last executing test programs: 6m46.165713191s ago: executing program 4 (id=5): socket(0x10, 0x803, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) 6m43.779106285s ago: executing program 4 (id=9): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5001"], 0x102) connect$inet(0xffffffffffffffff, 0x0, 0x0) 6m40.649873989s ago: executing program 4 (id=14): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0xc, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x80, 0xff, 0x0, 0x5, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x87, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xc, 0x0, 0x105, 0x4, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m34.679735776s ago: executing program 4 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYBLOB="87658e31c7ebb3633775c00367e50102f1f9f6df0dd69e336d4f87d6bbb82e18f555530aaf6bc9042012fdbef30c5ac405f43604e8", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000848}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6m30.693453578s ago: executing program 4 (id=22): socket(0x5, 0x6, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) close(0x3) msgget(0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x37f8, &(0x7f0000000100)={0x0, 0x79af, 0x40, 0x8000, 0x400246, 0x0, r2}, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r4, 0xffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d099"], 0x10b8}, 0x200008c0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/29, 0x1d}], 0x2) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, 0x0, 0x0) close(0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 6m15.217374564s ago: executing program 32 (id=22): socket(0x5, 0x6, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) close(0x3) msgget(0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x37f8, &(0x7f0000000100)={0x0, 0x79af, 0x40, 0x8000, 0x400246, 0x0, r2}, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r4, 0xffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d099"], 0x10b8}, 0x200008c0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/29, 0x1d}], 0x2) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, 0x0, 0x0) close(0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 5m49.436542836s ago: executing program 3 (id=87): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 5m49.174887447s ago: executing program 3 (id=88): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) setregid(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1f1f, &(0x7f0000000040)={0x0, 0xacfe, 0x1000, 0x3, 0x297}, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x301301) r2 = syz_open_dev$usbfs(0x0, 0x6e, 0x80) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, 0x0) 5m47.116620871s ago: executing program 3 (id=94): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x80000000, 0x27fd, 0x27ff, 0x440, 0x0, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 5m46.503465747s ago: executing program 3 (id=96): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=0xdf9, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bf46", 0x2, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 5m46.203744593s ago: executing program 3 (id=98): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) 5m45.801196165s ago: executing program 3 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)='/', 0x1, 0x8804, &(0x7f0000000140)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 5m30.416188566s ago: executing program 33 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)='/', 0x1, 0x8804, &(0x7f0000000140)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 14.792805447s ago: executing program 2 (id=538): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000280)=0x4, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r2, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x4]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x20000008}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x4040) openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 13.683925681s ago: executing program 1 (id=539): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) 9.465214888s ago: executing program 0 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 9.46475239s ago: executing program 1 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = fanotify_init(0x4, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r3, 0x441, 0x800003b, r4, 0x0) r5 = fanotify_init(0x8, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r5, 0x2, 0x8, r6, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000000380)={0x0, 0x2, [{r9, 0x0, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000, 0x2000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r11, 0x0, 0x0}, 0x10) syz_emit_ethernet(0xfff, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000086dd60000000000000000000000000000000000000000000000000000000000000000000000000000000a92e0771069738969d"], 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) 9.040672338s ago: executing program 0 (id=545): timer_create(0x3, &(0x7f0000000680)={0x0, 0x24, 0x0, @thr={&(0x7f0000000800)="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", &(0x7f0000000700)="c7b7271aeb8a5c5e45bcf6823002dad34f110c4cca68a5517e42f18af132bf39b38cb66258021fd9fa1f7e25ef177e201a2a7827f0b82684eac95763c57e25d554dedc1b5e8465125ea0a48e9ebd7f4f989812730b4a36bf99387ce07a1aea43ac4b463ad3d9f1fa4af2e9f10bb486568cedb9d3c350d82030390eeb11ebe420223f0e468b9d4fb95861ff748124a1e157df48a937af73eba290925d10a6f837d90907fedb834c3822e16e42066bd8c382680165ddb13ebb52059e69bdac1d0ed2446cf3a277e512e436d4437f1f4a737f2d312612f065a1da3f8721b7425267e71ace8b3f3501242cebf368ce18590e23cc03a767fc4683819e9f89f2cd56"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x10000, @value=r0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000010000000000000d1ca000035960c00fcffffff186200000700000000000071fcffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x83, &(0x7f0000000200)=""/131, 0x41000, 0x0, '\x00', r3, @netfilter=0x2d, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x0, 0x7fffffff}, 0x10, r6, r7, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x1, 0x8}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0xa, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setrlimit(0xf, &(0x7f00000001c0)={0x0, 0x62}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r10 = fsmount(r2, 0x0, 0x2) fchdir(r10) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, r11) setpgid(0x0, r11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, 0x0) stat(&(0x7f0000000380)='./file0\x00', 0x0) setresgid(0xee00, 0x0, 0x0) 7.894788399s ago: executing program 2 (id=546): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040601020000e9ffffffe7000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 7.832969783s ago: executing program 1 (id=547): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x40, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040601020000e9ffffffe7000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 5.480294578s ago: executing program 2 (id=548): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e00"], 0xd4}}, 0x0) 4.783409395s ago: executing program 1 (id=549): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 4.425736677s ago: executing program 0 (id=550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 4.243179251s ago: executing program 2 (id=551): r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x28, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0, 0x10100, 0x0, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 4.207730576s ago: executing program 1 (id=552): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) 4.116708888s ago: executing program 0 (id=553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x80800) 3.952930742s ago: executing program 2 (id=554): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = timerfd_create(0x0, 0x800) timerfd_gettime(r3, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbd5bbbbbb00000000000008060001080006040001000000000000ac1414bb"], 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 3.728728948s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = fanotify_init(0x4, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r3, 0x441, 0x800003b, r4, 0x0) r5 = fanotify_init(0x8, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r5, 0x2, 0x8, r6, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000000380)={0x0, 0x2, [{r9, 0x0, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000, 0x2000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r11, 0x0, 0x0}, 0x10) syz_emit_ethernet(0xfff, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000086dd60000000000000000000000000000000000000000000000000000000000000000000000000000000a92e0771069738969d"], 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) 2.479672602s ago: executing program 2 (id=556): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040601020000e9ffffffe7000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 1.32251354s ago: executing program 0 (id=557): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 1 (id=558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) socket(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r1, &(0x7f0000000140), 0x0, 0x0) kernel console output (not intermixed with test programs): _0 (retrying later): interface not active [ 100.554522][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.554578][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.554637][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.646272][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.646308][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.646369][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.699908][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.699923][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.699951][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.752542][ T4921] Bluetooth: hci2: command tx timeout [ 100.912448][ T4921] Bluetooth: hci0: command tx timeout [ 100.992348][ T4921] Bluetooth: hci1: command tx timeout [ 100.992376][ T4921] Bluetooth: hci3: command tx timeout [ 101.072331][ T4921] Bluetooth: hci4: command tx timeout [ 101.110449][ T5623] hsr_slave_0: entered promiscuous mode [ 101.111506][ T5623] hsr_slave_1: entered promiscuous mode [ 101.129350][ T5610] hsr_slave_0: entered promiscuous mode [ 101.130307][ T5610] hsr_slave_1: entered promiscuous mode [ 101.131194][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 101.131280][ T5610] Cannot create hsr debugfs directory [ 101.236638][ T5618] hsr_slave_0: entered promiscuous mode [ 101.237749][ T5618] hsr_slave_1: entered promiscuous mode [ 101.238518][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 101.238537][ T5618] Cannot create hsr debugfs directory [ 101.374265][ T5616] hsr_slave_0: entered promiscuous mode [ 101.375181][ T5616] hsr_slave_1: entered promiscuous mode [ 101.375882][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 101.375897][ T5616] Cannot create hsr debugfs directory [ 101.381726][ T5611] hsr_slave_0: entered promiscuous mode [ 101.386329][ T5611] hsr_slave_1: entered promiscuous mode [ 101.388750][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 101.388800][ T5611] Cannot create hsr debugfs directory [ 102.212111][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.250091][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.260273][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.305744][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.308690][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.328653][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.352471][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.385577][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.530797][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.575919][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.580168][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.617660][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.621194][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.646894][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.669605][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.705570][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.807539][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.832589][ T4921] Bluetooth: hci2: command tx timeout [ 102.858226][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.871957][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.906843][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.910703][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.956801][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.981517][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.992454][ T4921] Bluetooth: hci0: command tx timeout [ 103.015859][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.072342][ T4921] Bluetooth: hci3: command tx timeout [ 103.085726][ T4921] Bluetooth: hci1: command tx timeout [ 103.141179][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.152708][ T4921] Bluetooth: hci4: command tx timeout [ 103.173467][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.180510][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.216019][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.231586][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.266600][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.291071][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.347977][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.401839][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.513797][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.555741][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.568562][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.597742][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.610926][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.623452][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.665593][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.669990][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.696383][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.728075][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.728786][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.784997][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.786321][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.824466][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.933548][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.998841][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.998988][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.031034][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.054721][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.054865][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.171051][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.255203][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.277965][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.278065][ T2223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.350585][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.350712][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.486789][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.510731][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.564472][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.564688][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.616471][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.616605][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.706231][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.749278][ T3408] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.749485][ T3408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.849170][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.849309][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.912844][ T4921] Bluetooth: hci2: command tx timeout [ 105.074152][ T4921] Bluetooth: hci0: command tx timeout [ 105.152283][ T4921] Bluetooth: hci1: command tx timeout [ 105.152311][ T4921] Bluetooth: hci3: command tx timeout [ 105.232285][ T59] Bluetooth: hci4: command tx timeout [ 105.319174][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.920893][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.313236][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.383047][ T5618] veth0_vlan: entered promiscuous mode [ 106.448268][ T5618] veth1_vlan: entered promiscuous mode [ 106.584156][ T5610] veth0_vlan: entered promiscuous mode [ 106.602706][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.661939][ T5616] veth0_vlan: entered promiscuous mode [ 106.677084][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.681730][ T5610] veth1_vlan: entered promiscuous mode [ 106.709428][ T5618] veth0_macvtap: entered promiscuous mode [ 106.732040][ T5616] veth1_vlan: entered promiscuous mode [ 106.740650][ T5618] veth1_macvtap: entered promiscuous mode [ 106.827599][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.868513][ T5610] veth0_macvtap: entered promiscuous mode [ 106.879021][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.901484][ T5611] veth0_vlan: entered promiscuous mode [ 106.911489][ T5610] veth1_macvtap: entered promiscuous mode [ 106.933372][ T5616] veth0_macvtap: entered promiscuous mode [ 106.940179][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961384][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.966334][ T5623] veth0_vlan: entered promiscuous mode [ 106.980262][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.981321][ T5616] veth1_macvtap: entered promiscuous mode [ 107.003688][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.008247][ T5611] veth1_vlan: entered promiscuous mode [ 107.100780][ T5623] veth1_vlan: entered promiscuous mode [ 107.112533][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.187358][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.189776][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.341621][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.347743][ T3363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.377449][ T3363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.399744][ T3363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.421502][ T3363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.461656][ T3363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.502630][ T3363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.531611][ T3363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.546624][ T3363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.551432][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.551448][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.660317][ T5611] veth0_macvtap: entered promiscuous mode [ 107.851137][ T5623] veth0_macvtap: entered promiscuous mode [ 107.863026][ T5611] veth1_macvtap: entered promiscuous mode [ 108.026645][ T5623] veth1_macvtap: entered promiscuous mode [ 108.119321][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.119343][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.346664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.346685][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.375307][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.445024][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.458170][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.480009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.480030][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.509812][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.621770][ T1301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.645494][ T1301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.690267][ T1301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.703748][ T3363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.703765][ T3363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.708527][ T1301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.801454][ T1301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.862785][ T1301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.893391][ T5798] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.012195][ T1301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.043200][ T1301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.110284][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.110305][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.195797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.195811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.311456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.311477][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.469245][ T3363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.469266][ T3363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.979980][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.980001][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.510436][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 115.423105][ T5839] process 'syz.1.11' launched './file0' with NULL argv: empty string added [ 116.442194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.748140][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.027720][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.027794][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.027900][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.027963][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.353313][ T10] usb 3-1: config 0 descriptor?? [ 120.867428][ T5858] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 121.134092][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 121.134215][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.177996][ T10] usb 3-1: USB disconnect, device number 2 [ 125.252193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.272196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.282185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.292187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.302189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.312203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.322191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.362191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.372187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.371618][ T5911] 9pnet_virtio: no channels available for device syz [ 129.419323][ T5899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.419340][ T5899] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 130.119534][ T5899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.121875][ T5899] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 130.328669][ T5899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.331426][ T5899] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 130.362277][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.512866][ T5899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.519928][ T5899] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 130.537652][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 130.574176][ T31] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 130.574207][ T31] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 130.574327][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.574349][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.602369][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.075093][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075516][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233571][ T5936] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 133.306264][ T5875] usb 4-1: USB disconnect, device number 2 [ 133.634615][ T5899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.634634][ T5899] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 140.732863][ T5990] lo speed is unknown, defaulting to 1000 [ 141.344115][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 142.138755][ T5990] lo speed is unknown, defaulting to 1000 [ 142.836864][ T5990] lo speed is unknown, defaulting to 1000 [ 142.918652][ T5990] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 142.918681][ T5990] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 142.918711][ T5990] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 143.188999][ T5990] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.568979][ T5990] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.135203][ T31] usb 2-1: device descriptor read/all, error -71 [ 144.447764][ T5990] lo speed is unknown, defaulting to 1000 [ 144.732242][ T821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.736533][ T5990] lo speed is unknown, defaulting to 1000 [ 145.057948][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 145.231679][ T821] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 145.231718][ T821] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 145.231847][ T821] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.231990][ T821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.232049][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.516510][ T821] usbtmc 1-1:16.0: bulk endpoints not found [ 146.108263][ T5990] lo speed is unknown, defaulting to 1000 [ 146.730600][ T5990] lo speed is unknown, defaulting to 1000 [ 147.095792][ T5990] lo speed is unknown, defaulting to 1000 [ 148.324014][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.341220][ T5875] usb 1-1: USB disconnect, device number 2 [ 149.745600][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.747277][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.748485][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.749430][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.568110][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.568541][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.568937][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.570076][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.571665][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.619448][ T6079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.51'. [ 151.792371][ T2191] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 151.944852][ T2191] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 151.944880][ T2191] usb 1-1: config 0 has no interface number 0 [ 151.944922][ T2191] usb 1-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.944965][ T2191] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 151.944989][ T2191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.047755][ T2191] usb 1-1: config 0 descriptor?? [ 152.529613][ T6018] lo speed is unknown, defaulting to 1000 [ 152.672275][ T59] Bluetooth: hci5: command tx timeout [ 152.873722][ T2191] usb 1-1: USB disconnect, device number 3 [ 153.834364][ T6111] 9pnet_virtio: no channels available for device syz [ 153.957379][ T6108] lo speed is unknown, defaulting to 1000 [ 154.752214][ T59] Bluetooth: hci5: command tx timeout [ 155.765058][ T1476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.832613][ T59] Bluetooth: hci5: command tx timeout [ 157.854994][ T1476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.354338][ T6142] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 158.447694][ T1476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.914375][ T59] Bluetooth: hci5: command tx timeout [ 160.267758][ T5835] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 160.416314][ T5835] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 160.416702][ T5835] usb 1-1: config 0 has no interface number 0 [ 160.417057][ T5835] usb 1-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.417109][ T5835] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 160.417133][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.497375][ T5835] usb 1-1: config 0 descriptor?? [ 160.661493][ T1476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.458786][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.459025][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.459201][ T6018] bridge_slave_0: entered allmulticast mode [ 161.483661][ T6018] bridge_slave_0: entered promiscuous mode [ 161.489379][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.489597][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.489774][ T6018] bridge_slave_1: entered allmulticast mode [ 161.519914][ T6018] bridge_slave_1: entered promiscuous mode [ 161.580588][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.598050][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.650507][ T6018] team0: Port device team_slave_0 added [ 161.661294][ T6018] team0: Port device team_slave_1 added [ 161.709765][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.709783][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.709813][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.759298][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.759315][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.759344][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.880720][ T2191] usb 1-1: USB disconnect, device number 4 [ 161.918267][ T6018] hsr_slave_0: entered promiscuous mode [ 161.919243][ T6018] hsr_slave_1: entered promiscuous mode [ 161.920462][ T6018] debugfs: 'hsr0' already exists in 'hsr' [ 161.920479][ T6018] Cannot create hsr debugfs directory [ 162.442422][ T5875] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 163.054746][ T5875] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 163.054783][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.054815][ T5875] usb 3-1: config 0 has no interfaces? [ 163.054844][ T5875] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 163.054867][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.111182][ T5875] usb 3-1: config 0 descriptor?? [ 163.682454][ T5875] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.850071][ T5875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.874550][ T5875] usb 1-1: config 3 has an invalid interface number: 86 but max is 0 [ 163.874592][ T5875] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 163.874613][ T5875] usb 1-1: config 3 has no interface number 0 [ 163.874645][ T5875] usb 1-1: config 3 interface 86 has no altsetting 0 [ 163.882493][ T5875] usb 1-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 163.882522][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.882542][ T5875] usb 1-1: SerialNumber: syz [ 164.253498][ T5875] usb 1-1: USB disconnect, device number 5 [ 164.713094][ T1476] bridge_slave_1: left allmulticast mode [ 164.713264][ T1476] bridge_slave_1: left promiscuous mode [ 164.720206][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 164.758606][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.081539][ T1476] bridge_slave_0: left allmulticast mode [ 165.081573][ T1476] bridge_slave_0: left promiscuous mode [ 165.086470][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.121855][ T5875] usb 3-1: USB disconnect, device number 3 [ 165.932602][ T5739] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 166.084138][ T5739] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 166.084168][ T5739] usb 1-1: config 0 has no interface number 0 [ 166.084216][ T5739] usb 1-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.084246][ T5739] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 166.084263][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.090457][ T5739] usb 1-1: config 0 descriptor?? [ 166.416058][ T5711] usb 1-1: USB disconnect, device number 6 [ 166.496402][ T5739] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.652295][ T5739] usb 3-1: Using ep0 maxpacket: 32 [ 166.656833][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.657904][ T5739] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 166.657929][ T5739] usb 3-1: can't read configurations, error -71 [ 166.845456][ T1476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.922863][ T1476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.966536][ T1476] bond0 (unregistering): Released all slaves [ 167.023392][ T5732] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.101836][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 167.228344][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 167.235330][ T5732] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 167.235480][ T5732] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.235541][ T5732] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.235609][ T5732] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.235670][ T5732] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.235780][ T5732] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.236035][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.636206][ T5732] usb 4-1: usb_control_msg returned -32 [ 167.636269][ T5732] usbtmc 4-1:16.0: can't read capabilities [ 167.722342][ T2191] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.884748][ T2191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.886192][ T2191] usb 2-1: config 3 has an invalid interface number: 86 but max is 0 [ 167.886215][ T2191] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 167.886233][ T2191] usb 2-1: config 3 has no interface number 0 [ 167.886261][ T2191] usb 2-1: config 3 interface 86 has no altsetting 0 [ 167.887352][ T2191] usb 2-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 167.887377][ T2191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.887413][ T2191] usb 2-1: SerialNumber: syz [ 167.912311][ T5732] usb 4-1: USB disconnect, device number 3 [ 168.112278][ T5739] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 168.280301][ T5739] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 168.280329][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.280348][ T5739] usb 3-1: config 0 has no interfaces? [ 168.280374][ T5739] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 168.280397][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.343357][ T5739] usb 3-1: config 0 descriptor?? [ 168.345652][ T2191] usb 2-1: USB disconnect, device number 4 [ 168.739408][ T6018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.779582][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.915369][ T6018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.073798][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.077941][ T6018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.249336][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.282020][ T6018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.332637][ T6018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.796224][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 170.063425][ T1476] hsr_slave_0: left promiscuous mode [ 170.102468][ T1476] hsr_slave_1: left promiscuous mode [ 170.110525][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.110607][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.159797][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.159824][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.374881][ T1476] veth1_macvtap: left promiscuous mode [ 170.375196][ T1476] veth0_macvtap: left promiscuous mode [ 170.375493][ T1476] veth1_vlan: left promiscuous mode [ 170.378520][ T1476] veth0_vlan: left promiscuous mode [ 170.669577][ T5739] usb 3-1: USB disconnect, device number 6 [ 172.242240][ T2191] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.393555][ T1476] team0 (unregistering): Port device team_slave_1 removed [ 172.435930][ T1476] team0 (unregistering): Port device team_slave_0 removed [ 172.452256][ T2191] usb 2-1: Using ep0 maxpacket: 8 [ 172.484635][ T2191] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 172.484685][ T2191] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.484707][ T2191] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.484731][ T2191] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.484753][ T2191] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.484792][ T2191] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.484813][ T2191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.901237][ T2191] usb 2-1: usb_control_msg returned -32 [ 172.901283][ T2191] usbtmc 2-1:16.0: can't read capabilities [ 173.021612][ T6301] syzkaller0: entered promiscuous mode [ 173.021641][ T6301] syzkaller0: entered allmulticast mode [ 173.292079][ T5835] usb 2-1: USB disconnect, device number 5 [ 173.309568][ T6313] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 173.312120][ T6321] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 174.792270][ T2191] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 174.978613][ T2191] usb 2-1: config 0 has no interfaces? [ 174.978647][ T2191] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 174.978671][ T2191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.016872][ T2191] usb 2-1: config 0 descriptor?? [ 177.890216][ T5739] usb 2-1: USB disconnect, device number 6 [ 185.526074][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.563186][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.564886][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.587953][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.589096][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.757536][ T6368] netlink: 136 bytes leftover after parsing attributes in process `syz.1.121'. [ 186.415595][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.473133][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.245593][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.271398][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.712356][ T59] Bluetooth: hci0: command tx timeout [ 188.240729][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 188.502570][ T6435] tracefs: Unknown parameter '³(' [ 189.792308][ T59] Bluetooth: hci0: command tx timeout [ 189.871719][ T3363] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.003468][ T3363] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.249985][ T3363] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.550198][ T3408] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.697123][ T59] Bluetooth: hci0: command tx timeout [ 192.811367][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.935799][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.020010][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.020152][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.104940][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.105051][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.326844][ T6389] lo speed is unknown, defaulting to 1000 [ 194.191862][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.226578][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226679][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.421854][ T6487] random: crng reseeded on system resumption [ 194.752563][ T59] Bluetooth: hci0: command tx timeout [ 194.828904][ T1476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.131294][ T6508] Zero length message leads to an empty skb [ 195.281560][ T6511] Invalid ELF header type: 3 != 1 [ 195.699491][ T1476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.861389][ T6518] tracefs: Unknown parameter '³(' [ 197.476934][ T1476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.936430][ T1476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.129820][ T6541] overlay: ./file0 is not a directory [ 198.144460][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.144642][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.144815][ T6389] bridge_slave_0: entered allmulticast mode [ 198.147329][ T6389] bridge_slave_0: entered promiscuous mode [ 198.183081][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.183195][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.183376][ T6389] bridge_slave_1: entered allmulticast mode [ 198.185731][ T6389] bridge_slave_1: entered promiscuous mode [ 198.191216][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.322649][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.327478][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.433830][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 198.433862][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 198.462933][ T6389] team0: Port device team_slave_0 added [ 198.486750][ T6389] team0: Port device team_slave_1 added [ 198.598465][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.598482][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.598527][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.651130][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.651147][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.651174][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.951577][ T6389] hsr_slave_0: entered promiscuous mode [ 198.959500][ T6389] hsr_slave_1: entered promiscuous mode [ 198.960619][ T6389] debugfs: 'hsr0' already exists in 'hsr' [ 198.960642][ T6389] Cannot create hsr debugfs directory [ 199.106257][ T6560] random: crng reseeded on system resumption [ 199.515786][ T6566] comedi comedi3: mpc624: I/O base address not correctly aligned [ 199.876192][ T6564] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 199.878092][ T6564] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 199.878722][ T6564] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 199.933178][ T6564] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 199.933713][ T6564] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 199.933908][ T6564] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 199.934240][ T6564] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 199.934611][ T6564] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 199.934820][ T6564] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 199.935100][ T6564] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 200.812537][ T1476] bridge_slave_1: left allmulticast mode [ 200.812598][ T1476] bridge_slave_1: left promiscuous mode [ 200.812863][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.872867][ T1476] bridge_slave_0: left allmulticast mode [ 202.872944][ T1476] bridge_slave_0: left promiscuous mode [ 202.940388][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.407296][ T4921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.466095][ T4921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.507305][ T4921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.588175][ T4921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.614918][ T4921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.158852][ T6589] overlay: ./file0 is not a directory [ 205.827819][ T59] Bluetooth: hci1: command tx timeout [ 205.934893][ T1476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.014549][ T1476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.054539][ T1476] bond0 (unregistering): Released all slaves [ 206.255173][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.255473][ T6595] batadv_slave_0: entered promiscuous mode [ 206.898624][ T6610] random: crng reseeded on system resumption [ 208.058052][ T6618] tmpfs: Unknown parameter 'usrquota' [ 208.547328][ T59] Bluetooth: hci1: command tx timeout [ 210.263955][ T6579] lo speed is unknown, defaulting to 1000 [ 211.351533][ T59] Bluetooth: hci1: command tx timeout [ 213.392551][ T59] Bluetooth: hci1: command tx timeout [ 213.655223][ T1476] hsr_slave_0: left promiscuous mode [ 213.693759][ T1476] hsr_slave_1: left promiscuous mode [ 213.694713][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.694738][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.739294][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.739321][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.876028][ T1476] veth1_macvtap: left promiscuous mode [ 213.876096][ T1476] veth0_macvtap: left promiscuous mode [ 213.886603][ T1476] veth1_vlan: left promiscuous mode [ 213.892983][ T1476] veth0_vlan: left promiscuous mode [ 216.555437][ T1476] team0 (unregistering): Port device team_slave_1 removed [ 216.661302][ T1476] team0 (unregistering): Port device team_slave_0 removed [ 217.146297][ T1301] smbdirect: ib_dev[syz2] removed [ 217.931542][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 220.476250][ T2191] lo speed is unknown, defaulting to 1000 [ 220.476282][ T2191] infiniband syz2: ib_query_port failed (-19) [ 220.581519][ T6389] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.611597][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.639621][ T6389] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.672515][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.689518][ T6389] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.739509][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.793624][ T6389] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.926735][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.239665][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239705][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239732][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239759][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239796][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239822][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239849][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239876][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239903][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.239930][ T2191] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 221.364614][ T2191] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 221.790373][ T6695] netlink: 68 bytes leftover after parsing attributes in process `syz.2.181'. [ 223.114536][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.164890][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.198049][ T3363] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.198232][ T3363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.222786][ T3363] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.222997][ T3363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.727545][ T6717] create_pit_timer: 39 callbacks suppressed [ 223.727573][ T6717] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.728112][ T6717] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 223.730667][ T6717] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 223.775993][ T6717] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 223.776085][ T6717] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 223.776132][ T6717] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 223.776279][ T6717] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 223.779578][ T6717] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 223.779609][ T6717] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 223.779637][ T6717] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 223.999118][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 224.025761][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.025841][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.026031][ T6579] bridge_slave_0: entered allmulticast mode [ 224.031881][ T6579] bridge_slave_0: entered promiscuous mode [ 224.281383][ T6725] hub 8-0:1.0: USB hub found [ 224.294835][ T6725] hub 8-0:1.0: 1 port detected [ 225.084882][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.085006][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.085210][ T6579] bridge_slave_1: entered allmulticast mode [ 225.087981][ T6579] bridge_slave_1: entered promiscuous mode [ 225.411647][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.487256][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.829803][ T6579] team0: Port device team_slave_0 added [ 227.843416][ T6579] team0: Port device team_slave_1 added [ 228.426924][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.426942][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.426970][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.489168][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.489186][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.489216][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.996461][ T6758] syz.1.189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 230.413152][ T6579] hsr_slave_0: entered promiscuous mode [ 231.403221][ T6579] hsr_slave_1: entered promiscuous mode [ 232.306561][ T6579] debugfs: 'hsr0' already exists in 'hsr' [ 232.341423][ T6579] Cannot create hsr debugfs directory [ 232.963949][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 233.139729][ T6779] hub 8-0:1.0: USB hub found [ 233.143301][ T6779] hub 8-0:1.0: 1 port detected [ 234.310278][ T6783] binder: 6774:6783 ioctl 81e8943c 200000000580 returned -22 [ 240.027915][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.752506][ T1370] bridge_slave_1: left allmulticast mode [ 240.752540][ T1370] bridge_slave_1: left promiscuous mode [ 240.752785][ T1370] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.961244][ T1370] bridge_slave_0: left allmulticast mode [ 240.961277][ T1370] bridge_slave_0: left promiscuous mode [ 240.961477][ T1370] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.424818][ T6822] 9p: Bad value for 'rfdno' [ 244.105110][ T1370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.200069][ T1370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.231155][ T1370] bond0 (unregistering): Released all slaves [ 246.050767][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 246.398895][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.448284][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.490895][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.519823][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.520604][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.725170][ T1370] hsr_slave_0: left promiscuous mode [ 246.778239][ T1370] hsr_slave_1: left promiscuous mode [ 246.779202][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.816090][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.386184][ T6871] 9p: Bad value for 'wfdno' [ 248.672242][ T59] Bluetooth: hci5: command tx timeout [ 248.811274][ T6881] hub 8-0:1.0: USB hub found [ 248.813833][ T6881] hub 8-0:1.0: 1 port detected [ 249.835787][ T1370] team0 (unregistering): Port device team_slave_1 removed [ 251.101339][ T59] Bluetooth: hci5: command tx timeout [ 251.129159][ T1370] team0 (unregistering): Port device team_slave_0 removed [ 252.965999][ T6903] Mount JFS Failure: -5 [ 253.152947][ T59] Bluetooth: hci5: command tx timeout [ 254.489860][ T31] IPVS: starting estimator thread 0... [ 254.703082][ T6907] IPVS: using max 8 ests per chain, 19200 per kthread [ 255.233887][ T59] Bluetooth: hci5: command tx timeout [ 255.650071][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650140][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.587119][ T2191] hid_parser_main: 7 callbacks suppressed [ 260.587141][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587170][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587197][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587224][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587250][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587276][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587303][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587329][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587356][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.587394][ T2191] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 260.710326][ T2191] hid-generic 0006:0008:0008.0002: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 260.783482][ T6579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.827436][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.867445][ T6989] fido_id[6989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.927022][ T6579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.970500][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.476914][ T6579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.668905][ T7007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.743772][ T7007] exFAT-fs (nbd1): unable to read boot sector [ 261.743810][ T7007] exFAT-fs (nbd1): failed to read boot sector [ 261.743856][ T7007] exFAT-fs (nbd1): failed to recognize exfat type [ 262.508163][ T6579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.828498][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.878168][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.880375][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.881762][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.905774][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.597404][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.597604][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.597772][ T6846] bridge_slave_0: entered allmulticast mode [ 264.600472][ T6846] bridge_slave_0: entered promiscuous mode [ 264.630394][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.630517][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.630710][ T6846] bridge_slave_1: entered allmulticast mode [ 264.643383][ T6846] bridge_slave_1: entered promiscuous mode [ 265.010738][ T4921] Bluetooth: hci0: command tx timeout [ 267.072743][ T4921] Bluetooth: hci0: command tx timeout [ 267.985263][ T7044] random: crng reseeded on system resumption [ 268.309721][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 268.309737][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 268.381949][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.400756][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.516728][ T2191] hid_parser_main: 7 callbacks suppressed [ 268.516751][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516781][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516808][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516834][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516860][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516886][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516911][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516936][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516962][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.516989][ T2191] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 268.633575][ T2191] hid-generic 0006:0008:0008.0003: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 268.667830][ T6846] team0: Port device team_slave_0 added [ 268.734904][ T6846] team0: Port device team_slave_1 added [ 268.750181][ T7053] fido_id[7053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.159374][ T4921] Bluetooth: hci0: command tx timeout [ 271.687685][ T7065] 9pnet_virtio: no channels available for device syz [ 272.389216][ T4921] Bluetooth: hci0: command tx timeout [ 272.942640][ T7059] lo speed is unknown, defaulting to 1000 [ 273.214465][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.214481][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.214507][ T6846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.221236][ T7059] lo speed is unknown, defaulting to 1000 [ 273.388233][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.388251][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.388289][ T6846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.443160][ T7059] lo speed is unknown, defaulting to 1000 [ 273.444319][ T7059] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 273.444344][ T7059] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 273.444385][ T7059] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 273.564600][ T7059] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.774615][ T7059] lo speed is unknown, defaulting to 1000 [ 273.854468][ T7059] lo speed is unknown, defaulting to 1000 [ 273.898166][ T7059] lo speed is unknown, defaulting to 1000 [ 273.911769][ T7059] lo speed is unknown, defaulting to 1000 [ 273.930764][ T6846] hsr_slave_0: entered promiscuous mode [ 273.931670][ T6846] hsr_slave_1: entered promiscuous mode [ 273.934969][ T6846] debugfs: 'hsr0' already exists in 'hsr' [ 273.935029][ T6846] Cannot create hsr debugfs directory [ 273.993610][ T7059] lo speed is unknown, defaulting to 1000 [ 274.112891][ T1370] bridge_slave_1: left allmulticast mode [ 274.112927][ T1370] bridge_slave_1: left promiscuous mode [ 274.113190][ T1370] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.213425][ T1370] bridge_slave_0: left allmulticast mode [ 274.213449][ T1370] bridge_slave_0: left promiscuous mode [ 274.213620][ T1370] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.833417][ T1370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.873321][ T1370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.894491][ T1370] bond0 (unregistering): Released all slaves [ 274.976665][ T7059] lo speed is unknown, defaulting to 1000 [ 275.199917][ T7059] lo speed is unknown, defaulting to 1000 [ 276.183812][ T1370] hsr_slave_0: left promiscuous mode [ 276.222338][ T1370] hsr_slave_1: left promiscuous mode [ 276.225127][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.278575][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.654009][ T1370] team0 (unregistering): Port device team_slave_1 removed [ 277.702901][ T1370] team0 (unregistering): Port device team_slave_0 removed [ 277.917715][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 278.004676][ T7111] syz_tun: entered allmulticast mode [ 279.025501][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.025626][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.025826][ T7013] bridge_slave_0: entered allmulticast mode [ 279.233646][ T7013] bridge_slave_0: entered promiscuous mode [ 279.254618][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.254826][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.255011][ T7013] bridge_slave_1: entered allmulticast mode [ 279.257528][ T7013] bridge_slave_1: entered promiscuous mode [ 279.919711][ T7128] lo speed is unknown, defaulting to 1000 [ 280.476553][ T7129] 9pnet_virtio: no channels available for device syz [ 280.887929][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.902020][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.958659][ T7013] team0: Port device team_slave_0 added [ 280.968317][ T7013] team0: Port device team_slave_1 added [ 281.012045][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.012060][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.045467][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.047849][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.047863][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.047902][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.170176][ T7013] hsr_slave_0: entered promiscuous mode [ 281.171685][ T7013] hsr_slave_1: entered promiscuous mode [ 281.184444][ T7013] debugfs: 'hsr0' already exists in 'hsr' [ 281.184467][ T7013] Cannot create hsr debugfs directory [ 282.340748][ T7146] siw: device registration error -23 [ 284.737991][ T7159] tipc: Started in network mode [ 284.738023][ T7159] tipc: Node identity feca1b48c93d, cluster identity 4711 [ 284.741911][ T7159] tipc: Enabled bearer , priority 0 [ 284.772048][ T7159] syzkaller0: entered promiscuous mode [ 284.773060][ T7159] syzkaller0: entered allmulticast mode [ 285.626419][ T7162] tipc: Resetting bearer [ 285.822525][ T7158] tipc: Resetting bearer [ 285.953125][ T7158] tipc: Disabling bearer [ 286.126613][ T31] tipc: Node number set to 938941256 [ 286.154829][ T7170] syz_tun: entered allmulticast mode [ 286.158694][ T7173] bond0: entered promiscuous mode [ 286.158713][ T7173] bond_slave_0: entered promiscuous mode [ 286.159635][ T7173] bond_slave_1: entered promiscuous mode [ 288.475387][ T7195] lo speed is unknown, defaulting to 1000 [ 289.064009][ T7196] 9pnet_virtio: no channels available for device syz [ 291.154408][ T1370] bridge_slave_1: left allmulticast mode [ 291.154441][ T1370] bridge_slave_1: left promiscuous mode [ 291.154678][ T1370] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.405627][ T1370] bridge_slave_0: left allmulticast mode [ 291.405659][ T1370] bridge_slave_0: left promiscuous mode [ 291.405988][ T1370] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.193143][ T1370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.332922][ T1370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.776188][ T1370] bond0 (unregistering): Released all slaves [ 293.852669][ T7229] bond0: entered promiscuous mode [ 293.852687][ T7229] bond_slave_0: entered promiscuous mode [ 293.852835][ T7229] bond_slave_1: entered promiscuous mode [ 293.857951][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 294.522453][ T1370] hsr_slave_0: left promiscuous mode [ 294.565213][ T1370] hsr_slave_1: left promiscuous mode [ 294.566375][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.605327][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.302238][ T2191] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 295.452280][ T2191] usb 3-1: Using ep0 maxpacket: 32 [ 295.455851][ T2191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.457209][ T2191] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 295.457235][ T2191] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 295.457256][ T2191] usb 3-1: config 14 has no interface number 0 [ 295.457278][ T2191] usb 3-1: config 14 has no interface number 1 [ 295.457375][ T2191] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 295.457393][ T2191] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 295.457424][ T2191] usb 3-1: config 14 interface 57 has no altsetting 0 [ 295.457436][ T2191] usb 3-1: config 14 interface 228 has no altsetting 0 [ 295.459849][ T2191] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 