridge_slave_1: entered allmulticast mode [ 544.834950][ T9621] bridge_slave_1: entered promiscuous mode [ 545.219608][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.296307][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.898548][ T5602] Bluetooth: hci2: command tx timeout [ 546.189130][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 546.251265][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 546.255628][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 546.279157][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 546.287243][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 547.679392][ T5600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 547.746434][ T5600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 547.798924][ T5600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 547.823487][ T5600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 547.824391][ T5600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 548.154163][ T5602] Bluetooth: hci2: command tx timeout [ 548.303155][ T9621] team0: Port device team_slave_0 added [ 548.321785][ T9621] team0: Port device team_slave_1 added [ 548.487664][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.487685][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.487715][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.503722][ T5602] Bluetooth: hci6: command tx timeout [ 548.564489][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.564519][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.564552][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.156200][ T9621] hsr_slave_0: entered promiscuous mode [ 549.161255][ T9621] hsr_slave_1: entered promiscuous mode [ 549.184482][ T9621] debugfs: 'hsr0' already exists in 'hsr' [ 549.184516][ T9621] Cannot create hsr debugfs directory [ 549.922673][ T204] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 550.053563][ T9660] Bluetooth: hci7: command tx timeout [ 550.086198][ T204] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 550.092668][ T204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.092700][ T204] usb 5-1: Product: syz [ 550.092717][ T204] usb 5-1: Manufacturer: syz [ 550.092733][ T204] usb 5-1: SerialNumber: syz [ 550.209835][ T204] usb 5-1: config 0 descriptor?? [ 550.399373][ T9660] Bluetooth: hci2: command tx timeout [ 550.470825][ T204] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 020 [ 550.696217][ T204] usb 5-1: USB disconnect, device number 20 [ 550.745821][ T9660] Bluetooth: hci6: command tx timeout [ 550.884802][ T5600] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 550.936853][ T5600] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 550.939904][ T5600] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 550.957235][ T5600] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 550.958348][ T5600] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 551.008398][ T9660] Bluetooth: hci5: command 0x0406 tx timeout [ 551.588334][ T9655] lo speed is unknown, defaulting to 1000 [ 552.506186][ T5602] Bluetooth: hci7: command tx timeout [ 553.054551][ T5602] Bluetooth: hci6: command tx timeout [ 553.262265][ T5602] Bluetooth: hci8: command tx timeout [ 554.732214][ T5602] Bluetooth: hci7: command tx timeout [ 555.252715][ T5602] Bluetooth: hci6: command tx timeout [ 555.523374][ T5602] Bluetooth: hci8: command tx timeout [ 555.762867][ T9666] lo speed is unknown, defaulting to 1000 [ 556.041672][ T9685] lo speed is unknown, defaulting to 1000 [ 556.989786][ T5602] Bluetooth: hci7: command tx timeout [ 557.765446][ T5602] Bluetooth: hci8: command tx timeout [ 557.903828][ T9621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 558.287419][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.356665][ T9621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 558.498676][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.629434][ T9621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 558.685819][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.686465][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.686605][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.686811][ T9666] bridge_slave_0: entered allmulticast mode [ 558.689883][ T9666] bridge_slave_0: entered promiscuous mode [ 558.810568][ T9621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 558.831334][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.832592][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.832817][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.833044][ T9666] bridge_slave_1: entered allmulticast mode [ 558.873368][ T9666] bridge_slave_1: entered promiscuous mode [ 559.150584][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.233668][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.234226][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.234461][ T9655] bridge_slave_0: entered allmulticast mode [ 559.237472][ T9655] bridge_slave_0: entered promiscuous mode [ 559.280578][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.363405][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.363662][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.363888][ T9655] bridge_slave_1: entered allmulticast mode [ 559.367261][ T9655] bridge_slave_1: entered promiscuous mode [ 559.483829][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.484281][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.484873][ T9685] bridge_slave_0: entered allmulticast mode [ 559.510216][ T9685] bridge_slave_0: entered promiscuous mode [ 559.518672][ T9666] team0: Port device team_slave_0 added [ 559.875892][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.876031][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.876300][ T9685] bridge_slave_1: entered allmulticast mode [ 559.901694][ T9685] bridge_slave_1: entered promiscuous mode [ 559.906427][ T9666] team0: Port device team_slave_1 added [ 559.928260][ T9655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.007912][ T9655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.018405][ T5602] Bluetooth: hci8: command tx timeout [ 560.105426][ T9685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.129135][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.129154][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.129187][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.205696][ T9685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.208530][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.208547][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.208569][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.270138][ T9655] team0: Port device team_slave_0 added [ 560.335562][ T9655] team0: Port device team_slave_1 added [ 560.404613][ T9685] team0: Port device team_slave_0 added [ 560.471398][ T9685] team0: Port device team_slave_1 added [ 560.506019][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.506038][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.506067][ T9655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.598841][ T9666] hsr_slave_0: entered promiscuous mode [ 560.600265][ T9666] hsr_slave_1: entered promiscuous mode [ 560.601177][ T9666] debugfs: 'hsr0' already exists in 'hsr' [ 560.601203][ T9666] Cannot create hsr debugfs directory [ 560.631267][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.631287][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.631315][ T9655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.987825][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.987859][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.987891][ T9685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.056500][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.056525][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.056557][ T9685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.301089][ T9655] hsr_slave_0: entered promiscuous mode [ 562.302683][ T9655] hsr_slave_1: entered promiscuous mode [ 562.316148][ T9655] debugfs: 'hsr0' already exists in 'hsr' [ 562.316180][ T9655] Cannot create hsr debugfs directory [ 562.533151][ T9685] hsr_slave_0: entered promiscuous mode [ 562.534627][ T9685] hsr_slave_1: entered promiscuous mode [ 562.535668][ T9685] debugfs: 'hsr0' already exists in 'hsr' [ 562.535696][ T9685] Cannot create hsr debugfs directory [ 564.443152][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.563663][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.696873][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.744715][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.864826][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.865056][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.017983][ T9666] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 565.235319][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.258636][ T9666] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 565.903698][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.920550][ T9666] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 566.266752][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.357459][ T9666] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 566.693829][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.412645][ T9655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 567.718975][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.743893][ T9655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 567.974606][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.062409][ T9655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 568.384848][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.477995][ T9655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 568.581786][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.384392][ T9685] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 569.504410][ T9685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.543269][ T9685] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 569.658458][ T9685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.703262][ T9685] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 569.760173][ T9685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.970763][ T9685] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 570.116935][ T9685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.219357][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.307083][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.739068][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.893842][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.894081][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.992931][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.993224][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.147137][ T9655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.423503][ T9655] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.027295][ T9660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.093853][ T9660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.116740][ T9660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.130056][ T9660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.164480][ T9660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.283087][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.283237][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.808319][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.808468][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.133829][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.520456][ T9685] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.699155][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.701253][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.951884][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.954912][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.419442][ T5602] Bluetooth: hci3: command tx timeout [ 574.567785][ T9621] veth0_vlan: entered promiscuous mode [ 574.747621][ T9621] veth1_vlan: entered promiscuous mode [ 575.087482][ T9621] veth0_macvtap: entered promiscuous mode [ 575.251774][ T9621] veth1_macvtap: entered promiscuous mode [ 575.708980][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.732344][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.885485][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.027773][ T1172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.028007][ T1172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.028209][ T1172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.028417][ T1172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.355880][ T9770] lo speed is unknown, defaulting to 1000 [ 576.656228][ T9660] Bluetooth: hci3: command tx timeout [ 578.913678][ T9660] Bluetooth: hci3: command tx timeout [ 579.137392][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.144438][ T9655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.705377][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.705401][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.511903][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.511928][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.161771][ T9660] Bluetooth: hci3: command tx timeout [ 581.322429][ T9666] veth0_vlan: entered promiscuous mode [ 581.555419][ T9666] veth1_vlan: entered promiscuous mode [ 581.678597][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.678842][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.679075][ T9770] bridge_slave_0: entered allmulticast mode [ 581.707233][ T9770] bridge_slave_0: entered promiscuous mode [ 581.778074][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.778272][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.827344][ T9770] bridge_slave_1: entered allmulticast mode [ 581.830734][ T9770] bridge_slave_1: entered promiscuous mode [ 582.038156][ T9770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.041817][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.042007][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.095565][ T9770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.864692][ T9770] team0: Port device team_slave_0 added [ 582.867405][ T9685] veth0_vlan: entered promiscuous mode [ 582.915611][ T9770] team0: Port device team_slave_1 added [ 582.972316][ T9666] veth0_macvtap: entered promiscuous mode [ 583.020283][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.020304][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.020333][ T9770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.088660][ T9685] veth1_vlan: entered promiscuous mode [ 583.106261][ T9666] veth1_macvtap: entered promiscuous mode [ 583.133545][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.133566][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.133598][ T9770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.617280][ T9770] hsr_slave_0: entered promiscuous