last executing test programs: 8m26.820896806s ago: executing program 4 (id=409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x4040000) 8m25.71305183s ago: executing program 4 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) 8m23.336865872s ago: executing program 4 (id=416): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8m20.985150271s ago: executing program 4 (id=418): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f", 0x78}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m19.908726514s ago: executing program 4 (id=424): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 8m17.518489049s ago: executing program 4 (id=425): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, 0x0, 0x4001) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8m0.261701219s ago: executing program 32 (id=425): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, 0x0, 0x4001) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7m50.833555601s ago: executing program 0 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 7m40.840061678s ago: executing program 0 (id=475): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m39.057273888s ago: executing program 0 (id=478): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 7m37.927756965s ago: executing program 0 (id=482): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m37.162605495s ago: executing program 0 (id=483): connect$inet6(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000063"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m36.15284758s ago: executing program 0 (id=487): r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) listen(r0, 0x8) 7m19.669302074s ago: executing program 33 (id=487): r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) listen(r0, 0x8) 4m26.084682316s ago: executing program 3 (id=799): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x23, 0x5, 0x0) socket(0x28, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x7]}, 0x8, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x10, 0x80000000, 0x9, {{0x2c, 0x4, 0x2, 0x1, 0xb0, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x2b, 0xc9, [@multicast2, @loopback, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @remote, @empty, @remote]}, @noop, @generic={0x89, 0xf, "cb88c0f1a896c7cf8d319f7939"}, @cipso={0x86, 0x30, 0x2, [{0x0, 0x3, "e8"}, {0x5, 0x7, "344b2eebd3"}, {0x6, 0xb, "a94f0ab9611385105b"}, {0x2, 0xe, "26f0e72eb32ff82e971a9649"}, {0x1, 0x7, "2235999648"}]}, @ssrr={0x89, 0x1f, 0x72, [@local, @multicast2, @broadcast, @local, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}]}, @ssrr={0x89, 0xf, 0x48, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}}}) listen(r0, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@local, 0x2d, r4}) 4m23.441337922s ago: executing program 3 (id=805): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000640)=ANY=[@ANYRESOCT]) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4m17.301672523s ago: executing program 3 (id=813): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)=@delchain={0x184, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x148, 0x2, [@TCA_BPF_ACT={0xa4, 0x1, [@m_gact={0xa0, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0x59, 0x6, "3532565adeea82a6d355b04e82cf0d976e553c4393a1a4d9d745a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401bc318de1f0600de4e78cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_ACT={0x4}, @TCA_BPF_ACT={0x9c, 0x1, [@m_tunnel_key={0x48, 0x5, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x50, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x23, 0x6, "aade7497356204e7fd8886f3103c77da0f7d5f75e9ad45583149bc54360639"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m16.345060056s ago: executing program 3 (id=817): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) write$sndseq(r1, 0x0, 0x0) 4m12.947474993s ago: executing program 3 (id=823): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000033400)=""/102384, 0x18ff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000040000000000000000000008500000008000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 4m10.631867286s ago: executing program 3 (id=825): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000240)) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000020c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000002140)={0x8, 0x120, 0xfa00, {0x2, {0x81, 0x5, "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", 0x0, 0x4, 0x81, 0xfd, 0x7, 0x0, 0x3, 0x1}, r5}}, 0x128) 3m55.09280717s ago: executing program 34 (id=825): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000240)) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000020c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000002140)={0x8, 0x120, 0xfa00, {0x2, {0x81, 0x5, "3cc840c795ea221d5d74d653245ea9cbf29d6319f38f3fb2e7081abc7915350f3571dfb6df74f344793965ebb566620b66ff0b01f48ef22c9afbcca5dbf11d601b799540022e4c0f4ac77c94c2a00a2e925ab00155a49be906d2b6b98a96bc8bd37e364d89e2853c79d853a4cc69e2c268d1b8a7db6e55ddc7d016439c705976d34400ad1ebbf70b893f939c28eadfee44d67209b5094ac131c458adde09bc39ffb67840d1bb3d29688a7bf9220fd4c510d8940de4b7ea55100ea8bd471d639fd157187d0c859192245123d6f0e80199c64ab2e3bd450bb0bb64208b3e93d95d8d65d806d408ce177ae5d652642be21414b968f6419f36365cc6daf557513bd2", 0x0, 0x4, 0x81, 0xfd, 0x7, 0x0, 0x3, 0x1}, r5}}, 0x128) 6.34975973s ago: executing program 1 (id=1283): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x2}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x8d, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x6b, 0x0, @opaque="963d6b5d86b3a31da94116bfd097ee768a1c8e3b0c5a21e68678557dd84d0c984fb1d89a824772594bbc5fbade4532c45a87c321f12cf369d470f531fd06725f6e35c798ffd1ddf12f47eb7507cae17d74edb0eaf5e2f0e96c2ba012447e66765792c9"}}}}}, 0x0) 6.049783788s ago: executing program 1 (id=1284): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) 5.650661152s ago: executing program 1 (id=1285): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/88, 0x58) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 5.076505106s ago: executing program 1 (id=1286): setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$nci(r0, 0x0, 0x0) 3.019782387s ago: executing program 2 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32, @ANYBLOB="05002d0001000000080006", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 2.745286172s ago: executing program 2 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) io_uring_setup(0xd94, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) 1.501791196s ago: executing program 1 (id=1290): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) 1.429037749s ago: executing program 2 (id=1291): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x2}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x8d, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x6b, 0x0, @opaque="963d6b5d86b3a31da94116bfd097ee768a1c8e3b0c5a21e68678557dd84d0c984fb1d89a824772594bbc5fbade4532c45a87c321f12cf369d470f531fd06725f6e35c798ffd1ddf12f47eb7507cae17d74edb0eaf5e2f0e96c2ba012447e66765792c9"}}}}}, 0x0) 1.25799939s ago: executing program 2 (id=1292): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r0], 0x1}) 1.178771749s ago: executing program 2 (id=1293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x1, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.107898242s ago: executing program 1 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd28, 0x25dfdc01, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x3, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x4, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500000009000000840000004401", @ANYBLOB], 0x48) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYRESHEX=r6]) mkdirat(r7, &(0x7f0000000300)='./file0\x00', 0xd0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x30, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex=r11, r8, 0x31, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r13, r9}, 0x20) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100b}) 0s ago: executing program 2 (id=1295): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0xb6, 0x0, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 16] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.936565][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.938075][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.939852][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.644875][ T2170] bridge_slave_1: left allmulticast mode [ 359.645066][ T2170] bridge_slave_1: left promiscuous mode [ 360.000854][ T2170] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.076625][ T7626] overlayfs: invalid origin (0000) [ 360.469550][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.506'. [ 360.490179][ T2170] bridge_slave_0: left allmulticast mode [ 360.490207][ T2170] bridge_slave_0: left promiscuous mode [ 360.490397][ T2170] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.040312][ T5616] Bluetooth: hci0: command tx timeout [ 362.820613][ T2170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.889318][ T2170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.931599][ T2170] bond0 (unregistering): Released all slaves [ 363.118630][ T5616] Bluetooth: hci0: command tx timeout [ 363.122422][ T7648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'. [ 363.122884][ T7648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'. [ 363.123061][ T7648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'. [ 365.668552][ T5616] Bluetooth: hci0: command tx timeout [ 365.773574][ T7663] netlink: 72 bytes leftover after parsing attributes in process `syz.1.515'. [ 366.279250][ T7670] loop2: detected capacity change from 0 to 7 [ 366.508596][ T5583] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 366.922845][ T5583] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 366.922895][ T5583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.204927][ T7670] Dev loop2: unable to read RDB block 7 [ 367.205133][ T7670] loop2: unable to read partition table [ 367.291233][ T7670] loop2: partition table beyond EOD, truncated [ 367.291285][ T7670] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 367.371467][ T5583] usb 2-1: config 0 descriptor?? [ 367.640886][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'. [ 367.678567][ T5616] Bluetooth: hci0: command tx timeout [ 367.680111][ T7685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.520'. [ 367.681824][ T7685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.520'. [ 367.682051][ T7685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.520'. [ 367.807817][ T5583] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 367.808263][ T5583] [drm:udl_init] *ERROR* Selecting channel failed [ 367.939568][ T5583] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 367.939597][ T5583] [drm] Initialized udl on minor 2 [ 367.944856][ T5583] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 367.974130][ T5583] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 368.022204][ T5718] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 368.022473][ T5718] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 368.024027][ T5583] usb 2-1: USB disconnect, device number 5 [ 372.711596][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 373.213890][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 373.335040][ T7729] hub 8-0:1.0: USB hub found [ 373.340222][ T7729] hub 8-0:1.0: 1 port detected [ 374.231664][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.050721][ T7742] GUP no longer grows the stack in syz.2.530 (7742): 200000006000-200000009000 (200000004000) [ 376.050825][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.2.530 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.050852][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.050874][ T7742] Call Trace: [ 376.050883][ T7742] [ 376.050893][ T7742] dump_stack_lvl+0xe8/0x150 [ 376.050970][ T7742] fixup_user_fault+0x637/0x6f0 [ 376.051080][ T7742] fault_in_user_writeable+0x71/0xd0 [ 376.051165][ T7742] futex_lock_pi+0x816/0xb10 [ 376.051226][ T7742] ? __pfx_futex_lock_pi+0x10/0x10 [ 376.051284][ T7742] ? __pfx_futex_wake_mark+0x10/0x10 [ 376.051325][ T7742] ? do_futex+0x273/0x420 [ 376.051366][ T7742] do_futex+0x292/0x420 [ 376.051413][ T7742] ? __pfx_do_futex+0x10/0x10 [ 376.051457][ T7742] __se_sys_futex+0x3a8/0x450 [ 376.051499][ T7742] ? __pfx___se_sys_futex+0x10/0x10 [ 376.051532][ T7742] ? rcu_is_watching+0x15/0xb0 [ 376.051631][ T7742] ? __x64_sys_futex+0x21/0xf0 [ 376.051666][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.051711][ T7742] do_syscall_64+0x15f/0xf80 [ 376.051822][ T7742] ? clear_bhb_loop+0x40/0x90 [ 376.051851][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.051878][ T7742] RIP: 0033:0x7f319bb0cdd9 [ 376.051904][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.051924][ T7742] RSP: 002b:00007f3199d24028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 376.051947][ T7742] RAX: ffffffffffffffda RBX: 00007f319bd86180 RCX: 00007f319bb0cdd9 [ 376.051964][ T7742] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 376.051979][ T7742] RBP: 00007f319bba2d69 R08: 0000000000000000 R09: 0000000000000082 [ 376.051993][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.052006][ T7742] R13: 00007f319bd86218 R14: 00007f319bd86180 R15: 00007ffda16f5ac8 [ 376.052042][ T7742] [ 376.976863][ T7746] 9p: Bad value for 'rfdno' [ 377.199973][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.251820][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.261459][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.282384][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.296240][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.109642][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.109713][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.232239][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 379.565635][ T5616] Bluetooth: hci1: command tx timeout [ 381.057208][ T7770] netlink: 'syz.1.537': attribute type 4 has an invalid length. [ 381.057226][ T7770] netlink: 17 bytes leftover after parsing attributes in process `syz.1.537'. [ 381.598767][ T5616] Bluetooth: hci1: command tx timeout [ 382.950678][ T7775] ceph: No mds server is up or the cluster is laggy [ 382.975592][ T7793] 9p: Bad value for 'rfdno' [ 383.396170][ T2170] hsr_slave_0: left promiscuous mode [ 383.430564][ T2170] hsr_slave_1: left promiscuous mode [ 383.431998][ T2170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.432204][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.777708][ T5616] Bluetooth: hci1: command tx timeout [ 384.663990][ T2170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.671958][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.877823][ T5616] Bluetooth: hci1: command tx timeout [ 386.034394][ T2170] veth1_macvtap: left promiscuous mode [ 386.034720][ T2170] veth0_macvtap: left promiscuous mode [ 386.035025][ T2170] veth1_vlan: left promiscuous mode [ 386.035479][ T2170] veth0_vlan: left promiscuous mode [ 386.859221][ T2170] team0 (unregistering): Port device team_slave_1 removed [ 386.891306][ T2170] team0 (unregistering): Port device team_slave_0 removed [ 387.531760][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 391.065341][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.553'. [ 393.479340][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 394.076366][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.361324][ T2170] IPVS: stop unused estimator thread 0... [ 394.380215][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.380456][ T7622] bridge_slave_0: entered allmulticast mode [ 394.385435][ T7622] bridge_slave_0: entered promiscuous mode [ 394.494765][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.494892][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.495140][ T7622] bridge_slave_1: entered allmulticast mode [ 394.525940][ T7622] bridge_slave_1: entered promiscuous mode [ 395.664275][ T7622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.730796][ T7622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.860612][ T5609] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 395.984082][ T7622] team0: Port device team_slave_0 added [ 396.034699][ T7622] team0: Port device team_slave_1 added [ 396.158596][ T5609] usb 4-1: Using ep0 maxpacket: 32 [ 396.160831][ T5609] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 396.160857][ T5609] usb 4-1: config 0 has no interface number 0 [ 396.160902][ T5609] usb 4-1: config 0 interface 184 has no altsetting 0 [ 396.164967][ T5609] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 396.164997][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.165017][ T5609] usb 4-1: Product: syz [ 396.165031][ T5609] usb 4-1: Manufacturer: syz [ 396.165045][ T5609] usb 4-1: SerialNumber: syz [ 396.902257][ T5609] usb 4-1: config 0 descriptor?? [ 396.928263][ T48] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 396.957794][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.957811][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.957841][ T7622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.081384][ T48] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 397.081479][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.186480][ T48] usb 3-1: config 0 descriptor?? [ 397.939193][ T5609] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 397.939224][ T5609] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 398.006808][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.006827][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.006856][ T7622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.161583][ T48] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 398.163718][ T48] [drm:udl_init] *ERROR* Selecting channel failed [ 398.413484][ T48] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 398.413516][ T48] [drm] Initialized udl on minor 2 [ 398.500592][ T48] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.504733][ T48] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 398.590557][ T5789] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.636226][ T48] usb 3-1: USB disconnect, device number 4 [ 398.649685][ T5789] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 398.671537][ T5789] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 400.186275][ T5609] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 400.186308][ T5609] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 400.186330][ T5609] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 400.186654][ T5609] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 400.924490][ T5609] usb 4-1: USB disconnect, device number 4 [ 403.739154][ T2170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.839765][ T7971] 9p: Bad value for 'rfdno' [ 404.204764][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.206847][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.207067][ T7749] bridge_slave_0: entered allmulticast mode [ 404.237906][ T7749] bridge_slave_0: entered promiscuous mode [ 404.257810][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.258027][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.273268][ T7749] bridge_slave_1: entered allmulticast mode [ 404.594027][ T7749] bridge_slave_1: entered promiscuous mode [ 405.609776][ T7622] hsr_slave_0: entered promiscuous mode [ 405.614242][ T7622] hsr_slave_1: entered promiscuous mode [ 405.641457][ T7622] debugfs: 'hsr0' already exists in 'hsr' [ 405.641489][ T7622] Cannot create hsr debugfs directory [ 406.543541][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.878234][ T2170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.085252][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.088001][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 410.418347][ T2170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.694279][ T8022] input: syz1 as /devices/virtual/input/input8 [ 410.710438][ T7749] team0: Port device team_slave_0 added [ 410.900518][ T7749] team0: Port device team_slave_1 added [ 411.535773][ T2170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.867940][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.867961][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.867993][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.056806][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.056826][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.056860][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.075553][ T5583] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 412.230231][ T5583] usb 2-1: Using ep0 maxpacket: 32 [ 412.233000][ T5583] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 412.233030][ T5583] usb 2-1: config 0 has no interface number 0 [ 412.233077][ T5583] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.233105][ T5583] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.233130][ T5583] usb 2-1: config 0 interface 85 has no altsetting 0 [ 412.282962][ T5583] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 412.283051][ T5583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.283108][ T5583] usb 2-1: Product: syz [ 412.283144][ T5583] usb 2-1: Manufacturer: syz [ 412.283179][ T5583] usb 2-1: SerialNumber: syz [ 412.424967][ T5583] usb 2-1: config 0 descriptor?? [ 412.892612][ T5583] appletouch 2-1:0.85: Geyser mode initialized. [ 413.007666][ T5583] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 414.906822][ T5583] usb 2-1: USB disconnect, device number 6 [ 415.602836][ T7749] hsr_slave_0: entered promiscuous mode [ 415.607911][ T7749] hsr_slave_1: entered promiscuous mode [ 415.620509][ T7749] debugfs: 'hsr0' already exists in 'hsr' [ 415.620592][ T7749] Cannot create hsr debugfs directory [ 415.645290][ T8043] Bluetooth: MGMT ver 1.23 [ 416.857540][ T5583] appletouch 2-1:0.85: input: appletouch disconnected [ 417.243065][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.289336][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.515810][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.523487][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.524326][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.494954][ T5616] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.495944][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.586911][ T5612] Bluetooth: hci5: command tx timeout [ 420.992643][ T2170] bridge_slave_1: left promiscuous mode [ 420.992996][ T2170] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.570288][ T2170] bridge_slave_0: left allmulticast mode [ 421.570324][ T2170] bridge_slave_0: left promiscuous mode [ 421.570814][ T2170] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.638705][ T5612] Bluetooth: hci5: command tx timeout [ 425.144929][ T5612] Bluetooth: hci5: command tx timeout [ 427.373540][ T5610] Bluetooth: hci5: command tx timeout [ 427.401844][ T2170] bond0 (unregistering): Released all slaves [ 428.529610][ T8120] fuse: root generation should be zero [ 429.289691][ T2170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.349724][ T2170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.669474][ T2170] bond0 (unregistering): Released all slaves [ 434.726724][ T8156] 9p: Bad value for 'rfdno' [ 437.021763][ T8169] fuse: Bad value for 'fd' [ 438.007728][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 438.026415][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 438.034310][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 438.067104][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 438.068038][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.856124][ T5612] Bluetooth: hci6: command tx timeout [ 440.957138][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.957201][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.071696][ T8199] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 441.380064][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.735361][ T8209] 9p: Bad value for 'rfdno' [ 443.429840][ T5612] Bluetooth: hci6: command tx timeout [ 443.619241][ T5612] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 443.688644][ T5583] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 443.846178][ T5583] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 443.846219][ T5583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.917955][ T5583] usb 4-1: config 0 descriptor?? [ 444.011379][ T5583] cp210x 4-1:0.0: cp210x converter detected [ 444.346079][ T5583] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 444.346686][ T5583] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 444.346712][ T5583] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 445.465155][ T5612] Bluetooth: hci6: command tx timeout [ 446.057852][ T2170] hsr_slave_0: left promiscuous mode [ 446.540423][ T2170] hsr_slave_1: left promiscuous mode [ 446.541520][ T2170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.541555][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.681477][ T2170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.681507][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.742337][ T5583] usb 4-1: cp210x converter now attached to ttyUSB0 [ 446.878533][ T823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 446.949926][ T5583] usb 4-1: USB disconnect, device number 5 [ 447.048648][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 447.050614][ T823] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 447.050641][ T823] usb 2-1: config 0 has no interface number 0 [ 447.050689][ T823] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.050738][ T823] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.050762][ T823] usb 2-1: config 0 interface 85 has no altsetting 0 [ 447.053371][ T823] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 447.053400][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.053422][ T823] usb 2-1: Product: syz [ 447.053438][ T823] usb 2-1: Manufacturer: syz [ 447.053454][ T823] usb 2-1: SerialNumber: syz [ 447.069724][ T2170] veth1_macvtap: left promiscuous mode [ 447.070019][ T2170] veth0_macvtap: left promiscuous mode [ 447.070748][ T2170] veth1_vlan: left promiscuous mode [ 447.171108][ T2170] veth0_vlan: left promiscuous mode [ 447.220094][ T8248] loop2: detected capacity change from 0 to 7 [ 447.245838][ T823] usb 2-1: config 0 descriptor?? [ 447.277883][ T8248] Dev loop2: unable to read RDB block 7 [ 447.277930][ T8248] loop2: unable to read partition table [ 447.278163][ T8248] loop2: partition table beyond EOD, truncated [ 447.278182][ T8248] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 447.518580][ T5612] Bluetooth: hci6: command tx timeout [ 447.623860][ T4966] Dev loop2: unable to read RDB block 7 [ 447.623908][ T4966] loop2: unable to read partition table [ 447.624170][ T4966] loop2: partition table beyond EOD, truncated [ 447.709457][ T823] appletouch 2-1:0.85: Geyser mode initialized. [ 447.767306][ T823] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input11 [ 447.907659][ T5583] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 447.997849][ T5583] cp210x 4-1:0.0: device disconnected [ 448.120339][ T823] usb 2-1: USB disconnect, device number 7 [ 448.692479][ T823] appletouch 2-1:0.85: input: appletouch disconnected [ 451.376612][ T8282] loop2: detected capacity change from 0 to 7 [ 451.413179][ T8282] Dev loop2: unable to read RDB block 7 [ 451.413227][ T8282] loop2: unable to read partition table [ 451.413456][ T8282] loop2: partition table beyond EOD, truncated [ 451.413498][ T8282] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 451.532963][ T2170] team0 (unregistering): Port device team_slave_1 removed [ 451.650109][ T2170] team0 (unregistering): Port device team_slave_0 removed [ 452.361718][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 452.959728][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 453.138544][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 453.141093][ T31] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 453.141120][ T31] usb 4-1: config 0 has no interface number 0 [ 453.141167][ T31] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.141197][ T31] usb 4-1: config 0 interface 85 has no altsetting 0 [ 453.144185][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 453.144212][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.144231][ T31] usb 4-1: Product: syz [ 453.144246][ T31] usb 4-1: Manufacturer: syz [ 453.144260][ T31] usb 4-1: SerialNumber: syz [ 453.220847][ T31] usb 4-1: config 0 descriptor?? [ 453.455248][ T31] appletouch 4-1:0.85: Failed to read mode from device. [ 453.455491][ T31] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 454.203725][ T31] usb 4-1: USB disconnect, device number 6 [ 457.261431][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.261560][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.261791][ T8058] bridge_slave_0: entered allmulticast mode [ 457.292409][ T8058] bridge_slave_0: entered promiscuous mode [ 457.346675][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.346855][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.347054][ T8058] bridge_slave_1: entered allmulticast mode [ 457.372423][ T8058] bridge_slave_1: entered promiscuous mode [ 457.727288][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 457.838311][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.953882][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.150650][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.150864][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.151079][ T8179] bridge_slave_0: entered allmulticast mode [ 458.188755][ T8179] bridge_slave_0: entered promiscuous mode [ 458.215376][ T8375] fuse: Unknown parameter 'grou00000000000000000000' [ 458.343719][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.343848][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.344040][ T8179] bridge_slave_1: entered allmulticast mode [ 458.355919][ T8179] bridge_slave_1: entered promiscuous mode [ 458.414831][ T8058] team0: Port device team_slave_0 added [ 458.534214][ T8058] team0: Port device team_slave_1 added [ 459.044642][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.157753][ T8382] loop2: detected capacity change from 0 to 7 [ 459.174622][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.208140][ T8382] Dev loop2: unable to read RDB block 7 [ 459.208186][ T8382] loop2: AHDI p1 p2 p3 [ 459.208220][ T8382] loop2: partition table partially beyond EOD, truncated [ 459.250817][ T8382] loop2: p1 start 1818582900 is beyond EOD, truncated [ 459.250847][ T8382] loop2: p3 start 335544320 is beyond EOD, truncated [ 459.664477][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.664495][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.664525][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.893027][ T8391] 9p: Bad value for 'rfdno' [ 460.163063][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.163077][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.163098][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.650162][ T8179] team0: Port device team_slave_0 added [ 460.693855][ T8179] team0: Port device team_slave_1 added [ 461.475349][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.475363][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.475383][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.559880][ T8058] hsr_slave_0: entered promiscuous mode [ 461.568166][ T8058] hsr_slave_1: entered promiscuous mode [ 461.594657][ T8058] debugfs: 'hsr0' already exists in 'hsr' [ 461.594680][ T8058] Cannot create hsr debugfs directory [ 461.612109][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.612123][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.612156][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.784452][ T8179] hsr_slave_0: entered promiscuous mode [ 462.787695][ T8179] hsr_slave_1: entered promiscuous mode [ 462.816673][ T8179] debugfs: 'hsr0' already exists in 'hsr' [ 462.816702][ T8179] Cannot create hsr debugfs directory [ 463.253217][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 464.132858][ T8427] loop2: detected capacity change from 0 to 7 [ 464.154748][ T8427] Dev loop2: unable to read RDB block 7 [ 464.154771][ T8427] loop2: AHDI p1 p2 p3 [ 464.154791][ T8427] loop2: partition table partially beyond EOD, truncated [ 464.154963][ T8427] loop2: p1 start 1818582900 is beyond EOD, truncated [ 464.154977][ T8427] loop2: p3 start 335544320 is beyond EOD, truncated [ 466.231937][ T2170] bridge_slave_1: left allmulticast mode [ 466.231966][ T2170] bridge_slave_1: left promiscuous mode [ 466.232186][ T2170] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.314208][ T2170] bridge_slave_0: left allmulticast mode [ 466.314235][ T2170] bridge_slave_0: left promiscuous mode [ 466.314427][ T2170] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.091692][ T2170] bridge_slave_1: left allmulticast mode [ 467.091729][ T2170] bridge_slave_1: left promiscuous mode [ 467.091977][ T2170] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.180573][ T2170] bridge_slave_0: left allmulticast mode [ 467.180609][ T2170] bridge_slave_0: left promiscuous mode [ 467.180870][ T2170] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.657329][ T8453] loop2: detected capacity change from 0 to 7 [ 467.704114][ T8453] Dev loop2: unable to read RDB block 7 [ 467.704152][ T8453] loop2: AHDI p1 p2 p3 [ 467.704181][ T8453] loop2: partition table partially beyond EOD, truncated [ 467.704458][ T8453] loop2: p1 start 1818582900 is beyond EOD, truncated [ 467.704479][ T8453] loop2: p3 start 335544320 is beyond EOD, truncated [ 469.412077][ T2170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.160633][ T2170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.234810][ T2170] bond0 (unregistering): Released all slaves [ 473.635774][ T2170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.032069][ T2170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.131523][ T2170] bond0 (unregistering): Released all slaves [ 476.349767][ T2170] hsr_slave_0: left promiscuous mode [ 476.409571][ T2170] hsr_slave_1: left promiscuous mode [ 476.410419][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.432006][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.548712][ T2170] hsr_slave_0: left promiscuous mode [ 476.568817][ T2170] hsr_slave_1: left promiscuous mode [ 476.571854][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.609678][ T2170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.302928][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.361355][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.362607][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.363875][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.366881][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.696177][ T8553] loop2: detected capacity change from 0 to 7 [ 477.709773][ T8553] Dev loop2: unable to read RDB block 7 [ 477.709809][ T8553] loop2: AHDI p2 p3 [ 477.709839][ T8553] loop2: partition table partially beyond EOD, truncated [ 477.710118][ T8553] loop2: p3 start 335544320 is beyond EOD, truncated [ 478.162377][ T2170] team0 (unregistering): Port device team_slave_1 removed [ 478.262561][ T2170] team0 (unregistering): Port device team_slave_0 removed [ 479.438739][ T5612] Bluetooth: hci0: command tx timeout [ 480.186109][ T2170] team0 (unregistering): Port device team_slave_1 removed [ 481.205264][ T2170] team0 (unregistering): Port device team_slave_0 removed [ 481.518512][ T5612] Bluetooth: hci0: command tx timeout [ 483.598981][ T5612] Bluetooth: hci0: command tx timeout [ 486.155130][ T5612] Bluetooth: hci0: command tx timeout [ 489.056771][ T8607] 9p: Bad value for 'rfdno' [ 490.391769][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 492.358554][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 492.559202][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 492.565644][ T48] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 492.565666][ T48] usb 2-1: config 0 has no interface number 0 [ 492.565698][ T48] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.565718][ T48] usb 2-1: config 0 interface 85 has no altsetting 0 [ 492.691438][ T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 492.691464][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.691479][ T48] usb 2-1: Product: syz [ 492.691489][ T48] usb 2-1: Manufacturer: syz [ 492.691499][ T48] usb 2-1: SerialNumber: syz [ 492.901425][ T48] usb 2-1: config 0 descriptor?? [ 493.145729][ T48] appletouch 2-1:0.85: Failed to read mode from device. [ 493.145950][ T48] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 494.138630][ T48] usb 2-1: USB disconnect, device number 8 [ 495.990331][ T8179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 496.216085][ T8179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.273598][ T8179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 496.526284][ T8179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.581435][ T8179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.872491][ T8179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.184761][ T7398] bridge_slave_1: left allmulticast mode [ 497.184802][ T7398] bridge_slave_1: left promiscuous mode [ 497.185235][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.386863][ T7398] bridge_slave_0: left allmulticast mode [ 497.427524][ T7398] bridge_slave_0: left promiscuous mode [ 497.427810][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.037668][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.088932][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.090769][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.106504][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.130571][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.391494][ T7398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.531053][ T7398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.677122][ T7398] bond0 (unregistering): Released all slaves [ 499.771481][ T8179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 500.147137][ T8179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.831101][ T7398] hsr_slave_0: left promiscuous mode [ 500.894751][ T7398] hsr_slave_1: left promiscuous mode [ 500.895965][ T7398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.974454][ T7398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.278478][ T5612] Bluetooth: hci1: command tx timeout [ 501.603662][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.603739][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.017454][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 502.073459][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 502.835573][ T7398] team0 (unregistering): Port device team_slave_1 removed [ 502.983598][ T7398] team0 (unregistering): Port device team_slave_0 removed [ 503.392386][ T5612] Bluetooth: hci1: command tx timeout [ 503.658239][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 504.928600][ T823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 504.993129][ T36] audit: type=1326 audit(1777395372.123:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993186][ T36] audit: type=1326 audit(1777395372.123:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993232][ T36] audit: type=1326 audit(1777395372.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993277][ T36] audit: type=1326 audit(1777395372.123:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993322][ T36] audit: type=1326 audit(1777395372.123:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993366][ T36] audit: type=1326 audit(1777395372.123:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993412][ T36] audit: type=1326 audit(1777395372.123:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993457][ T36] audit: type=1326 audit(1777395372.123:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993501][ T36] audit: type=1326 audit(1777395372.123:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 504.993546][ T36] audit: type=1326 audit(1777395372.123:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8840 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f319bb0cdd9 code=0x7ffc0000 [ 505.091674][ T823] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.091696][ T823] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 505.091710][ T823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.091744][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 505.091763][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 505.094892][ T823] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.094922][ T823] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.094937][ T823] usb 2-1: Product: syz [ 505.094948][ T823] usb 2-1: Manufacturer: syz [ 505.472405][ T5612] Bluetooth: hci1: command tx timeout [ 505.504348][ T823] cdc_wdm 2-1:1.0: skipping garbage [ 505.504370][ T823] cdc_wdm 2-1:1.0: skipping garbage [ 506.772743][ T823] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 506.773023][ T823] cdc_wdm 2-1:1.0: Unknown control protocol [ 507.027775][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.027878][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.028223][ T8545] bridge_slave_0: entered allmulticast mode [ 507.073025][ T8545] bridge_slave_0: entered promiscuous mode [ 508.519265][ T5612] Bluetooth: hci1: command tx timeout [ 508.549214][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.549341][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.549591][ T8545] bridge_slave_1: entered allmulticast mode [ 508.635201][ T8545] bridge_slave_1: entered promiscuous mode [ 508.735796][ T823] usb 2-1: USB disconnect, device number 9 [ 509.231631][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.421169][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.013048][ T8545] team0: Port device team_slave_0 added [ 510.085451][ T8545] team0: Port device team_slave_1 added [ 510.121751][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 510.203601][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 512.992439][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 513.052054][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.052073][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.052102][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.111386][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.111405][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.111436][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.941136][ T8545] hsr_slave_0: entered promiscuous mode [ 515.996833][ T8545] hsr_slave_1: entered promiscuous mode [ 516.009219][ T8545] debugfs: 'hsr0' already exists in 'hsr' [ 516.009250][ T8545] Cannot create hsr debugfs directory [ 522.219910][ T8954] binder: 8953:8954 ioctl c0306201 0 returned -14 [ 522.412878][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.413098][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.413306][ T8748] bridge_slave_0: entered allmulticast mode [ 523.427384][ T8748] bridge_slave_0: entered promiscuous mode [ 524.010865][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.011017][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.011258][ T8748] bridge_slave_1: entered allmulticast mode [ 524.026979][ T8748] bridge_slave_1: entered promiscuous mode [ 524.511551][ T7398] bridge_slave_1: left allmulticast mode [ 524.511586][ T7398] bridge_slave_1: left promiscuous mode [ 524.511870][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.941044][ T7398] bridge_slave_0: left allmulticast mode [ 524.941080][ T7398] bridge_slave_0: left promiscuous mode [ 524.946841][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.152407][ T8986] loop2: detected capacity change from 0 to 7 [ 525.208009][ T8986] Dev loop2: unable to read RDB block 7 [ 525.208048][ T8986] loop2: AHDI p1 p2 p3 [ 525.208078][ T8986] loop2: partition table partially beyond EOD, truncated [ 525.227846][ T8986] loop2: p1 start 1818582900 is beyond EOD, truncated [ 525.227874][ T8986] loop2: p3 start 335544320 is beyond EOD, truncated [ 525.669454][ T7398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.852545][ T7398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.906878][ T8999] netlink: 72 bytes leftover after parsing attributes in process `syz.1.789'. [ 526.964591][ T7398] bond0 (unregistering): Released all slaves [ 527.130842][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.181504][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.992138][ T7398] hsr_slave_0: left promiscuous mode [ 528.028597][ T7398] hsr_slave_1: left promiscuous mode [ 528.029401][ T7398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.069741][ T7398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.812227][ T9025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.798'. [ 530.259496][ T7398] team0 (unregistering): Port device team_slave_1 removed [ 530.329581][ T7398] team0 (unregistering): Port device team_slave_0 removed [ 532.151637][ T8748] team0: Port device team_slave_0 added [ 532.237831][ T8748] team0: Port device team_slave_1 added [ 533.819303][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.819321][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.819351][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.830497][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.830514][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.830542][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.873413][ T8545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.079818][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.140237][ T8545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.581731][ T1008] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 534.744946][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.796575][ T8545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.839200][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.888440][ T1008] usb 4-1: Using ep0 maxpacket: 32 [ 534.933788][ T1008] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 534.933819][ T1008] usb 4-1: config 0 has no interface number 0 [ 534.933867][ T1008] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.933896][ T1008] usb 4-1: config 0 interface 85 has no altsetting 0 [ 534.977002][ T1008] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 534.977037][ T1008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.977058][ T1008] usb 4-1: Product: syz [ 534.977073][ T1008] usb 4-1: Manufacturer: syz [ 534.977088][ T1008] usb 4-1: SerialNumber: syz [ 535.137795][ T1008] usb 4-1: config 0 descriptor?? [ 535.168597][ T8545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 535.698565][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.899435][ T1008] appletouch 4-1:0.85: Geyser mode initialized. [ 535.925815][ T1008] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input14 [ 535.984743][ T8748] hsr_slave_0: entered promiscuous mode [ 535.987742][ T8748] hsr_slave_1: entered promiscuous mode [ 536.003749][ T8748] debugfs: 'hsr0' already exists in 'hsr' [ 536.003779][ T8748] Cannot create hsr debugfs directory [ 536.240490][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 536.246266][ T1008] usb 4-1: USB disconnect, device number 7 [ 536.846484][ T1008] appletouch 4-1:0.85: input: appletouch disconnected [ 537.736963][ T9089] netlink: 72 bytes leftover after parsing attributes in process `syz.1.811'. [ 538.919504][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 539.274467][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 539.307892][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 539.327434][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 539.349269][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 539.357856][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 539.707724][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 541.537307][ T5610] Bluetooth: hci5: command tx timeout [ 545.191149][ T5610] Bluetooth: hci5: command tx timeout [ 547.198601][ T5610] Bluetooth: hci5: command tx timeout [ 547.759302][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.828'. [ 549.302995][ T5610] Bluetooth: hci5: command tx timeout [ 554.419611][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 554.480902][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 554.741462][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 557.006706][ T9286] loop2: detected capacity change from 0 to 7 [ 557.027922][ T9286] Dev loop2: unable to read RDB block 7 [ 557.027955][ T9286] loop2: AHDI p2 p3 [ 557.027983][ T9286] loop2: partition table partially beyond EOD, truncated [ 557.028260][ T9286] loop2: p3 start 335544320 is beyond EOD, truncated [ 560.310102][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.357330][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.368887][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.397474][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.419606][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 560.420298][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.463507][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 560.463594][ T36] audit: type=1326 audit(1777395427.603:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.2.840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f319bb0cdd9 code=0x0 [ 560.530193][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 561.997534][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 