295.459876][ T2191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.459898][ T2191] usb 3-1: Product: syz [ 295.459915][ T2191] usb 3-1: Manufacturer: syz [ 295.459925][ T2191] usb 3-1: SerialNumber: syz [ 295.586356][ T1370] team0 (unregistering): Port device team_slave_1 removed [ 295.650549][ T1370] team0 (unregistering): Port device team_slave_0 removed [ 296.233412][ T7263] exFAT-fs (nbd0): unable to read boot sector [ 296.233472][ T7263] exFAT-fs (nbd0): failed to read boot sector [ 296.233500][ T7263] exFAT-fs (nbd0): failed to recognize exfat type [ 297.546479][ T2191] legousbtower 3-1:14.57: interrupt endpoints not found [ 297.645560][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.646561][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.752815][ T2191] legousbtower 3-1:14.228: interrupt endpoints not found [ 297.782150][ T2191] usb 3-1: USB disconnect, device number 7 [ 299.537368][ T7288] fuse: Unknown parameter '00000000000000000000' [ 300.243074][ T7294] syz_tun: entered allmulticast mode [ 300.299457][ T7294] bond0: entered promiscuous mode [ 300.299487][ T7294] bond_slave_0: entered promiscuous mode [ 300.299701][ T7294] bond_slave_1: entered promiscuous mode [ 304.262374][ T6846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.470267][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.506929][ T6846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.617806][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.629100][ T6846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.688629][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.014872][ T6846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.095379][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.329711][ T7332] trusted_key: encrypted_key: insufficient parameters specified [ 305.387943][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 305.464237][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 306.020273][ T7013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.197867][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.284869][ T7013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.337494][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.361168][ T7013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.397120][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.406972][ T7013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.529995][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.189713][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.325065][ T4921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.342743][ T4921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.352579][ T4921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.354545][ T4921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.355502][ T4921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.476515][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.670380][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.670562][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.735994][ T2223] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.736179][ T2223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.341070][ T7380] exFAT-fs (nbd1): unable to read boot sector [ 308.341110][ T7380] exFAT-fs (nbd1): failed to read boot sector [ 308.341143][ T7380] exFAT-fs (nbd1): failed to recognize exfat type [ 308.881534][ T7381] syz.1.295 (7381) used greatest stack depth: 18120 bytes left [ 309.535511][ T59] Bluetooth: hci1: command tx timeout [ 310.852917][ T7363] lo speed is unknown, defaulting to 1000 [ 311.552492][ T59] Bluetooth: hci1: command tx timeout [ 312.911253][ T7425] 9pnet_virtio: no channels available for device syz [ 313.632583][ T59] Bluetooth: hci1: command tx timeout [ 317.106390][ T59] Bluetooth: hci1: command tx timeout [ 317.108390][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.108436][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.234655][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.554900][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.555219][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.555419][ T7363] bridge_slave_0: entered allmulticast mode [ 317.602440][ T7363] bridge_slave_0: entered promiscuous mode [ 317.610906][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.611048][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.611214][ T7363] bridge_slave_1: entered allmulticast mode [ 317.705236][ T7363] bridge_slave_1: entered promiscuous mode [ 318.006677][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.369627][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.384010][ T7483] fuse: Bad value for 'rootmode' [ 318.692190][ T5739] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 318.730831][ T7363] team0: Port device team_slave_0 added [ 318.871396][ T7363] team0: Port device team_slave_1 added [ 318.873616][ T5739] usb 1-1: Using ep0 maxpacket: 16 [ 318.893935][ T5739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.893956][ T5739] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.894004][ T5739] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.894023][ T5739] usb 1-1: config 1 interface 1 has no altsetting 0 [ 318.924361][ T5739] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 318.924419][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.924475][ T5739] usb 1-1: Product: syz [ 318.924507][ T5739] usb 1-1: Manufacturer: syz [ 318.924546][ T5739] usb 1-1: SerialNumber: syz [ 319.185963][ T37] audit: type=1326 audit(1780025777.238:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7482 comm="syz.0.305" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0db3ce59 code=0x0 [ 319.336929][ T7489] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 319.964942][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.964959][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.964984][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.979310][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.979333][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.979357][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.239270][ T155] bridge_slave_1: left allmulticast mode [ 320.239329][ T155] bridge_slave_1: left promiscuous mode [ 320.239587][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.450385][ T155] bridge_slave_0: left allmulticast mode [ 320.450418][ T155] bridge_slave_0: left promiscuous mode [ 320.450662][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.730345][ T7388] Set syz1 is full, maxelem 65536 reached [ 321.466488][ T7524] fuse: Unknown parameter '00000000000000000000' [ 322.766072][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.804680][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.805867][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.807982][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.808678][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.734939][ T5739] usb 1-1: selecting invalid altsetting 0 [ 323.884722][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.952621][ T5739] usb 1-1: USB disconnect, device number 7 [ 323.993780][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.106880][ T155] bond0 (unregistering): Released all slaves [ 324.178935][ T7506] tipc: Enabled bearer , priority 0 [ 324.179357][ T7515] netlink: 44 bytes leftover after parsing attributes in process `syz.2.304'. [ 324.179835][ T7507] syzkaller0: entered promiscuous mode [ 324.179852][ T7507] syzkaller0: entered allmulticast mode [ 324.231524][ T7517] tipc: Resetting bearer [ 324.517175][ T7502] tipc: Resetting bearer [ 324.684525][ T7502] tipc: Disabling bearer [ 324.912208][ T59] Bluetooth: hci5: command tx timeout [ 324.965016][ T6988] udevd[6988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.065784][ T59] Bluetooth: hci5: command tx timeout [ 327.423151][ T7363] hsr_slave_0: entered promiscuous mode [ 327.424161][ T7363] hsr_slave_1: entered promiscuous mode [ 327.424776][ T7363] debugfs: 'hsr0' already exists in 'hsr' [ 327.424793][ T7363] Cannot create hsr debugfs directory [ 329.154856][ T59] Bluetooth: hci5: command tx timeout [ 329.605240][ T155] hsr_slave_0: left promiscuous mode [ 329.642214][ T155] hsr_slave_1: left promiscuous mode [ 329.643089][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.692916][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.201782][ T7566] tracefs: Unknown parameter '³(' [ 331.244035][ T59] Bluetooth: hci5: command tx timeout [ 331.772411][ T7573] fuse: Unknown parameter '00000000000000000000' [ 335.273154][ T155] team0 (unregistering): Port device team_slave_1 removed [ 335.372780][ T155] team0 (unregistering): Port device team_slave_0 removed [ 335.986236][ T7526] lo speed is unknown, defaulting to 1000 [ 336.251717][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 336.954076][ T7606] siw: device registration error -23 [ 337.912881][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 340.277993][ T7639] fuse: Unknown parameter '00000000000000000000' [ 343.412841][ T7655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.328'. [ 343.680318][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.680501][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.680667][ T7526] bridge_slave_0: entered allmulticast mode [ 343.709877][ T7526] bridge_slave_0: entered promiscuous mode [ 343.920924][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.921103][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.931638][ T7526] bridge_slave_1: entered allmulticast mode [ 343.956102][ T7526] bridge_slave_1: entered promiscuous mode [ 344.186740][ T7668] siw: device registration error -23 [ 345.790546][ T7675] fuse: Unknown parameter '00000000000000000000' [ 346.584149][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.598730][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.764330][ T7687] tracefs: Unknown parameter '³(' [ 349.165676][ T7526] team0: Port device team_slave_0 added [ 349.169046][ T7526] team0: Port device team_slave_1 added [ 349.596794][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.596808][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.596828][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.654977][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.654993][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.659072][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.133848][ T7526] hsr_slave_0: entered promiscuous mode [ 350.136901][ T7526] hsr_slave_1: entered promiscuous mode [ 350.139941][ T7526] debugfs: 'hsr0' already exists in 'hsr' [ 350.139966][ T7526] Cannot create hsr debugfs directory [ 350.193605][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'. [ 350.856080][ T7363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.896252][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.918655][ T7363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.963331][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.042546][ T2191] hid_parser_main: 7 callbacks suppressed [ 351.042564][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042589][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042613][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042635][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042654][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042673][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042693][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042713][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042733][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.042753][ T2191] hid-generic 0006:0008:0008.0004: unknown main item tag 0x0 [ 351.244365][ T2191] hid-generic 0006:0008:0008.0004: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 351.248533][ T7363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 351.311754][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.351239][ T7363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.466467][ T7725] fido_id[7725]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 351.469400][ T7363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.712606][ T13] bridge_slave_1: left allmulticast mode [ 351.712639][ T13] bridge_slave_1: left promiscuous mode [ 351.712891][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.940657][ T13] bridge_slave_0: left allmulticast mode [ 351.940974][ T13] bridge_slave_0: left promiscuous mode [ 351.960835][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.048920][ T7737] siw: device registration error -23 [ 354.066334][ T7744] tracefs: Unknown parameter '³(' [ 356.415486][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.477041][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 356.502759][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.548925][ T13] bond0 (unregistering): Released all slaves [ 357.293130][ T5711] hid_parser_main: 7 callbacks suppressed [ 357.293147][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293167][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293183][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293200][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293217][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293233][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293250][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293266][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293283][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.293299][ T5711] hid-generic 0006:0008:0008.0005: unknown main item tag 0x0 [ 357.437565][ T5711] hid-generic 0006:0008:0008.0005: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 357.438417][ T13] hsr_slave_0: left promiscuous mode [ 357.483448][ T13] hsr_slave_1: left promiscuous mode [ 357.484327][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.533250][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.661903][ T7772] fido_id[7772]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 358.306133][ T7783] tracefs: Unknown parameter '³(' [ 360.716628][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 361.056708][ T13] team0 (unregistering): Port device team_slave_1 removed [ 361.154218][ T13] team0 (unregistering): Port device team_slave_0 removed [ 361.852311][ T7805] binder_alloc: 7804: binder_alloc_buf, no vma [ 362.196064][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 362.333408][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.421244][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.483287][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.483424][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.512023][ T1370] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.512423][ T1370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.530567][ T7809] fuse: Unknown parameter '00000000000000000000' [ 362.970925][ T10] hid_parser_main: 7 callbacks suppressed [ 362.970959][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.970987][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971009][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971030][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971050][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971071][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971092][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971121][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971142][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 