mode [ 583.618848][ T9770] hsr_slave_1: entered promiscuous mode [ 583.619934][ T9770] debugfs: 'hsr0' already exists in 'hsr' [ 583.619970][ T9770] Cannot create hsr debugfs directory [ 583.679478][ T9655] veth0_vlan: entered promiscuous mode [ 583.709470][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.888109][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.889301][ T9655] veth1_vlan: entered promiscuous mode [ 583.965216][ T9685] veth0_macvtap: entered promiscuous mode [ 584.014678][ T9685] veth1_macvtap: entered promiscuous mode [ 587.613232][ T9851] Illegal XDP return value 4294967199 on prog (id 82) dev N/A, expect packet loss! [ 588.228115][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.229902][ T9655] veth0_macvtap: entered promiscuous mode [ 588.572369][ T9655] veth1_macvtap: entered promiscuous mode [ 588.638394][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.734717][ T1480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.734741][ T1480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.493513][ T9655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.623183][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1288'. [ 590.889294][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.889314][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.631201][ T9655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.358480][ T9588] syz_tun (unregistering): left allmulticast mode [ 600.789374][ T5814] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 601.012357][ T5814] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 601.014256][ T5814] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 601.014285][ T5814] usb 9-1: config 0 has no interface number 0 [ 601.014333][ T5814] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 601.014361][ T5814] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 601.014390][ T5814] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 601.081715][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 601.081747][ T5814] usb 9-1: Product: syz [ 601.081763][ T5814] usb 9-1: SerialNumber: syz [ 601.114804][ T5814] usb 9-1: config 0 descriptor?? [ 601.130292][ T5814] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 601.135080][ T5814] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input11 [ 601.973850][ C0] cm109_urb_ctl_callback: 1876 callbacks suppressed [ 601.973885][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.974148][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.974564][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.980281][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.981781][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.982081][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.982335][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.982583][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.982833][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 601.983084][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 602.234534][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 602.234728][ T5814] usb 9-1: USB disconnect, device number 2 [ 602.466645][ T5814] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 602.539917][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.549276][ T1484] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.024402][ T1724] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 605.607764][ T1724] usb 9-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 605.627949][ T1724] usb 9-1: config index 0 descriptor too short (expected 1572, got 36) [ 605.627980][ T1724] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.628573][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.628593][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.671195][ T1724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.671228][ T1724] usb 9-1: Product: syz [ 605.671245][ T1724] usb 9-1: Manufacturer: syz [ 605.671261][ T1724] usb 9-1: SerialNumber: syz [ 605.952388][ T1724] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input12 [ 607.371131][ T6578] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.447215][ T4940] bcm5974 9-1:1.0: could not read from device [ 607.883356][ T1480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.883379][ T1480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.927578][ T4940] bcm5974 9-1:1.0: could not read from device [ 608.002750][ T1724] usb 9-1: USB disconnect, device number 3 [ 608.521376][ T1484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.521406][ T1484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.747133][ T1480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.010598][ T6578] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.032506][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.819906][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.819929][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.923743][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.943449][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.943813][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.944038][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.944250][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.007381][ T1484] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.422362][ T1724] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 614.176763][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 614.225281][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 614.298039][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 614.305139][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 614.308295][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.717992][T10006] tun0: tun_chr_ioctl cmd 1074025675 [ 616.718022][T10006] tun0: persist disabled [ 616.779674][ T5602] Bluetooth: hci1: command tx timeout [ 618.371603][ T9975] lo speed is unknown, defaulting to 1000 [ 619.030102][ T5602] Bluetooth: hci1: command tx timeout [ 619.274107][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.274349][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.274559][ T9975] bridge_slave_0: entered allmulticast mode [ 619.278007][ T9975] bridge_slave_0: entered promiscuous mode [ 619.353513][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.353773][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.354034][ T9975] bridge_slave_1: entered allmulticast mode [ 619.382504][ T9975] bridge_slave_1: entered promiscuous mode [ 619.483763][ T9975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.512239][ T9975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.056826][ T9975] team0: Port device team_slave_0 added [ 620.085110][ T9975] team0: Port device team_slave_1 added [ 620.175201][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.175225][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.175255][ T9975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.177906][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.177926][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.177957][ T9975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.365946][ T9975] hsr_slave_0: entered promiscuous mode [ 620.371732][ T9975] hsr_slave_1: entered promiscuous mode [ 620.385962][ T9975] debugfs: 'hsr0' already exists in 'hsr' [ 620.385992][ T9975] Cannot create hsr debugfs directory [ 621.290755][ T5602] Bluetooth: hci1: command tx timeout [ 623.536133][ T5602] Bluetooth: hci1: command tx timeout [ 623.934571][ T9660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 623.983772][ T9660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 624.038134][ T9660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 624.040752][ T9660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 624.055268][ T9660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 624.989945][T10021] lo speed is unknown, defaulting to 1000 [ 625.961618][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.961865][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.962114][T10021] bridge_slave_0: entered allmulticast mode [ 625.990715][T10021] bridge_slave_0: entered promiscuous mode [ 626.019257][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.019406][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.019650][T10021] bridge_slave_1: entered allmulticast mode [ 626.066476][T10021] bridge_slave_1: entered promiscuous mode [ 626.142200][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.146163][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.241860][T10021] team0: Port device team_slave_0 added [ 626.252299][T10021] team0: Port device team_slave_1 added [ 626.330265][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.330285][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.330310][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.382312][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.382334][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.382364][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.482967][ T9660] Bluetooth: hci4: command tx timeout [ 627.284091][T10021] hsr_slave_0: entered promiscuous mode [ 627.285734][T10021] hsr_slave_1: entered promiscuous mode [ 627.286856][T10021] debugfs: 'hsr0' already exists in 'hsr' [ 627.286885][T10021] Cannot create hsr debugfs directory [ 628.746556][ T9660] Bluetooth: hci4: command tx timeout [ 630.988410][ T9660] Bluetooth: hci4: command tx timeout [ 633.081643][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 633.129773][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 633.191844][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 633.196642][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 633.197381][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 633.248250][ T5600] Bluetooth: hci4: command tx timeout [ 633.898450][ T5602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 634.362575][T10040] lo speed is unknown, defaulting to 1000 [ 634.466248][ T5602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 634.470066][ T5602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 634.521053][ T5602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 634.541283][ T5602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 635.668043][ T9660] Bluetooth: hci5: command tx timeout [ 636.001790][T10047] lo speed is unknown, defaulting to 1000 [ 636.037333][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.037560][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.037812][T10040] bridge_slave_0: entered allmulticast mode [ 636.078015][T10040] bridge_slave_0: entered promiscuous mode [ 636.137290][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.137436][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.137673][T10040] bridge_slave_1: entered allmulticast mode [ 636.144151][T10040] bridge_slave_1: entered promiscuous mode [ 636.336249][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.408776][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.626782][T10040] team0: Port device team_slave_0 added [ 636.657866][T10040] team0: Port device team_slave_1 added [ 636.731774][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.731795][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.731842][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.739382][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.739402][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.739433][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.979421][ T9660] Bluetooth: hci6: command tx timeout [ 637.293605][T10040] hsr_slave_0: entered promiscuous mode [ 637.299118][T10040] hsr_slave_1: entered promiscuous mode [ 637.347143][T10040] debugfs: 'hsr0' already exists in 'hsr' [ 637.347179][T10040] Cannot create hsr debugfs directory [ 637.605350][ T5602] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 637.637931][ T5602] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 637.659539][ T5602] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 637.664814][ T5602] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 637.665739][ T5602] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 637.922580][ T9660] Bluetooth: hci5: command tx timeout [ 638.955892][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.956143][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.956368][T10047] bridge_slave_0: entered allmulticast mode [ 638.959481][T10047] bridge_slave_0: entered promiscuous mode [ 638.968651][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.968915][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.969157][T10047] bridge_slave_1: entered allmulticast mode [ 638.979031][T10047] bridge_slave_1: entered promiscuous mode [ 639.156331][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.208983][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.220754][ T9660] Bluetooth: hci6: command tx timeout [ 639.349920][T10047] team0: Port device team_slave_0 added [ 639.373074][T10047] team0: Port device team_slave_1 added [ 639.486663][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.486687][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.486719][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.489085][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.489101][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.489124][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.913993][ T9660] Bluetooth: hci9: command tx timeout [ 640.174114][ T9660] Bluetooth: hci5: command tx timeout [ 641.397325][T10047] hsr_slave_0: entered promiscuous mode [ 641.405164][T10047] hsr_slave_1: entered promiscuous mode [ 641.406656][T10047] debugfs: 'hsr0' already exists in 'hsr' [ 641.446557][T10047] Cannot create hsr debugfs directory [ 641.474245][ T9660] Bluetooth: hci6: command tx timeout [ 641.820262][T10074] lo speed is unknown, defaulting to 1000 [ 642.166908][ T9660] Bluetooth: hci9: command tx timeout [ 642.426942][ T9660] Bluetooth: hci5: command tx timeout [ 642.629875][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.630127][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.630367][T10074] bridge_slave_0: entered allmulticast mode [ 642.672135][T10074] bridge_slave_0: entered promiscuous mode [ 642.682847][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.683085][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.683588][T10074] bridge_slave_1: entered allmulticast mode [ 642.707830][T10074] bridge_slave_1: entered promiscuous mode [ 642.783188][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.798124][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.856313][T10074] team0: Port device team_slave_0 added [ 642.866220][T10074] team0: Port device team_slave_1 added [ 642.916152][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.916174][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.916205][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.921578][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.921597][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.921628][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.266818][T10074] hsr_slave_0: entered promiscuous mode [ 643.268533][T10074] hsr_slave_1: entered promiscuous mode [ 643.286490][T10074] debugfs: 'hsr0' already exists in 'hsr' [ 643.286522][T10074] Cannot create hsr debugfs directory [ 643.729506][ T9660] Bluetooth: hci6: command tx timeout [ 644.422142][ T9660] Bluetooth: hci9: command tx timeout [ 646.673206][ T9660] Bluetooth: hci9: command tx timeout [ 648.607895][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.607978][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 677.473524][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.552651][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.567901][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.569128][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.605218][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.388006][T10101] lo speed is unknown, defaulting to 1000 [ 678.653761][ T9660] Bluetooth: hci2: command 0x0406 tx timeout [ 679.143339][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.143594][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.144203][T10101] bridge_slave_0: entered allmulticast mode [ 679.206689][T10101] bridge_slave_0: entered promiscuous mode [ 679.211043][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.211272][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.211668][T10101] bridge_slave_1: entered allmulticast mode [ 679.264516][T10101] bridge_slave_1: entered promiscuous mode [ 679.384204][T10101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.415184][T10101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.556319][T10101] team0: Port device team_slave_0 added [ 679.585264][T10101] team0: Port device team_slave_1 added [ 679.659985][T10101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.660007][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.660036][T10101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.663615][T10101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.663634][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.663664][T10101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.866702][ T5602] Bluetooth: hci0: command tx timeout [ 680.273087][T10101] hsr_slave_0: entered promiscuous mode [ 680.282760][T10101] hsr_slave_1: entered promiscuous mode [ 680.284058][T10101] debugfs: 'hsr0' already exists in 'hsr' [ 680.284100][T10101] Cannot create hsr debugfs directory [ 682.116607][ T9660] Bluetooth: hci0: command tx timeout [ 684.142052][ T9660] Bluetooth: hci7: command 0x0406 tx timeout [ 684.142099][ T9660] Bluetooth: hci8: command 0x0406 tx timeout [ 684.368094][ T9686] Bluetooth: hci0: command tx timeout [ 686.621563][ T5602] Bluetooth: hci0: command tx timeout [ 689.510383][ T5600] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 689.568646][ T5600] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 689.585819][ T5600] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 689.638228][ T5600] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 689.641160][ T5600] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 690.460929][T10129] lo speed is unknown, defaulting to 1000 [ 691.408950][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.409170][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.409394][T10129] bridge_slave_0: entered allmulticast mode [ 691.413369][T10129] bridge_slave_0: entered promiscuous mode [ 691.417129][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.417362][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.417584][T10129] bridge_slave_1: entered allmulticast mode [ 691.479261][T10129] bridge_slave_1: entered promiscuous mode [ 691.590291][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.676872][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.841505][T10129] team0: Port device team_slave_0 added [ 691.852368][T10129] team0: Port device team_slave_1 added [ 691.918844][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.918863][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.918891][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.925934][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.925953][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.925983][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.997160][ T5602] Bluetooth: hci10: command tx timeout [ 693.327778][T10129] hsr_slave_0: entered promiscuous mode [ 693.331839][T10129] hsr_slave_1: entered promiscuous mode [ 693.333021][T10129] debugfs: 'hsr0' already exists in 'hsr' [ 693.333055][T10129] Cannot create hsr debugfs directory [ 694.267860][ T5602] Bluetooth: hci10: command tx timeout [ 696.499822][ T5602] Bluetooth: hci10: command tx timeout [ 698.621377][ T5600] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 698.749111][ T5600] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 698.754848][ T5600] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 698.763561][ T5600] Bluetooth: hci10: command tx timeout [ 698.779137][ T5600] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 698.801266][ T5600] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 699.594750][ T5600] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 699.659917][ T5600] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 699.682918][ T5600] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 699.727368][ T5600] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 699.728367][ T5600] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 700.671941][T10154] lo speed is unknown, defaulting to 1000 [ 701.005914][ T5602] Bluetooth: hci11: command tx timeout [ 701.494359][T10148] lo speed is unknown, defaulting to 1000 [ 702.219893][ T5602] Bluetooth: hci12: command tx timeout [ 702.323709][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.323955][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.324219][T10154] bridge_slave_0: entered allmulticast mode [ 702.356778][T10154] bridge_slave_0: entered promiscuous mode [ 702.386037][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.386191][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.387184][T10154] bridge_slave_1: entered allmulticast mode [ 702.390843][T10154] bridge_slave_1: entered promiscuous mode [ 702.579979][T10154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.655825][T10154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.940038][T10154] team0: Port device team_slave_0 added [ 702.967998][T10154] team0: Port device team_slave_1 added [ 703.258920][ T5602] Bluetooth: hci11: command tx timeout [ 703.377422][T10154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.377444][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.377475][T10154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.505442][T10154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.505465][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.505498][T10154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.810545][ T5600] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 703.918146][ T5600] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 703.936046][ T5600] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 703.937267][ T5600] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 703.938101][ T5600] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 