562.098759][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 562.121113][ T5731] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 562.158191][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 562.221980][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 562.223318][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 562.551409][ T5731] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 562.551433][ T5731] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 562.551446][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.551482][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 562.551501][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 562.553154][ T5731] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.553175][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.553189][ T5731] usb 2-1: Product: syz [ 562.553200][ T5731] usb 2-1: Manufacturer: syz [ 562.638629][ T5610] Bluetooth: hci0: command tx timeout [ 562.796994][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 562.797016][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 562.898977][ T5731] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 562.899000][ T5731] cdc_wdm 2-1:1.0: Unknown control protocol [ 563.165536][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.165602][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.416578][ T5610] Bluetooth: hci6: command tx timeout [ 564.795342][ T5610] Bluetooth: hci0: command tx timeout [ 564.995512][ T5731] usb 2-1: USB disconnect, device number 10 [ 565.280298][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 566.517580][ T5610] Bluetooth: hci6: command tx timeout [ 566.598939][ T8677] bridge_slave_1: left allmulticast mode [ 566.599526][ T8677] bridge_slave_1: left promiscuous mode [ 566.806323][ T5610] Bluetooth: hci0: command tx timeout [ 566.888936][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.985797][ T8677] bridge_slave_0: left allmulticast mode [ 566.985834][ T8677] bridge_slave_0: left promiscuous mode [ 566.986125][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.558720][ T5610] Bluetooth: hci6: command tx timeout [ 568.878509][ T5610] Bluetooth: hci0: command tx timeout [ 570.250213][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.405273][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.638709][ T5610] Bluetooth: hci6: command tx timeout [ 570.646979][ T8677] bond0 (unregistering): Released all slaves [ 571.325033][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 571.325064][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 571.804372][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 571.857955][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 571.948570][ T8677] hsr_slave_0: left promiscuous mode [ 571.989972][ T8677] hsr_slave_1: left promiscuous mode [ 571.993983][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.040811][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.880372][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 572.963367][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 573.918732][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 574.300901][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.303876][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.304088][ T9103] bridge_slave_0: entered allmulticast mode [ 574.310363][ T9103] bridge_slave_0: entered promiscuous mode [ 574.326731][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.326877][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.327076][ T9103] bridge_slave_1: entered allmulticast mode [ 574.330168][ T9103] bridge_slave_1: entered promiscuous mode [ 575.148674][ T9103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.208881][ T9103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.721312][ T9103] team0: Port device team_slave_0 added [ 575.820689][ T9103] team0: Port device team_slave_1 added [ 576.720124][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.720144][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.720174][ T9103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.456635][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 577.473898][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.473912][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.473935][ T9103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.973787][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 577.974321][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 577.974542][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 578.171288][ T9103] hsr_slave_0: entered promiscuous mode [ 578.175264][ T9103] hsr_slave_1: entered promiscuous mode [ 578.194123][ T9103] debugfs: 'hsr0' already exists in 'hsr' [ 578.194152][ T9103] Cannot create hsr debugfs directory [ 581.022161][ T8677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.256742][ T8677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.630104][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 583.401994][ T8677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.651516][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.652036][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.652237][ T9307] bridge_slave_0: entered allmulticast mode [ 584.655194][ T9307] bridge_slave_0: entered promiscuous mode [ 584.762265][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.762691][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.762883][ T9307] bridge_slave_1: entered allmulticast mode [ 584.765931][ T9307] bridge_slave_1: entered promiscuous mode [ 585.376881][ T8677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.742948][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.743039][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.743180][ T9326] bridge_slave_0: entered allmulticast mode [ 585.745556][ T9326] bridge_slave_0: entered promiscuous mode [ 586.788649][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.788775][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.789472][ T9326] bridge_slave_1: entered allmulticast mode [ 586.801279][ T9326] bridge_slave_1: entered promiscuous mode [ 586.844647][ T9307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.301831][ T9307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.361312][ T9551] Bluetooth: MGMT ver 1.23 [ 587.473495][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.535713][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.552090][ T9307] team0: Port device team_slave_0 added [ 587.592337][ T9307] team0: Port device team_slave_1 added [ 587.654886][ T9326] team0: Port device team_slave_0 added [ 589.410435][ T9326] team0: Port device team_slave_1 added [ 589.414972][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.414990][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.415019][ T9307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.354243][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.354261][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.354290][ T9307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.768356][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 590.768762][ T5610] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 591.331278][ T9572] 9p: Bad value for 'rfdno' [ 593.510090][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.510104][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.510124][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.516430][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.516447][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.516475][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.232397][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 596.691574][ T9603] syz.1.898 uses obsolete (PF_INET,SOCK_PACKET) [ 597.837777][ T9307] hsr_slave_0: entered promiscuous mode [ 597.893862][ T9307] hsr_slave_1: entered promiscuous mode [ 597.909432][ T9307] debugfs: 'hsr0' already exists in 'hsr' [ 597.909462][ T9307] Cannot create hsr debugfs directory [ 598.100922][ T9326] hsr_slave_0: entered promiscuous mode [ 598.102424][ T9326] hsr_slave_1: entered promiscuous mode [ 598.103470][ T9326] debugfs: 'hsr0' already exists in 'hsr' [ 598.103495][ T9326] Cannot create hsr debugfs directory [ 598.588762][ T8677] bridge_slave_1: left allmulticast mode [ 598.588800][ T8677] bridge_slave_1: left promiscuous mode [ 598.589081][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.695309][ T8677] bridge_slave_0: left allmulticast mode [ 598.695346][ T8677] bridge_slave_0: left promiscuous mode [ 598.695618][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.949674][ T8677] bridge_slave_1: left allmulticast mode [ 598.949722][ T8677] bridge_slave_1: left promiscuous mode [ 598.949995][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.302825][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.516319][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.805436][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.806666][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.810211][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.454083][ T8677] bridge_slave_0: left allmulticast mode [ 601.454120][ T8677] bridge_slave_0: left promiscuous mode [ 601.454365][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.673679][ T5610] Bluetooth: hci1: command tx timeout [ 605.767108][ T5610] Bluetooth: hci1: command tx timeout [ 607.336021][ T5731] IPVS: starting estimator thread 0... [ 607.428603][ T9675] IPVS: using max 8 ests per chain, 19200 per kthread [ 607.552676][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.630938][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.677735][ T8677] bond0 (unregistering): Released all slaves [ 607.838533][ T5610] Bluetooth: hci1: command tx timeout [ 608.029320][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.149406][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.258670][ T8677] bond0 (unregistering): Released all slaves [ 608.829503][ T9684] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 609.308077][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.239281][ T5610] Bluetooth: hci1: command tx timeout [ 613.974239][ T9742] binder: Binderfs stats mode cannot be changed during a remount [ 615.664979][ T9750] binder: Binderfs stats mode cannot be changed during a remount [ 616.819979][ T9753] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 616.824654][ T9756] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 617.298580][ T8677] hsr_slave_0: left promiscuous mode [ 617.381063][ T8677] hsr_slave_1: left promiscuous mode [ 617.383729][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.383758][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.441890][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.482284][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.482313][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.734600][ T8677] hsr_slave_0: left promiscuous mode [ 617.769979][ T8677] hsr_slave_1: left promiscuous mode [ 617.771828][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.833540][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.004536][ T8677] veth1_macvtap: left promiscuous mode [ 618.004655][ T8677] veth0_macvtap: left promiscuous mode [ 618.004950][ T8677] veth1_vlan: left promiscuous mode [ 618.005123][ T8677] veth0_vlan: left promiscuous mode [ 618.068497][ T1008] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 618.223266][ T1008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.223296][ T1008] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.223336][ T1008] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.223362][ T1008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.279542][ T1008] usb 2-1: config 0 descriptor?? [ 619.960365][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 620.266544][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.272590][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 620.313981][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.315321][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.333853][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.334798][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.937426][ T823] usb 2-1: USB disconnect, device number 11 [ 621.289143][ T9807] loop2: detected capacity change from 0 to 7 [ 621.334717][ T9807] Dev loop2: unable to read RDB block 7 [ 621.334761][ T9807] loop2: unable to read partition table [ 621.335006][ T9807] loop2: partition table beyond EOD, truncated [ 621.335024][ T9807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 621.440768][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.494327][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.516073][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.517742][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.533400][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.632776][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 621.729297][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 622.485429][ T5610] Bluetooth: hci2: command tx timeout [ 623.259085][ T823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 623.684863][ T5610] Bluetooth: hci5: command tx timeout [ 624.250378][ T36] audit: type=1326 audit(1777395491.393:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.2.943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f319bb0cdd9 code=0x0 [ 624.282466][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.282493][ T823] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 624.282530][ T823] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 624.282553][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.335068][ T823] usb 2-1: config 0 descriptor?? [ 624.393308][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 624.487403][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.487477][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.558513][ T5610] Bluetooth: hci2: command tx timeout [ 625.758709][ T5610] Bluetooth: hci5: command tx timeout [ 626.029879][ T1008] usb 2-1: USB disconnect, device number 12 [ 626.501242][ T9872] loop2: detected capacity change from 0 to 7 [ 626.639958][ T5610] Bluetooth: hci2: command tx timeout [ 626.723262][ T9872] Dev loop2: unable to read RDB block 7 [ 626.723314][ T9872] loop2: unable to read partition table [ 626.723571][ T9872] loop2: partition table beyond EOD, truncated [ 626.723608][ T9872] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 628.048191][ T5610] Bluetooth: hci5: command tx timeout [ 628.847537][ T5610] Bluetooth: hci2: command tx timeout [ 629.741114][ T9906] netlink: 72 bytes leftover after parsing attributes in process `syz.1.952'. [ 630.148470][ T9911] binder: Binderfs stats mode cannot be changed during a remount [ 630.162165][ T5610] Bluetooth: hci5: command tx timeout [ 631.400158][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.400299][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.400540][ T9628] bridge_slave_0: entered allmulticast mode [ 631.403453][ T9628] bridge_slave_0: entered promiscuous mode [ 631.562903][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.563044][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.563258][ T9628] bridge_slave_1: entered allmulticast mode [ 631.579181][ T9628] bridge_slave_1: entered promiscuous mode [ 632.086422][ T8677] IPVS: stop unused estimator thread 0... [ 632.102966][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.171466][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.450503][ T9628] team0: Port device team_slave_0 added [ 632.589189][ T9628] team0: Port device team_slave_1 added [ 632.970563][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.970582][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.970611][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.575785][ T9941] binder: Binderfs stats mode cannot be changed during a remount [ 634.899388][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.899403][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.899426][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.983598][ T9628] hsr_slave_0: entered promiscuous mode [ 636.985044][ T9628] hsr_slave_1: entered promiscuous mode [ 636.985997][ T9628] debugfs: 'hsr0' already exists in 'hsr' [ 636.986021][ T9628] Cannot create hsr debugfs directory [ 637.076734][ T9968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.961'. [ 639.724865][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.725087][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.725332][ T9794] bridge_slave_0: entered allmulticast mode [ 639.784413][ T9794] bridge_slave_0: entered promiscuous mode [ 640.168970][T10003] loop2: detected capacity change from 0 to 7 [ 640.174466][T10003] Dev loop2: unable to read RDB block 7 [ 640.174497][T10003] loop2: AHDI p1 p2 p3 [ 640.174525][T10003] loop2: partition table partially beyond EOD, truncated [ 640.174785][T10003] loop2: p1 start 1818582900 is beyond EOD, truncated [ 640.174806][T10003] loop2: p3 start 335544320 is beyond EOD, truncated [ 641.147474][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.147633][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.147843][ T9794] bridge_slave_1: entered allmulticast mode [ 641.190098][ T9794] bridge_slave_1: entered promiscuous mode [ 641.815098][T10020] binder: Binderfs stats mode cannot be changed during a remount [ 642.840568][ T9794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.933726][ T5610] Bluetooth: hci3: unexpected event for opcode 0x080c [ 642.967560][T10026] loop2: detected capacity change from 0 to 7 [ 642.986633][ T9794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.027594][T10026] Dev loop2: unable to read RDB block 7 [ 643.027629][T10026] loop2: AHDI p2 p3 [ 643.027658][T10026] loop2: partition table partially beyond EOD, truncated [ 643.027912][T10026] loop2: p3 start 335544320 is beyond EOD, truncated [ 643.079178][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.079410][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.079624][ T9808] bridge_slave_0: entered allmulticast mode [ 643.081270][ T4966] Dev loop2: unable to read RDB block 7 [ 643.081296][ T4966] loop2: AHDI p2 p3 [ 643.081328][ T4966] loop2: partition table partially beyond EOD, truncated [ 643.081596][ T4966] loop2: p3 start 335544320 is beyond EOD, truncated [ 643.082375][ T9808] bridge_slave_0: entered promiscuous mode [ 643.245838][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.245989][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.246245][ T9808] bridge_slave_1: entered allmulticast mode [ 643.276518][ T9808] bridge_slave_1: entered promiscuous mode [ 645.045680][ T9794] team0: Port device team_slave_0 added [ 645.165350][ T9794] team0: Port device team_slave_1 added [ 645.199648][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.266102][T10047] loop2: detected capacity change from 0 to 7 [ 645.301212][T10047] Dev loop2: unable to read RDB block 7 [ 645.301253][T10047] loop2: unable to read partition table [ 645.301436][T10047] loop2: partition table beyond EOD, truncated [ 645.301470][T10047] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 645.339065][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.477638][ T8677] bridge_slave_1: left allmulticast mode [ 645.477677][ T8677] bridge_slave_1: left promiscuous mode [ 645.477969][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.570740][ T8677] bridge_slave_0: left allmulticast mode [ 645.570776][ T8677] bridge_slave_0: left promiscuous mode [ 645.571059][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.183913][ T8677] bridge_slave_1: left allmulticast mode [ 646.184272][ T8677] bridge_slave_1: left promiscuous mode [ 646.283320][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.496280][ T8677] bridge_slave_0: left allmulticast mode [ 646.496306][ T8677] bridge_slave_0: left promiscuous mode [ 646.496491][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.788763][ T8677] bridge_slave_1: left allmulticast mode [ 647.788798][ T8677] bridge_slave_1: left promiscuous mode [ 647.789063][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.859945][T10076] loop2: detected capacity change from 0 to 7 [ 647.860989][T10076] Dev loop2: unable to read RDB block 7 [ 647.861020][T10076] loop2: AHDI p1 p2 p3 [ 647.861047][T10076] loop2: partition table partially beyond EOD, truncated [ 647.861325][T10076] loop2: p1 start 1818582900 is beyond EOD, truncated [ 647.861347][T10076] loop2: p3 start 335544320 is beyond EOD, truncated [ 647.896627][ T8677] bridge_slave_0: left allmulticast mode [ 647.896727][ T8677] bridge_slave_0: left promiscuous mode [ 647.897378][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.791131][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.910819][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.993655][ T8677] bond0 (unregistering): Released all slaves [ 650.549569][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.649828][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.714414][ T8677] bond0 (unregistering): Released all slaves [ 650.998096][T10101] loop2: detected capacity change from 0 to 7 [ 651.011700][T10101] Dev loop2: unable to read RDB block 7 [ 651.011725][T10101] loop2: AHDI p1 p2 p3 [ 651.011748][T10101] loop2: partition table partially beyond EOD, truncated [ 651.011933][T10101] loop2: p1 start 1818582900 is beyond EOD, truncated [ 651.011947][T10101] loop2: p3 start 335544320 is beyond EOD, truncated [ 651.233958][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.329482][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.412032][ T8677] bond0 (unregistering): Released all slaves [ 653.817706][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.817728][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.817760][ T9794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.965814][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.965834][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.965885][ T9794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.014721][ T9808] team0: Port device team_slave_0 added [ 654.040528][ T9808] team0: Port device team_slave_1 added [ 654.916560][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.916581][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.916614][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.078505][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.078525][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.078556][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.179215][ T9794] hsr_slave_0: entered promiscuous mode [ 655.251773][ T9794] hsr_slave_1: entered promiscuous mode [ 655.256028][ T9794] debugfs: 'hsr0' already exists in 'hsr' [ 655.257547][ T9794] Cannot create hsr debugfs directory [ 655.315206][ T9628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 655.392355][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.406554][ T9628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 655.554395][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.738741][ T8677] hsr_slave_0: left promiscuous mode [ 655.778545][ T8677] hsr_slave_1: left promiscuous mode [ 655.779572][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.820325][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.364361][T10154] binder: Binderfs stats mode cannot be changed during a remount [ 657.399083][ T8677] hsr_slave_0: left promiscuous mode [ 657.438603][ T8677] hsr_slave_1: left promiscuous mode [ 657.439802][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.491745][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.206781][ T8677] hsr_slave_0: left promiscuous mode [ 658.239386][ T8677] hsr_slave_1: left promiscuous mode [ 658.240550][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.292722][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.069754][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 659.138724][T10167] loop2: detected capacity change from 0 to 7 [ 659.139894][T10167] Dev loop2: unable to read RDB block 7 [ 659.139922][T10167] loop2: AHDI p2 [ 659.139948][T10167] loop2: partition table partially beyond EOD, truncated [ 659.241941][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 659.274687][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.313756][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.317286][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.340868][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.345058][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.269198][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 660.331343][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 661.819537][ T5610] Bluetooth: hci0: command