362.971163][ T10] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 363.146243][ T10] hid-generic 0006:0008:0008.0006: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 363.419733][ T7823] fido_id[7823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 364.142317][ T7836] tracefs: Unknown parameter '³(' [ 366.007536][ T7841] syzkaller0: entered promiscuous mode [ 366.007562][ T7841] syzkaller0: entered allmulticast mode [ 366.029714][ T7834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.365'. [ 368.091301][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.154856][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.157069][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.197738][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.198821][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.000557][ T7526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.055456][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.056931][ T7526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.168605][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.194473][ T7526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.253682][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.275398][ T7526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.325476][ T7895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 369.366398][ T7526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.492183][ T5711] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 369.696029][ T5711] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 369.696098][ T5711] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.696120][ T5711] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.696176][ T5711] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.696199][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.807648][ T5711] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.352710][ T4921] Bluetooth: hci0: command tx timeout [ 370.454863][ T7916] Bluetooth: MGMT ver 1.23 [ 370.759484][ T5711] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 372.228867][ T5711] usb 2-1: USB disconnect, device number 7 [ 372.263677][ T7864] lo speed is unknown, defaulting to 1000 [ 372.574129][ T7921] tracefs: Unknown parameter '³(' [ 373.638979][ T4921] Bluetooth: hci0: command tx timeout [ 374.305537][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.624297][ T7925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.677967][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.896677][ T4921] Bluetooth: hci0: command tx timeout [ 377.015132][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.015335][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.058513][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.058701][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.299648][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 377.461976][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.464655][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.465156][ T7864] bridge_slave_0: entered allmulticast mode [ 377.474874][ T7864] bridge_slave_0: entered promiscuous mode [ 377.495788][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.495908][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.496098][ T7864] bridge_slave_1: entered allmulticast mode [ 377.510918][ T7864] bridge_slave_1: entered promiscuous mode [ 377.641339][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.771342][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.950424][ T7864] team0: Port device team_slave_0 added [ 377.952556][ T4921] Bluetooth: hci0: command tx timeout [ 377.969557][ T7864] team0: Port device team_slave_1 added [ 378.527786][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.527839][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.007026][ T7964] vivid-003: ================= START STATUS ================= [ 379.012739][ T7964] vivid-003: RDS Tx I/O Mode: Controls [ 379.012925][ T7964] vivid-003: RDS Program ID: 32904 [ 379.013040][ T7964] vivid-003: RDS Program Type: 3 [ 379.013172][ T7964] vivid-003: RDS PS Name: VIVID-TX [ 379.013370][ T7964] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 379.013503][ T7964] vivid-003: RDS Stereo: true [ 379.013615][ T7964] vivid-003: RDS Artificial Head: false [ 379.013684][ T7964] vivid-003: RDS Compressed: false [ 379.013799][ T7964] vivid-003: RDS Dynamic PTY: false [ 379.013884][ T7964] vivid-003: RDS Traffic Announcement: false [ 379.014080][ T7964] vivid-003: RDS Traffic Program: true [ 379.014211][ T7964] vivid-003: RDS Music: true [ 379.014232][ T7964] vivid-003: ================== END STATUS ================== [ 379.932394][ T1425] bridge_slave_1: left allmulticast mode [ 379.932429][ T1425] bridge_slave_1: left promiscuous mode [ 379.932712][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.109420][ T1425] bridge_slave_0: left allmulticast mode [ 380.109455][ T1425] bridge_slave_0: left promiscuous mode [ 380.109700][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.540095][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'. [ 383.271270][ T1425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.373740][ T1425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.467181][ T1425] bond0 (unregistering): Released all slaves [ 383.611256][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.663014][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.670037][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.670448][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.670468][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.688389][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.733619][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.747583][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.774986][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.774997][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.775026][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.106865][ T7864] hsr_slave_0: entered promiscuous mode [ 384.110998][ T7864] hsr_slave_1: entered promiscuous mode [ 384.115530][ T7864] debugfs: 'hsr0' already exists in 'hsr' [ 384.115554][ T7864] Cannot create hsr debugfs directory [ 384.506645][ T8015] ubi16: attaching mtd0 [ 384.650925][ T8015] ubi16: scanning is finished [ 384.650946][ T8015] ubi16: empty MTD device detected [ 384.722312][ T1425] hsr_slave_0: left promiscuous mode [ 384.779712][ T1425] hsr_slave_1: left promiscuous mode [ 384.780779][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.823787][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.507201][ T8015] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 386.507228][ T8015] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 386.507247][ T8015] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 386.507263][ T8015] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 386.507280][ T8015] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 386.507297][ T8015] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 386.507314][ T8015] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3727770497 [ 386.507334][ T8015] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 386.510950][ T8044] ubi16: background thread "ubi_bgt16d" started, PID 8044 [ 386.661742][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'. [ 387.272109][ T5612] Bluetooth: hci1: command tx timeout [ 387.598743][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 387.814526][ T1425] team0 (unregistering): Port device team_slave_1 removed [ 387.896751][ T1425] team0 (unregistering): Port device team_slave_0 removed [ 389.322748][ T5612] Bluetooth: hci1: command tx timeout [ 389.464265][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 390.051656][ T8009] lo speed is unknown, defaulting to 1000 [ 390.161257][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.410'. [ 390.174460][ T8068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.259131][ T5612] Bluetooth: hci1: command tx timeout [ 393.025217][ T8092] warning: `syz.0.412' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 394.368301][ T5612] Bluetooth: hci1: command tx timeout [ 396.421261][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 397.006772][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'. [ 397.706170][ T8135] bond0: left promiscuous mode [ 397.706192][ T8135] bond_slave_0: left promiscuous mode [ 397.706408][ T8135] bond_slave_1: left promiscuous mode [ 397.773781][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.880777][ T8135] batadv_slave_0: left promiscuous mode [ 397.881870][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.463700][ T821] lo speed is unknown, defaulting to 1000 [ 402.911186][ T8160] geneve2: entered promiscuous mode [ 402.911212][ T8160] geneve2: entered allmulticast mode [ 404.456782][ T2223] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 404.566230][ T2223] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 404.846100][ T2223] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 404.913152][ T2223] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 406.799251][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.799422][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.799639][ T8009] bridge_slave_0: entered allmulticast mode [ 406.823399][ T8009] bridge_slave_0: entered promiscuous mode [ 406.850170][ T7864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 406.905936][ T7864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.033617][ T8182] tipc: Enabled bearer , priority 0 [ 407.038472][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.038548][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.038672][ T8009] bridge_slave_1: entered allmulticast mode [ 407.055849][ T8009] bridge_slave_1: entered promiscuous mode [ 407.081038][ T8192] netlink: 44 bytes leftover after parsing attributes in process `syz.2.426'. [ 407.087427][ T7864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.139554][ T7864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.203047][ T8184] syzkaller0: entered promiscuous mode [ 407.203071][ T8184] syzkaller0: entered allmulticast mode [ 407.603772][ T8177] tipc: Resetting bearer [ 407.744591][ T8177] tipc: Disabling bearer [ 407.893817][ T7864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 407.946352][ T7864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.047499][ T7864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.120380][ T7864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.152771][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.175953][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.306600][ T8009] team0: Port device team_slave_0 added [ 408.329415][ T8009] team0: Port device team_slave_1 added [ 408.534178][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 408.538450][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.538463][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.538487][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.605338][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.605355][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.605385][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.702299][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 408.868638][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.868667][ T10] usb 3-1: config 0 has no interfaces? [ 408.890874][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 408.890906][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.890928][ T10] usb 3-1: Product: syz [ 408.890942][ T10] usb 3-1: Manufacturer: syz [ 408.890957][ T10] usb 3-1: SerialNumber: syz [ 408.931577][ T10] usb 3-1: config 0 descriptor?? [ 410.786445][ T8009] hsr_slave_0: entered promiscuous mode [ 410.787923][ T8009] hsr_slave_1: entered promiscuous mode [ 410.789085][ T8009] debugfs: 'hsr0' already exists in 'hsr' [ 410.789194][ T8009] Cannot create hsr debugfs directory [ 411.412089][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.436790][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.466554][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.466758][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.507383][ T10] usb 3-1: USB disconnect, device number 8 [ 411.603858][ T1425] bridge_slave_1: left allmulticast mode [ 411.603889][ T1425] bridge_slave_1: left promiscuous mode [ 411.604104][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.791841][ T1425] bridge_slave_0: left allmulticast mode [ 411.791873][ T1425] bridge_slave_0: left promiscuous mode [ 411.793657][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.412890][ T1425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.493007][ T1425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.535121][ T1425] bond0 (unregistering): Released all slaves [ 418.741240][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 418.809330][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.809415][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.542715][ T1425] hsr_slave_0: left promiscuous mode [ 423.595113][ T1425] hsr_slave_1: left promiscuous mode [ 423.596105][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.637774][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.374709][ T5711] hid_parser_main: 7 callbacks suppressed [ 424.374752][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374780][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374818][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374843][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374867][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374892][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374916][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374941][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374966][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.374991][ T5711] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 424.379119][ T5711] hid-generic 0006:0008:0008.0007: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 424.778222][ T8313] fido_id[8313]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 427.461622][ T1425] team0 (unregistering): Port device team_slave_1 removed [ 428.588597][ T1425] team0 (unregistering): Port device team_slave_0 removed [ 429.045136][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 430.227478][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.507985][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.526782][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.531199][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.531934][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.427993][ T8334] bond0: entered promiscuous mode [ 431.428014][ T8334] bond_slave_0: entered promiscuous mode [ 431.428200][ T8334] bond_slave_1: entered promiscuous mode [ 431.531691][ T8345] 9pnet_virtio: no channels available for device syz [ 431.752811][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 432.592234][ T4921] Bluetooth: hci5: command tx timeout [ 432.957940][ T8337] lo speed is unknown, defaulting to 1000 [ 433.310344][ T5835] hid_parser_main: 7 callbacks suppressed [ 