704.472329][T10185] Bluetooth: hci12: command tx timeout [ 705.008970][T10154] hsr_slave_0: entered promiscuous mode [ 705.012245][T10154] hsr_slave_1: entered promiscuous mode [ 705.035406][T10154] debugfs: 'hsr0' already exists in 'hsr' [ 705.035438][T10154] Cannot create hsr debugfs directory [ 705.035986][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.036138][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.036757][T10148] bridge_slave_0: entered allmulticast mode [ 705.043360][T10148] bridge_slave_0: entered promiscuous mode [ 705.155033][T10148] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.155273][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.155523][T10148] bridge_slave_1: entered allmulticast mode [ 705.203241][T10148] bridge_slave_1: entered promiscuous mode [ 705.515075][T10185] Bluetooth: hci11: command tx timeout [ 705.679385][T10148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.742406][T10148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.985704][T10148] team0: Port device team_slave_0 added [ 706.043223][T10148] team0: Port device team_slave_1 added [ 706.043544][T10183] lo speed is unknown, defaulting to 1000 [ 706.292066][T10185] Bluetooth: hci13: command tx timeout [ 706.292833][T10185] Bluetooth: hci3: command 0x0406 tx timeout [ 706.725336][ T9686] Bluetooth: hci12: command tx timeout [ 707.388318][T10148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.388341][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.388369][T10148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.470987][T10148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.471009][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.471040][T10148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.765071][ T9686] Bluetooth: hci11: command tx timeout [ 707.855971][T10148] hsr_slave_0: entered promiscuous mode [ 707.857654][T10148] hsr_slave_1: entered promiscuous mode [ 707.858976][T10148] debugfs: 'hsr0' already exists in 'hsr' [ 707.859083][T10148] Cannot create hsr debugfs directory [ 708.545017][ T9686] Bluetooth: hci13: command tx timeout [ 708.989498][ T9686] Bluetooth: hci12: command tx timeout [ 709.918313][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.918554][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.919215][T10183] bridge_slave_0: entered allmulticast mode [ 709.950235][T10183] bridge_slave_0: entered promiscuous mode [ 709.979742][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.979996][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.980243][T10183] bridge_slave_1: entered allmulticast mode [ 709.983456][T10183] bridge_slave_1: entered promiscuous mode [ 710.131411][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.160555][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.224693][T10183] team0: Port device team_slave_0 added [ 710.228799][T10183] team0: Port device team_slave_1 added [ 710.286485][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.286506][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.286539][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.350602][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.350622][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.350652][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.477116][T10183] hsr_slave_0: entered promiscuous mode [ 710.478930][T10183] hsr_slave_1: entered promiscuous mode [ 710.480093][T10183] debugfs: 'hsr0' already exists in 'hsr' [ 710.480120][T10183] Cannot create hsr debugfs directory [ 710.797944][ T9686] Bluetooth: hci13: command tx timeout [ 713.051394][ T9686] Bluetooth: hci13: command tx timeout [ 715.153038][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.153117][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.667400][ T9978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.323733][ T9660] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 742.433321][ T9660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 742.452541][ T9660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.476601][ T9660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.477879][ T9660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.555131][T10260] lo speed is unknown, defaulting to 1000 [ 744.488455][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.488724][T10260] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.488962][T10260] bridge_slave_0: entered allmulticast mode [ 744.492159][T10260] bridge_slave_0: entered promiscuous mode [ 744.497394][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.497651][T10260] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.497888][T10260] bridge_slave_1: entered allmulticast mode [ 744.500965][T10260] bridge_slave_1: entered promiscuous mode [ 744.636142][T10260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.648387][T10260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.680536][ T9660] Bluetooth: hci2: command tx timeout [ 744.769393][T10260] team0: Port device team_slave_0 added [ 744.774200][T10260] team0: Port device team_slave_1 added [ 744.891109][T10260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.891131][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.891165][T10260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.894313][T10260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.894332][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.894362][T10260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.025712][T10260] hsr_slave_0: entered promiscuous mode [ 745.148820][T10260] hsr_slave_1: entered promiscuous mode [ 745.163018][T10260] debugfs: 'hsr0' already exists in 'hsr' [ 745.163057][T10260] Cannot create hsr debugfs directory [ 746.933434][ T9660] Bluetooth: hci2: command tx timeout [ 749.187367][ T9660] Bluetooth: hci2: command tx timeout [ 750.670495][ T9660] Bluetooth: hci1: command 0x0406 tx timeout [ 751.439200][ T9686] Bluetooth: hci2: command tx timeout [ 754.655138][ T9660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 754.734881][ T9660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 754.740457][ T9660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 754.742021][ T9660] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 754.777531][ T9660] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 755.489701][T10290] lo speed is unknown, defaulting to 1000 [ 756.301775][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.302002][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.322011][T10290] bridge_slave_0: entered allmulticast mode [ 756.343543][T10290] bridge_slave_0: entered promiscuous mode [ 756.364352][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.364612][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.364872][T10290] bridge_slave_1: entered allmulticast mode [ 756.408375][T10290] bridge_slave_1: entered promiscuous mode [ 756.492049][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.513402][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.572906][T10290] team0: Port device team_slave_0 added [ 756.583275][T10290] team0: Port device team_slave_1 added [ 756.634660][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.634682][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.634711][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.637331][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.637348][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.637378][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.842159][T10290] hsr_slave_0: entered promiscuous mode [ 756.843791][T10290] hsr_slave_1: entered promiscuous mode [ 756.856817][T10290] debugfs: 'hsr0' already exists in 'hsr' [ 756.856849][T10290] Cannot create hsr debugfs directory [ 756.985224][ T9660] Bluetooth: hci7: command tx timeout [ 759.248990][ T9660] Bluetooth: hci7: command tx timeout [ 761.491319][ T9660] Bluetooth: hci7: command tx timeout [ 761.764176][ T9660] Bluetooth: hci4: command 0x0406 tx timeout [ 763.744178][ T9686] Bluetooth: hci7: command tx timeout [ 764.099984][ T9660] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 764.128343][ T9660] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 764.156851][ T9660] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 764.180552][ T9660] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 764.202897][ T9660] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 764.597606][ T9686] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 764.683141][ T9686] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 764.696673][ T9686] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 764.727068][ T9686] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 764.729304][ T9686] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 766.017661][T10314] lo speed is unknown, defaulting to 1000 [ 766.651960][ T9686] Bluetooth: hci8: command tx timeout [ 767.074535][T10311] lo speed is unknown, defaulting to 1000 [ 767.123566][ T9660] Bluetooth: hci14: command tx timeout [ 767.308751][ T9660] Bluetooth: hci5: command 0x0406 tx timeout [ 767.308969][ T9660] Bluetooth: hci6: command 0x0406 tx timeout [ 768.315916][T10314] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.317881][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.318172][T10314] bridge_slave_0: entered allmulticast mode [ 768.362904][T10314] bridge_slave_0: entered promiscuous mode [ 768.563541][T10314] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.563681][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.563978][T10314] bridge_slave_1: entered allmulticast mode [ 768.590012][T10314] bridge_slave_1: entered promiscuous mode [ 768.839905][T10314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.860358][ T5602] Bluetooth: hci8: command tx timeout [ 768.893415][T10314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.100070][T10185] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 769.142179][T10185] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 769.158312][T10185] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 769.176009][T10185] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 769.202689][T10185] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 769.387363][T10185] Bluetooth: hci14: command tx timeout [ 769.556779][T10314] team0: Port device team_slave_0 added [ 770.494660][T10314] team0: Port device team_slave_1 added [ 770.839452][T10314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.839474][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.839505][T10314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.967139][T10314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.967162][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.967195][T10314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.110559][T10185] Bluetooth: hci8: command tx timeout [ 771.157096][T10311] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.157248][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.157522][T10311] bridge_slave_0: entered allmulticast mode [ 771.204781][T10311] bridge_slave_0: entered promiscuous mode [ 771.233408][T10311] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.233550][T10311] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.233840][T10311] bridge_slave_1: entered allmulticast mode [ 771.264617][T10311] bridge_slave_1: entered promiscuous mode [ 771.471445][T10185] Bluetooth: hci15: command tx timeout [ 771.633020][T10185] Bluetooth: hci14: command tx timeout [ 771.692215][T10314] hsr_slave_0: entered promiscuous mode [ 771.706897][T10314] hsr_slave_1: entered promiscuous mode [ 771.710194][T10314] debugfs: 'hsr0' already exists in 'hsr' [ 771.710225][T10314] Cannot create hsr debugfs directory [ 771.756110][T10311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.788498][T10311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.860612][T10185] Bluetooth: hci9: command 0x0406 tx timeout [ 773.363544][ T5602] Bluetooth: hci8: command tx timeout [ 773.456021][T10311] team0: Port device team_slave_0 added [ 773.498096][T10311] team0: Port device team_slave_1 added [ 773.630100][T10344] lo speed is unknown, defaulting to 1000 [ 773.631169][T10311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.631186][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.631216][T10311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.709839][T10185] Bluetooth: hci15: command tx timeout [ 773.727692][T10311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.727714][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.727746][T10311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.882746][T10185] Bluetooth: hci14: command tx timeout [ 774.053878][T10311] hsr_slave_0: entered promiscuous mode [ 774.055659][T10311] hsr_slave_1: entered promiscuous mode [ 774.084601][T10311] debugfs: 'hsr0' already exists in 'hsr' [ 774.084635][T10311] Cannot create hsr debugfs directory [ 775.503609][T10344] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.503847][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.504090][T10344] bridge_slave_0: entered allmulticast mode [ 775.539052][T10344] bridge_slave_0: entered promiscuous mode [ 775.559603][T10344] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.559866][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.560131][T10344] bridge_slave_1: entered allmulticast mode [ 775.593558][T10344] bridge_slave_1: entered promiscuous mode [ 775.672044][T10344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.693409][T10344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.863637][T10344] team0: Port device team_slave_0 added [ 775.907659][T10344] team0: Port device team_slave_1 added [ 775.962865][T10185] Bluetooth: hci15: command tx timeout [ 775.998096][T10344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.998118][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.998149][T10344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.000861][T10344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.000879][T10344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.000909][T10344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.266887][T10344] hsr_slave_0: entered promiscuous mode [ 776.268653][T10344] hsr_slave_1: entered promiscuous mode [ 776.270030][T10344] debugfs: 'hsr0' already exists in 'hsr' [ 776.270059][T10344] Cannot create hsr debugfs directory [ 778.215948][T10185] Bluetooth: hci15: command tx timeout [ 781.701062][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.701144][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.080240][ T39] INFO: task syz-executor:9975 blocked for more than 143 seconds. [ 783.080275][ T39] Tainted: G L syzkaller #0 [ 783.080288][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 783.080317][ T39] task:syz-executor state:D stack:22344 pid:9975 tgid:9975 ppid:1 task_flags:0x400140 flags:0x00080002 [ 783.080393][ T39] Call Trace: [ 783.080470][ T39] [ 783.080526][ T39] __schedule+0x16d9/0x5700 [ 783.080622][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.080713][ T39] ? __pfx___schedule+0x10/0x10 [ 783.080771][ T39] rt_mutex_schedule+0x76/0xf0 [ 783.080802][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 783.080840][ T39] ? rt_mutex_slowlock_block+0x33c/0x690 [ 783.080870][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 783.080899][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 783.080928][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 783.080975][ T39] ? del_device_store+0xd6/0x370 [ 783.081014][ T39] ? del_device_store+0xd6/0x370 [ 783.081045][ T39] mutex_lock_nested+0x168/0x1d0 [ 783.081069][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 783.081099][ T39] del_device_store+0xd6/0x370 [ 783.081132][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 783.081156][ T39] ? __pfx_del_device_store+0x10/0x10 [ 783.081191][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 783.081216][ T39] ? sysfs_kf_write+0x166/0x260 [ 783.081246][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 783.081269][ T39] kernfs_fop_write_iter+0x3a5/0x540 [ 783.081311][ T39] vfs_write+0x61e/0xbb0 [ 783.081348][ T39] ? __pfx_vfs_write+0x10/0x10 [ 783.081380][ T39] ? do_sys_openat2+0x14e/0x200 [ 783.081416][ T39] ? kmem_cache_free+0x187/0x6d0 [ 783.081468][ T39] ksys_write+0x156/0x270 [ 783.081499][ T39] ? __pfx_ksys_write+0x10/0x10 [ 783.081559][ T39] do_syscall_64+0x166/0x520 [ 783.081594][ T39] ? trace_irq_disable+0x3b/0x140 [ 783.081664][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.081690][ T39] ? clear_bhb_loop+0x70/0xc0 [ 783.081720][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.081751][ T39] RIP: 0033:0x7f6ee607e98e [ 783.081805][ T39] RSP: 002b:00007ffda70fd1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.081840][ T39] RAX: ffffffffffffffda RBX: 0000555582e56500 RCX: 00007f6ee607e98e [ 783.081858][ T39] RDX: 0000000000000001 RSI: 00007ffda70fd240 RDI: 0000000000000005 [ 783.081874][ T39] RBP: 00007f6ee61558ee R08: 0000000000000000 R09: 0000000000000000 [ 783.081889][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.081904][ T39] R13: 00007ffda70fd240 R14: 00007f6ee6e74620 R15: 0000000000000003 [ 783.081941][ T39] [ 783.081956][ T39] INFO: task syz-executor:10021 blocked for more than 143 seconds. [ 783.081977][ T39] Tainted: G L syzkaller #0 [ 783.081991][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 783.082002][ T39] task:syz-executor state:D stack:22312 pid:10021 tgid:10021 ppid:1 task_flags:0x400140 flags:0x00080002 [ 783.082065][ T39] Call Trace: [ 783.082074][ T39] [ 783.082088][ T39] __schedule+0x16d9/0x5700 [ 783.082136][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.082181][ T39] ? __pfx___schedule+0x10/0x10 [ 783.082227][ T39] rt_mutex_schedule+0x76/0xf0 [ 783.082256][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 783.082299][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 783.082328][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 783.082356][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 783.082403][ T39] ? del_device_store+0xd6/0x370 [ 783.082441][ T39] ? del_device_store+0xd6/0x370 [ 783.082471][ T39] mutex_lock_nested+0x168/0x1d0 [ 783.082495][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 783.082524][ T39] del_device_store+0xd6/0x370 [ 783.082557][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 783.082582][ T39] ? __pfx_del_device_store+0x10/0x10 [ 783.082615][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 783.082640][ T39] ? sysfs_kf_write+0x166/0x260 [ 783.082668][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 783.082690][ T39] kernfs_fop_write_iter+0x3a5/0x540 [ 783.082732][ T39] vfs_write+0x61e/0xbb0 [ 783.082785][ T39] ? __pfx_vfs_write+0x10/0x10 [ 783.082817][ T39] ? do_sys_openat2+0x14e/0x200 [ 783.082849][ T39] ? kmem_cache_free+0x187/0x6d0 [ 783.082900][ T39] ksys_write+0x156/0x270 [ 783.082930][ T39] ? __pfx_ksys_write+0x10/0x10 [ 783.082970][ T39] do_syscall_64+0x166/0x520 [ 783.083001][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.083025][ T39] ? clear_bhb_loop+0x70/0xc0 [ 783.083053][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.083084][ T39] RIP: 0033:0x7f41f1d8e98e [ 783.083104][ T39] RSP: 002b:00007ffc7ef9e5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.083128][ T39] RAX: ffffffffffffffda RBX: 0000555591d32500 RCX: 00007f41f1d8e98e [ 783.083147][ T39] RDX: 0000000000000001 RSI: 00007ffc7ef9e680 RDI: 0000000000000005 [ 783.083162][ T39] RBP: 00007f41f1e658ee R08: 0000000000000000 R09: 0000000000000000 [ 783.083177][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.083191][ T39] R13: 00007ffc7ef9e680 R14: 00007f41f2b84620 R15: 0000000000000003 [ 783.083228][ T39] [ 783.083292][ T39] [ 783.083292][ T39] Showing all locks held in the system: [ 783.083339][ T39] locks held by rcuc/1/28: 3, last CPU#1: [ 783.083396][ T39] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 783.083504][ T39] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 783.083568][ T39] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 783.083634][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 783.083651][ T39] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 783.083741][ T39] locks held by getty/5344: 2, on CPU#0: [ 783.083766][ T39] #0: ffff888036a0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 783.083825][ T39] #1: ffffc900044b62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 783.083904][ T39] locks held by syz.4.1279/9707: 1, on CPU#1: [ 783.083921][ T39] #0: ffffffff8e1c9ef0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 783.083983][ T39] locks held by syz-executor/9770: 7, on CPU#0: [ 783.084000][ T39] #0: ffff888036ac0510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 783.084064][ T39] #1: ffff888082032c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 783.084132][ T39] #2: ffff888029770e18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 783.084206][ T39] #3: ffffffff8ee44818 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 783.084272][ T39] #4: ffff88804c969160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 783.084343][ T39] #5: ffff888039f98310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 783.084406][ T39] #6: ffffffff8e1c9ef0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 783.084463][ T39] locks held by syz.6.1306/9937: 1, on CPU#0: [ 783.084479][ T39] #0: ffffffff8e1c9ef0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 783.084536][ T39] locks held by syz-executor/9975: 4, on CPU#0: [ 783.084554][ T39] #0: ffff888036ac0510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 783.084618][ T39] #1: ffff888071c7e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 783.084686][ T39] #2: ffff888029770e18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 783.084766][ T39] #3: ffffffff8ee44818 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 783.084832][ T39] locks held by kworker/u8:7/9978: 6, on CPU#0: [ 783.084849][ T39] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 783.084913][ T39] #1: ffffc90004bdfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 783.084978][ T39] #2: ffffffff8f5c5740 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 783.085044][ T39] #3: ffff888060a9b160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 783.085109][ T39] #4: ffff88803352c310 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420