433.313316][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.313448][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.313513][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.313577][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.313635][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.313705][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.314805][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.315075][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.315144][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.315226][ T5835] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 433.397713][ T5835] hid-generic 0006:0008:0008.0008: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 433.555951][ T8375] fido_id[8375]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 434.343261][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 434.463083][ T8009] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 434.573903][ T8009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.632479][ T8009] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.672154][ T4921] Bluetooth: hci5: command tx timeout [ 434.774970][ T8009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.857991][ T8009] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 435.278775][ T8009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.667489][ T8402] : entered promiscuous mode [ 436.879523][ T4921] Bluetooth: hci5: command tx timeout [ 437.703858][ T8009] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.767749][ T8009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.917409][ T4921] Bluetooth: hci5: command tx timeout [ 440.014091][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.036373][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.793083][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 442.185317][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.185402][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.185548][ T8337] bridge_slave_0: entered allmulticast mode [ 442.187712][ T8337] bridge_slave_0: entered promiscuous mode [ 442.305836][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.305981][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.306204][ T8337] bridge_slave_1: entered allmulticast mode [ 442.309740][ T8337] bridge_slave_1: entered promiscuous mode [ 442.402528][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.431903][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.513493][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.517754][ T8337] team0: Port device team_slave_0 added [ 442.545776][ T8337] team0: Port device team_slave_1 added [ 442.601681][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.601698][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.601722][ T8337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.669562][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.669595][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.669624][ T8337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.538956][ T8337] hsr_slave_0: entered promiscuous mode [ 443.539829][ T8337] hsr_slave_1: entered promiscuous mode [ 443.540422][ T8337] debugfs: 'hsr0' already exists in 'hsr' [ 443.540438][ T8337] Cannot create hsr debugfs directory [ 444.906738][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.940432][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.966886][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.970064][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.989016][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.342973][ T5739] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 445.492210][ T5739] usb 2-1: Using ep0 maxpacket: 32 [ 445.494486][ T5739] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 445.498534][ T5739] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 445.498560][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 445.498579][ T5739] usb 2-1: Product: syz [ 445.498593][ T5739] usb 2-1: Manufacturer: syz [ 445.498606][ T5739] usb 2-1: SerialNumber: syz [ 445.555077][ T5739] usb 2-1: config 0 descriptor?? [ 445.556113][ T8458] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.044088][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 446.219597][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.219623][ T10] usb 3-1: config 0 has no interface number 0 [ 446.219681][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.219708][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.219730][ T10] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.219770][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 446.219793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.346035][ T10] usb 3-1: config 0 descriptor?? [ 446.907379][ T10] usbhid 3-1:0.1: can't add hid device: -71 [ 446.970483][ T10] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 447.079624][ T4921] Bluetooth: hci0: command tx timeout [ 447.159416][ T10] usb 3-1: USB disconnect, device number 9 [ 447.716291][ T5711] usb 2-1: USB disconnect, device number 8 [ 447.754766][ T1425] bridge_slave_1: left allmulticast mode [ 447.754809][ T1425] bridge_slave_1: left promiscuous mode [ 447.755980][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.339993][ T1425] bridge_slave_0: left allmulticast mode [ 448.340027][ T1425] bridge_slave_0: left promiscuous mode [ 448.340273][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.251984][ T4921] Bluetooth: hci0: command tx timeout [ 452.272442][ T4921] Bluetooth: hci0: command tx timeout [ 452.962790][ T1425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.052943][ T1425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.094369][ T1425] bond0 (unregistering): Released all slaves [ 453.181909][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 453.846632][ T1425] hsr_slave_0: left promiscuous mode [ 453.893186][ T1425] hsr_slave_1: left promiscuous mode [ 453.894065][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.945692][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.362549][ T4921] Bluetooth: hci0: command tx timeout [ 457.282234][ T5739] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 457.444275][ T5739] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.444302][ T5739] usb 3-1: config 0 has no interface number 0 [ 457.444343][ T5739] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.444365][ T5739] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.444380][ T5739] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.444407][ T5739] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 457.444422][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.303597][ T5739] usb 3-1: config 0 descriptor?? [ 458.860618][ T5739] usbhid 3-1:0.1: can't add hid device: -71 [ 458.860742][ T5739] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 458.880491][ T5739] usb 3-1: USB disconnect, device number 10 [ 459.204678][ T1425] team0 (unregistering): Port device team_slave_1 removed [ 459.304639][ T1425] team0 (unregistering): Port device team_slave_0 removed [ 459.721022][ T8455] lo speed is unknown, defaulting to 1000 [ 461.702160][ T5711] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 461.855494][ T8567] exFAT-fs (nbd0): unable to read boot sector [ 461.855510][ T8567] exFAT-fs (nbd0): failed to read boot sector [ 461.855519][ T8567] exFAT-fs (nbd0): failed to recognize exfat type [ 461.883535][ T5711] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.883569][ T5711] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.883607][ T5711] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.883629][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.903025][ T8564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 461.945941][ T5711] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.407010][ T8575] Bluetooth: MGMT ver 1.23 [ 464.427686][ T8564] syz.1.485 (8564) used greatest stack depth: 17184 bytes left [ 464.906653][ T5711] usb 2-1: USB disconnect, device number 9 [ 465.119171][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.119295][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.119528][ T8455] bridge_slave_0: entered allmulticast mode [ 465.149070][ T8455] bridge_slave_0: entered promiscuous mode [ 465.171193][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.171297][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.171472][ T8455] bridge_slave_1: entered allmulticast mode [ 465.214332][ T8455] bridge_slave_1: entered promiscuous mode [ 466.440326][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.456355][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.662911][ T8455] team0: Port device team_slave_0 added [ 466.676702][ T8455] team0: Port device team_slave_1 added [ 466.828218][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.828234][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.828258][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.831801][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.831813][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.831838][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.060490][ T8455] hsr_slave_0: entered promiscuous mode [ 467.068526][ T8455] hsr_slave_1: entered promiscuous mode [ 467.072397][ T8455] debugfs: 'hsr0' already exists in 'hsr' [ 467.072422][ T8455] Cannot create hsr debugfs directory [ 468.520268][ T8337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 469.352692][ T8337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.405756][ T8337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.459626][ T8337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.493135][ T8337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.525280][ T8337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.643650][ T8337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.710020][ T8337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.806566][ T5711] hid_parser_main: 7 callbacks suppressed [ 476.806606][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806633][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806655][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806675][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806695][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806716][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806736][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806756][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806776][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.806807][ T5711] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 476.881026][ T5711] hid-generic 0006:0008:0008.0009: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 479.235774][ T8681] fido_id[8681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 479.633345][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.150107][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.181449][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.182758][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.232612][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.233288][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.655973][ T8696] netlink: 'syz.0.505': attribute type 16 has an invalid length. [ 480.655995][ T8696] netlink: 'syz.0.505': attribute type 17 has an invalid length. [ 483.692335][ T1425] bridge_slave_1: left allmulticast mode [ 483.692369][ T1425] bridge_slave_1: left promiscuous mode [ 483.692606][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.853268][ T1425] bridge_slave_0: left allmulticast mode [ 483.853294][ T1425] bridge_slave_0: left promiscuous mode [ 483.853476][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.936554][ T5835] hid_parser_main: 7 callbacks suppressed [ 483.936575][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936605][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936630][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936655][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936680][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936703][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936728][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936752][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936775][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.936799][ T5835] hid-generic 0006:0008:0008.000A: unknown main item tag 0x0 [ 483.938942][ T5835] hid-generic 0006:0008:0008.000A: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 484.444248][ T8733] fido_id[8733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 488.862854][ T1425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.237536][ T1425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.474730][ T8759] ceph: No mds server is up or the cluster is laggy [ 490.637731][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 490.664279][ T1425] bond0 (unregistering): Released all slaves [ 490.687305][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 490.876328][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 491.226039][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.261805][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.271461][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.285253][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.289636][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.403486][ T8777] binder: 8774:8777 ioctl c01c5868 2000000001c0 returned -22 [ 492.405046][ T8794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.431486][ T8794] exFAT-fs (nbd2): unable to read boot sector [ 492.431522][ T8794] exFAT-fs (nbd2): failed to read boot sector [ 492.431551][ T8794] exFAT-fs (nbd2): failed to recognize exfat type [ 493.941424][ T4921] Bluetooth: hci1: command tx timeout [ 495.079020][ T1425] hsr_slave_0: left promiscuous mode [ 495.139388][ T1425] hsr_slave_1: left promiscuous mode [ 495.140151][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.185927][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.518560][ T8817] program syz.1.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.884368][ T1425] team0 (unregistering): Port device team_slave_1 removed [ 495.943399][ T1425] team0 (unregistering): Port device team_slave_0 removed [ 495.956012][ T4921] Bluetooth: hci1: command tx timeout [ 496.545812][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 498.032097][ T4921] Bluetooth: hci1: command tx timeout [ 499.704342][ T8771] lo speed is unknown, defaulting to 1000 [ 500.213070][ T8853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.236911][ T8853] exFAT-fs (nbd1): unable to read boot sector [ 500.236949][ T8853] exFAT-fs (nbd1): failed to read boot sector [ 500.236992][ T8853] exFAT-fs (nbd1): failed to recognize exfat type [ 500.255822][ T4921] Bluetooth: hci1: command tx timeout [ 501.949361][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.949432][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.632168][ T5732] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 502.784595][ T5732] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.784633][ T5732] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.784686][ T5732] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.784709][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.831395][ T8868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 502.849216][ T5732] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.204008][ T5732] usb 2-1: USB disconnect, device number 10 [ 506.710293][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.710377][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.710528][ T8771] bridge_slave_0: entered allmulticast mode [ 507.180599][ T8771] bridge_slave_0: entered promiscuous mode [ 508.149173][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 508.196221][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 508.202134][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 508.217407][ T8908] ubi: mtd0 is already attached to ubi16 [ 508.228194][ T8908] netlink: 'syz.0.545': attribute type 21 has an invalid length. [ 508.228213][ T8908] netlink: 128 bytes leftover after parsing attributes in process `syz.0.545'. [ 508.296977][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 508.298531][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.020347][ T8925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.039298][ T8925] exFAT-fs (nbd1): unable to read boot sector [ 509.039336][ T8925] exFAT-fs (nbd1): failed to read boot sector [ 509.039368][ T8925] exFAT-fs (nbd1): failed to recognize exfat type [ 509.633815][ T8918] exFAT-fs (nbd2): unable to read boot sector [ 509.633832][ T8918] exFAT-fs (nbd2): failed to read boot sector [ 509.633842][ T8918] exFAT-fs (nbd2): failed to recognize exfat type [ 510.593737][ T4921] Bluetooth: hci5: command tx timeout [ 511.162989][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.163194][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.163411][ T8771] bridge_slave_1: entered allmulticast mode [ 511.167678][ T8771] bridge_slave_1: entered promiscuous mode [ 511.168925][ T8908] netlink: 3 bytes leftover after parsing attributes in process `syz.0.545'. [ 511.413017][ T8941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 511.637440][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.644187][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.062128][ T5732] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 512.491361][ T8964] vivid-000: ================= START STATUS ================= [ 512.491690][ T8964] vivid-000: RDS Tx I/O Mode: Controls [ 512.491833][ T8964] vivid-000: RDS Program ID: 32904 [ 512.492039][ T8964] vivid-000: RDS Program Type: 3 [ 512.492144][ T8964] vivid-000: RDS PS Name: VIVID-TX [ 512.492215][ T8964] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 512.492328][ T8964] vivid-000: RDS Stereo: true [ 512.492431][ T8964] vivid-000: RDS Artificial Head: false [ 512.492494][ T8964] vivid-000: RDS Compressed: false [ 512.492593][ T8964] vivid-000: RDS Dynamic PTY: false [ 512.492767][ T8964] vivid-000: RDS Traffic Announcement: false [ 512.493019][ T8964] vivid-000: RDS Traffic Program: true [ 512.493138][ T8964] vivid-000: RDS Music: true [ 512.493312][ T8964] vivid-000: ================== END STATUS ================== [ 512.678022][ T4921] Bluetooth: hci5: command tx timeout [ 513.028852][ T8771] team0: Port device team_slave_0 added [ 513.059082][ T8771] team0: Port device team_slave_1 added [ 513.134561][ T5732] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.134587][ T5732] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.134615][ T5732] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.134632][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.139816][ T8957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.210474][ T5732] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.752173][ T4921] Bluetooth: hci5: command tx timeout [ 515.824339][ T8977] exFAT-fs (nbd2): unable to read boot sector [ 515.824354][ T8977] exFAT-fs (nbd2): failed to read boot sector [ 515.824363][ T8977] exFAT-fs (nbd2): failed to recognize exfat type [ 515.966550][ T5732] usb 2-1: USB disconnect, device number 11 [ 516.052331][ T10] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 516.127705][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.127720][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.127746][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.182864][ T10] usb 1-1: device descriptor read/64, error -71 [ 516.183226][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.183240][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.183269][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.338406][ T8904] lo speed is unknown, defaulting to 1000 [ 516.463332][ T10] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 516.602144][ T10] usb 1-1: device descriptor read/64, error -71 [ 516.722633][ T10] usb usb1-port1: attempt power cycle [ 516.833787][ T4921] Bluetooth: hci5: command tx timeout [ 517.011519][ T8771] hsr_slave_0: entered promiscuous mode [ 517.015643][ T8771] hsr_slave_1: entered promiscuous mode [ 517.017655][ T8771] debugfs: 'hsr0' already exists in 'hsr' [ 517.017716][ T8771] Cannot create hsr debugfs directory [ 517.155511][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 517.179957][ T8983] [ 517.179967][ T8983] ====================================================== [ 517.179976][ T8983] WARNING: possible circular locking dependency detected [ 517.179995][ T8983] syzkaller #0 Not tainted [ 517.180005][ T8983] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.180013][ T8983] syz.1.558/8983 is trying to acquire lock: [ 517.180024][ T8983] ffff888028b69c30 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x104/0xda0 [ 517.180092][ T8983] [ 517.180092][ T8983] but task is already holding lock: [ 517.180099][ T8983] ffff888028b6a1d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 517.180152][ T8983] [ 517.180152][ T8983] which lock already depends on the new lock. [ 517.180152][ T8983] [ 517.180160][ T8983] [ 517.180160][ T8983] the existing dependency chain (in reverse order) is: [ 517.180167][ T8983] [ 517.180167][ T8983] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 517.180200][ T8983] lock_sock_nested+0x41/0x130 [ 517.180221][ T8983] smc_listen_out+0x109/0x3e0 [ 517.180248][ T8983] smc_listen_work+0x813/0x13f0 [ 517.180274][ T8983] process_scheduled_works+0xb5d/0x1860 [ 517.180292][ T8983] worker_thread+0xa53/0xfc0 [ 517.180311][ T8983] kthread+0x388/0x470 [ 517.180335][ T8983] ret_from_fork+0x514/0xb70 [ 517.180355][ T8983] ret_from_fork_asm+0x1a/0x30 [ 517.180379][ T8983] [ 517.180379][ T8983] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 517.180408][ T8983] __lock_acquire+0x15a5/0x2cf0 [ 517.180432][ T8983] lock_acquire+0x106/0x350 [ 517.180455][ T8983] __flush_work+0x6df/0xda0 [ 517.180476][ T8983] __cancel_work_sync+0xbe/0x110 [ 517.180502][ T8983] smc_clcsock_release+0x60/0xf0 [ 517.180529][ T8983] __smc_release+0x6a0/0x810 [ 517.180551][ T8983] smc_close_non_accepted+0xd5/0x1f0 [ 517.180574][ T8983] smc_close_active+0xb9b/0xf40 [ 517.180590][ T8983] __smc_release+0xa0/0x810 [ 517.180611][ T8983] smc_release+0x2eb/0x5a0 [ 517.180632][ T8983] sock_close+0xc3/0x240 [ 517.180649][ T8983] __fput+0x461/0xa70 [ 517.180664][ T8983] task_work_run+0x1d9/0x270 [ 517.180689][ T8983] get_signal+0x11eb/0x1330 [ 517.180706][ T8983] arch_do_signal_or_restart+0xbc/0x840 [ 517.180736][ T8983] exit_to_user_mode_loop+0xa9/0x680 [ 517.180758][ T8983] do_syscall_64+0x353/0x580 [ 517.180785][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.180803][ T8983] [ 517.180803][ T8983] other info that might help us debug this: [ 517.180803][ T8983] [ 517.180817][ T8983] Possible unsafe locking scenario: [ 517.180817][ T8983] [ 517.180823][ T8983] CPU0 CPU1 [ 517.180829][ T8983] ---- ---- [ 517.180835][ T8983] lock(sk_lock-AF_SMC/1); [ 517.180855][ T8983] lock((work_completion)(&new_smc->smc_listen_work)); [ 517.180871][ T8983] lock(sk_lock-AF_SMC/1); [ 517.180891][ T8983] lock((work_completion)(&new_smc->smc_listen_work)); [ 517.180906][ T8983] [ 517.180906][ T8983] *** DEADLOCK *** [ 517.180906][ T8983] [ 517.180912][ T8983] 3 locks held by syz.1.558/8983: [ 517.180924][ T8983] #0: ffff88804098eeb8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 517.180980][ T8983] #1: ffff888028b6a1d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 517.181035][ T8983] #2: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x104/0xda0 [ 517.181086][ T8983] [ 517.181086][ T8983] stack backtrace: [ 517.181109][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.1.558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 517.181132][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.181154][ T8983] Call Trace: [ 517.181162][ T8983] [ 517.181170][ T8983] dump_stack_lvl+0xe8/0x150 [ 517.181198][ T8983] print_circular_bug+0x2e1/0x300 [ 517.181232][ T8983] check_noncircular+0x12e/0x150 [ 517.181267][ T8983] __lock_acquire+0x15a5/0x2cf0 [ 517.181299][ T8983] ? __pfx___schedule+0x10/0x10 [ 517.181335][ T8983] ? irqentry_exit+0x218/0x8b0 [ 517.181366][ T8983] ? irqentry_exit+0x218/0x8b0 [ 517.181393][ T8983] ? trace_irq_disable+0x3b/0x140 [ 517.181436][ T8983] ? __flush_work+0x104/0xda0 [ 517.181459][ T8983] lock_acquire+0x106/0x350 [ 517.181484][ T8983] ? __flush_work+0x104/0xda0 [ 517.181524][ T8983] ? preempt_schedule_thunk+0x16/0x30 [ 517.181553][ T8983] ? __flush_work+0x104/0xda0 [ 517.181577][ T8983] __flush_work+0x6df/0xda0 [ 517.181599][ T8983] ? __flush_work+0x104/0xda0 [ 517.181621][ T8983] ? __flush_work+0x104/0xda0 [ 517.181647][ T8983] ? __pfx___flush_work+0x10/0x10 [ 517.181672][ T8983] ? __pfx_wq_barrier_func+0x10/0x10 [ 517.181704][ T8983] ? __cancel_work_sync+0x5c/0x110 [ 517.181729][ T8983] __cancel_work_sync+0xbe/0x110 [ 517.181754][ T8983] smc_clcsock_release+0x60/0xf0 [ 517.181784][ T8983] __smc_release+0x6a0/0x810 [ 517.181808][ T8983] ? lockdep_hardirqs_on+0x7a/0x110 [ 517.181846][ T8983] smc_close_non_accepted+0xd5/0x1f0 [ 517.181874][ T8983] smc_close_active+0xb9b/0xf40 [ 517.181894][ T8983] ? smc_close_active+0x420/0xf40 [ 517.181911][ T8983] ? __pfx_sock_def_readable+0x10/0x10 [ 517.181934][ T8983] __smc_release+0xa0/0x810 [ 517.181957][ T8983] ? lockdep_hardirqs_on+0x7a/0x110 [ 517.181988][ T8983] smc_release+0x2eb/0x5a0 [ 517.182014][ T8983] sock_close+0xc3/0x240 [ 517.182034][ T8983] ? __pfx_sock_close+0x10/0x10 [ 517.182053][ T8983] __fput+0x461/0xa70 [ 517.182076][ T8983] task_work_run+0x1d9/0x270 [ 517.182104][ T8983] ? __pfx_task_work_run+0x10/0x10 [ 517.182137][ T8983] get_signal+0x11eb/0x1330 [ 517.182158][ T8983] ? __pfx_task_work_add+0x10/0x10 [ 517.182185][ T8983] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 517.182213][ T8983] arch_do_signal_or_restart+0xbc/0x840 [ 517.182246][ T8983] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 517.182287][ T8983] exit_to_user_mode_loop+0xa9/0x680 [ 517.182311][ T8983] ? rcu_is_watching+0x15/0xb0 [ 517.182341][ T8983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.182362][ T8983] do_syscall_64+0x353/0x580 [ 517.182390][ T8983] ? trace_irq_disable+0x3b/0x140 [ 517.182414][ T8983] ? clear_bhb_loop+0x40/0x90 [ 517.182436][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.182463][ T8983] RIP: 0033:0x7f065ab2ce59 [ 517.182486][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.182503][ T8983] RSP: 002b:00007f0658d65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 517.182525][ T8983] RAX: fffffffffffffe00 RBX: 00007f065ada6090 RCX: 00007f065ab2ce59 [ 517.182540][ T8983] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 517.182553][ T8983] RBP: 00007f065abc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 517.182567][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.182579][ T8983] R13: 00007f065ada6128 R14: 00007f065ada6090 R15: 00007fffd762eb78 [ 517.182602][ T8983] [ 517.184090][ T10] usb 1-1: device descriptor read/8, error -71 [ 517.423609][ T10] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 517.453697][ T10] usb 1-1: device descriptor read/8, error -71 [ 517.563350][ T10] usb usb1-port1: unable to enumerate USB device [ 518.329667][ T1425] bridge_slave_1: left allmulticast mode [ 518.329693][ T1425] bridge_slave_1: left promiscuous mode [ 518.329860][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.483264][ T1425] bridge_slave_0: left allmulticast mode [ 518.483292][ T1425] bridge_slave_0: left promiscuous mode [ 518.483453][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.352622][ T1425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.433027][ T1425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.473364][ T1425] bond0 (unregistering): Released all slaves [ 519.643462][ T8978] syz_tun (unregistering): left allmulticast mode [ 520.093492][ T6406] syz_tun (unregistering): left allmulticast mode [ 520.383039][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 520.512812][ T8976] syz_tun (unregistering): left allmulticast mode [ 520.732118][ T1425] hsr_slave_0: left promiscuous mode [ 520.772113][ T1425] hsr_slave_1: left promiscuous mode [ 520.773899][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.812631][ T1425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.162553][ T1425] team0 (unregistering): Port device team_slave_1 removed [ 521.202776][ T1425] team0 (unregistering): Port device team_slave_0 removed [ 521.605180][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 521.897391][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 522.225273][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 522.493171][ T1425] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.723392][ T1425] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.933279][ T1425] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.183974][ T1425] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.603769][ T1425] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.603809][ T1425] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 523.883530][ T1425] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.883567][ T1425] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 523.905482][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 524.143941][ T1425] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.143982][ T1425] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.215269][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 524.443566][ T1425] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.443643][ T1425] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.546791][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 524.903071][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 525.333362][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 525.644333][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 526.132516][ T1425] bridge_slave_1: left allmulticast mode [ 526.132547][ T1425] bridge_slave_1: left promiscuous mode [ 526.132660][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.232542][ T1425] bridge_slave_0: left allmulticast mode [ 526.232562][ T1425] bridge_slave_0: left promiscuous mode [ 526.232693][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.612213][ T1425] bridge_slave_1: left allmulticast mode [ 526.612232][ T1425] bridge_slave_1: left promiscuous mode [ 526.612340][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.712598][ T1425] bridge_slave_0: left allmulticast mode [ 526.712615][ T1425] bridge_slave_0: left promiscuous mode [ 526.712713][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.912547][ T1425] bridge_slave_1: left allmulticast mode [ 526.912566][ T1425] bridge_slave_1: left promiscuous mode [ 526.912699][ T1425] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.992801][ T1425] bridge_slave_0: left allmulticast mode [ 526.992819][ T1425] bridge_slave_0: left promiscuous mode [ 526.992920][ T1425] bridge0: port 1(bridge_slave_0) entered disabled state