tx timeout [ 661.905541][T10192] loop2: detected capacity change from 0 to 7 [ 661.908181][T10192] Dev loop2: unable to read RDB block 7 [ 661.908208][T10192] loop2: AHDI p2 [ 661.908237][T10192] loop2: partition table partially beyond EOD, truncated [ 662.481035][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 662.589415][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 663.012654][ T9628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 663.104289][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.155055][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 663.747181][ T9808] hsr_slave_0: entered promiscuous mode [ 663.755958][ T9808] hsr_slave_1: entered promiscuous mode [ 663.756956][ T9808] debugfs: 'hsr0' already exists in 'hsr' [ 663.756982][ T9808] Cannot create hsr debugfs directory [ 663.839727][ T5610] Bluetooth: hci0: command tx timeout [ 665.197688][T10244] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1032'. [ 666.276588][ T5610] Bluetooth: hci0: command tx timeout [ 668.690764][ T5610] Bluetooth: hci0: command tx timeout [ 671.155185][T10277] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 671.155216][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 671.296422][T10284] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1040'. [ 671.406404][ T5583] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 671.411556][T10277] vhci_hcd vhci_hcd.0: Device attached [ 671.618764][ T5583] usb 2-1: Using ep0 maxpacket: 8 [ 671.621124][ T5583] usb 2-1: config 0 has no interfaces? [ 671.621160][ T5583] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 671.621188][ T5583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.628145][ T5583] usb 2-1: config 0 descriptor?? [ 671.706351][ T5731] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 671.748685][T10292] loop2: detected capacity change from 0 to 7 [ 671.770171][T10292] Dev loop2: unable to read RDB block 7 [ 671.770223][T10292] loop2: unable to read partition table [ 671.770477][T10292] loop2: partition table beyond EOD, truncated [ 671.770500][T10292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 671.967370][ T823] usb 2-1: USB disconnect, device number 13 [ 672.103290][T10279] vhci_hcd: connection reset by peer [ 672.144010][ T2170] vhci_hcd vhci_hcd.1: stop threads [ 672.144973][ T2170] vhci_hcd vhci_hcd.1: release socket [ 672.245936][ T2170] vhci_hcd vhci_hcd.1: disconnect device [ 672.354450][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 672.554841][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.555024][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.555195][T10168] bridge_slave_0: entered allmulticast mode [ 672.557218][T10168] bridge_slave_0: entered promiscuous mode [ 672.591290][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.591425][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.591642][T10168] bridge_slave_1: entered allmulticast mode [ 672.594577][T10168] bridge_slave_1: entered promiscuous mode [ 672.680951][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.710624][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.904981][T10168] team0: Port device team_slave_0 added [ 673.262746][T10168] team0: Port device team_slave_1 added [ 673.391830][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.391846][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.391866][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.616117][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.616131][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.616152][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.859700][T10321] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1048'. [ 675.832292][T10332] overlayfs: overlapping lowerdir path [ 676.113179][T10168] hsr_slave_0: entered promiscuous mode [ 676.114623][T10168] hsr_slave_1: entered promiscuous mode [ 676.115607][T10168] debugfs: 'hsr0' already exists in 'hsr' [ 676.115633][T10168] Cannot create hsr debugfs directory [ 676.689114][T10346] 9p: Bad value for 'rfdno' [ 677.328548][ T5731] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 677.699027][T10352] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 679.003886][ T9794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 679.091140][ T9794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.124569][ T9794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 679.284121][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 679.338919][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 679.346219][ T9794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.419320][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 679.422740][ T9794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 679.517630][T10369] netlink: 'syz.1.1059': attribute type 14 has an invalid length. [ 679.517655][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 679.585758][ T9794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.687520][ T9794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 680.013448][ T9794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.604764][ T9794] kthread_run failed with err -4 [ 681.650952][T10398] 9p: Bad value for 'rfdno' [ 683.885639][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.996689][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 684.007245][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 685.772053][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 685.779270][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 685.922738][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.922815][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.159134][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 686.207211][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 686.237867][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 686.303674][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 686.368167][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 686.728718][ T8677] bridge_slave_1: left allmulticast mode [ 686.728747][ T8677] bridge_slave_1: left promiscuous mode [ 686.728947][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.819908][ T8677] bridge_slave_0: left allmulticast mode [ 686.819936][ T8677] bridge_slave_0: left promiscuous mode [ 686.826653][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.716859][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.889095][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.922260][ T5610] Bluetooth: hci1: command tx timeout [ 687.974464][ T8677] bond0 (unregistering): Released all slaves [ 688.620650][ T5610] Bluetooth: hci6: command tx timeout [ 689.451934][T10440] binder: Binderfs stats mode cannot be changed during a remount [ 690.309108][ T5610] Bluetooth: hci1: command tx timeout [ 690.642323][ T5610] Bluetooth: hci6: command tx timeout [ 691.507559][ T8677] hsr_slave_0: left promiscuous mode [ 691.545421][ T8677] hsr_slave_1: left promiscuous mode [ 691.548074][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.859140][ T5610] Bluetooth: hci1: command tx timeout [ 693.859438][ T5610] Bluetooth: hci6: command tx timeout [ 693.878470][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.381096][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 695.452908][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 695.962753][ T5612] Bluetooth: hci1: command tx timeout [ 695.963025][ T5610] Bluetooth: hci6: command tx timeout [ 699.500259][T10168] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 699.544415][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.627574][T10168] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 699.662062][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.777143][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.777340][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.777553][T10399] bridge_slave_0: entered allmulticast mode [ 699.804164][T10399] bridge_slave_0: entered promiscuous mode [ 699.807327][T10168] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 699.890752][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.916904][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.917055][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.917277][T10399] bridge_slave_1: entered allmulticast mode [ 699.948965][T10399] bridge_slave_1: entered promiscuous mode [ 699.955574][T10168] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 700.014096][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.512023][T10550] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 700.512054][T10550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 700.512152][T10550] vhci_hcd vhci_hcd.0: Device attached [ 700.598144][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.758726][ T5613] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 700.852907][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.854191][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.854422][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.854606][T10409] bridge_slave_0: entered allmulticast mode [ 700.859816][T10409] bridge_slave_0: entered promiscuous mode [ 700.893951][ T5583] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 700.911100][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 700.914735][ T5613] usb 3-1: config 0 has no interfaces? [ 700.914772][ T5613] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.914798][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.982622][ T5613] usb 3-1: config 0 descriptor?? [ 701.069069][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.069206][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.069451][T10409] bridge_slave_1: entered allmulticast mode [ 701.117662][T10409] bridge_slave_1: entered promiscuous mode [ 701.195344][T10399] team0: Port device team_slave_0 added [ 701.260545][T10551] vhci_hcd: connection closed [ 701.262087][ T12] vhci_hcd vhci_hcd.2: stop threads [ 701.262114][ T12] vhci_hcd vhci_hcd.2: release socket [ 701.262283][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 701.267560][ T48] usb 3-1: USB disconnect, device number 5 [ 701.339630][ T5583] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 701.437929][T10399] team0: Port device team_slave_1 added [ 701.515992][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.669859][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.962184][T10568] syz_tun: entered allmulticast mode [ 702.081208][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.081227][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.081259][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.448889][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.448909][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.448941][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.582919][T10409] team0: Port device team_slave_0 added [ 703.405884][T10409] team0: Port device team_slave_1 added [ 704.161111][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.161129][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.161166][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.285200][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.285220][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.285250][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.644945][T10598] hub 8-0:1.0: USB hub found [ 704.648711][T10598] hub 8-0:1.0: 1 port detected [ 705.509630][T10399] hsr_slave_0: entered promiscuous mode [ 705.511481][T10399] hsr_slave_1: entered promiscuous mode [ 705.512613][T10399] debugfs: 'hsr0' already exists in 'hsr' [ 705.512658][T10399] Cannot create hsr debugfs directory [ 706.217614][T10409] hsr_slave_0: entered promiscuous mode [ 706.219925][T10409] hsr_slave_1: entered promiscuous mode [ 706.222600][T10409] debugfs: 'hsr0' already exists in 'hsr' [ 706.222666][T10409] Cannot create hsr debugfs directory [ 709.596364][T10658] loop2: detected capacity change from 0 to 7 [ 709.619375][T10658] Dev loop2: unable to read RDB block 7 [ 709.619415][T10658] loop2: AHDI p2 [ 709.619447][T10658] loop2: partition table partially beyond EOD, truncated [ 710.132267][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.302070][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.341635][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.347997][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.396348][T10672] loop2: detected capacity change from 0 to 7 [ 710.410188][T10672] Dev loop2: unable to read RDB block 7 [ 710.410254][T10672] loop2: unable to read partition table [ 710.410484][T10672] loop2: partition table beyond EOD, truncated [ 710.419139][T10672] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 710.454242][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.454382][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.248718][ T8677] bridge_slave_1: left allmulticast mode [ 711.248746][ T8677] bridge_slave_1: left promiscuous mode [ 711.248955][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.320018][ T8677] bridge_slave_0: left allmulticast mode [ 711.320046][ T8677] bridge_slave_0: left promiscuous mode [ 711.320263][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.520781][ T8677] bridge_slave_1: left allmulticast mode [ 711.520822][ T8677] bridge_slave_1: left promiscuous mode [ 711.521105][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.613140][ T8677] bridge_slave_0: left allmulticast mode [ 711.613179][ T8677] bridge_slave_0: left promiscuous mode [ 711.613484][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.019391][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.127813][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.211272][ T8677] bond0 (unregistering): Released all slaves [ 712.440791][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.569207][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.630339][ T8677] bond0 (unregistering): Released all slaves [ 712.665268][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 713.580275][ T8677] hsr_slave_0: left promiscuous mode [ 713.618567][ T8677] hsr_slave_1: left promiscuous mode [ 713.619720][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.698623][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.890428][ T8677] hsr_slave_0: left promiscuous mode [ 713.949562][ T8677] hsr_slave_1: left promiscuous mode [ 713.950719][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.995951][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.481026][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 715.589438][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 716.179559][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 716.229738][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 716.884024][T10762] loop2: detected capacity change from 0 to 7 [ 716.907123][T10762] Dev loop2: unable to read RDB block 7 [ 716.907174][T10762] loop2: unable to read partition table [ 716.907414][T10762] loop2: partition table beyond EOD, truncated [ 716.907435][T10762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 718.689156][T10794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'. [ 718.690211][T10789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'. [ 718.968151][T10168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.828761][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 719.879159][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 720.054557][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.119047][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.173037][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.174429][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.175298][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.179039][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.724543][T10838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 721.725663][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 722.318574][ T5610] Bluetooth: hci2: command tx timeout [ 724.401377][ T5610] Bluetooth: hci2: command tx timeout [ 725.338450][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'. [ 725.556654][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'. [ 725.696489][T10917] 9p: Bad value for 'rfdno' [ 726.478416][ T5610] Bluetooth: hci2: command tx timeout [ 728.609365][ T5610] Bluetooth: hci2: command tx timeout [ 730.003125][T10653] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 730.158446][T10653] usb 3-1: Using ep0 maxpacket: 32 [ 730.161183][T10653] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 730.161212][T10653] usb 3-1: config 0 has no interface number 0 [ 730.161260][T10653] usb 3-1: config 0 interface 184 has no altsetting 0 [ 730.166031][T10653] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 730.166061][T10653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.166083][T10653] usb 3-1: Product: syz [ 730.166098][T10653] usb 3-1: Manufacturer: syz [ 730.166114][T10653] usb 3-1: SerialNumber: syz [ 730.194822][T10653] usb 3-1: config 0 descriptor?? [ 730.695937][T10653] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 730.695967][T10653] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 730.695984][T10653] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 730.696234][T10653] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 732.172737][T10399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 732.213182][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.260655][T10399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 732.335649][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.407718][T10399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 732.532293][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.595370][T10399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 732.777231][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.858764][ T823] usb 3-1: USB disconnect, device number 6 [ 738.794832][T11087] loop2: detected capacity change from 0 to 7 [ 738.795930][T11087] Dev loop2: unable to read RDB block 7 [ 738.795960][T11087] loop2: AHDI p2 p3 [ 738.795988][T11087] loop2: partition table partially beyond EOD, truncated [ 738.796214][T11087] loop2: p3 start 335544320 is beyond EOD, truncated [ 739.124414][T10409] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 739.174421][T10409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.270131][ T8677] bridge_slave_1: left allmulticast mode [ 739.270174][ T8677] bridge_slave_1: left promiscuous mode [ 739.270516][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.350380][ T8677] bridge_slave_0: left allmulticast mode [ 739.350422][ T8677] bridge_slave_0: left promiscuous mode [ 739.375167][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.867115][T11102] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 739.867136][T11102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 739.884568][T11102] vhci_hcd vhci_hcd.0: Device attached [ 739.985940][T11106] loop2: detected capacity change from 0 to 7 [ 739.992715][T11106] Dev loop2: unable to read RDB block 7 [ 739.992767][T11106] loop2: unable to read partition table [ 739.993012][T11106] loop2: partition table beyond EOD, truncated [ 739.993033][T11106] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 740.118524][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 740.118677][T10653] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 740.989949][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 741.384911][ T10] usb 2-1: config 0 has no interfaces? [ 741.384953][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.384980][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.425920][ T10] usb 2-1: config 0 descriptor?? [ 741.571777][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.637553][T11103] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 741.650754][ T48] usb 2-1: USB disconnect, device number 14 [ 741.693290][ T13] vhci_hcd vhci_hcd.1: stop threads [ 741.693317][ T13] vhci_hcd vhci_hcd.1: release socket [ 741.745953][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 741.747439][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.793055][ T8677] bond0 (unregistering): Released all slaves [ 741.836421][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.911176][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.918135][T10409] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 741.957072][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.976654][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.977611][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.083005][T10409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.426945][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.427079][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.427316][T10818] bridge_slave_0: entered allmulticast mode [ 742.434644][T10818] bridge_slave_0: entered promiscuous mode [ 742.566100][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.566277][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.566546][T10818] bridge_slave_1: entered allmulticast mode [ 742.601139][T10818] bridge_slave_1: entered promiscuous mode [ 742.864518][T11129] loop2: detected capacity change from 0 to 7 [ 742.930254][T11129] loop2: [POWERTEC] [ 742.950641][ T8677] hsr_slave_0: left promiscuous mode [ 743.013250][ T8677] hsr_slave_1: left promiscuous mode [ 743.014366][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.073786][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 743.096471][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 743.097786][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 743.128571][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 743.131767][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 743.244318][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.798775][ T5731] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 744.013704][ T5731] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 744.013739][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.070513][ T5731] usb 2-1: config 0 descriptor?? [ 744.077975][ T5731] cp210x 2-1:0.0: cp210x converter detected [ 744.158510][ T5610] Bluetooth: hci0: command tx timeout [ 744.449410][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 744.480186][ T5731] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 744.501834][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 744.549015][ T5731] usb 2-1: cp210x converter now attached to ttyUSB0 [ 744.692895][ T1008] usb 2-1: USB disconnect, device number 15 [ 744.756197][ T1008] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 744.909133][ T1008] cp210x 2-1:0.0: device disconnected [ 745.228052][ T5610] Bluetooth: hci5: command tx timeout [ 745.318454][T10653] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 745.377291][T11160] loop2: detected capacity change from 0 to 7 [ 745.386481][T11160] Dev loop2: unable to read RDB block 7 [ 745.386514][T11160] loop2: AHDI p1 p2 p3 [ 745.386561][T11160] loop2: partition table partially beyond EOD, truncated [ 745.386803][T11160] loop2: p1 start 1818582900 is beyond EOD, truncated [ 745.386825][T11160] loop2: p3 start 335544320 is beyond EOD, truncated [ 745.968212][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.003993][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.206427][T11173] loop2: detected capacity change from 0 to 7 [ 746.221523][T11173] Dev loop2: unable to read RDB block 7 [ 746.221569][T11173] loop2: unable to read partition table [ 746.221803][T11173] loop2: partition table beyond EOD, truncated [ 746.221839][T11173] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 746.284036][T10818] team0: Port device team_slave_0 added [ 746.298183][T10818] team0: Port device team_slave_1 added [ 746.307529][ T5610] Bluetooth: hci0: command tx timeout [ 746.436022][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.436041][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.436071][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.474909][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.476638][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.476724][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.855272][T10818] hsr_slave_0: entered promiscuous mode [ 746.856376][T10818] hsr_slave_1: entered promiscuous mode [ 746.857046][T10818] debugfs: 'hsr0' already exists in 'hsr' [ 746.857065][T10818] Cannot create hsr debugfs directory [ 748.013183][ T5610] Bluetooth: hci5: command tx timeout [ 748.014585][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.014634][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.318503][ T5610] Bluetooth: hci0: command tx timeout [ 748.400498][T11189] netlink: 'syz.2.1214': attribute type 14 has an invalid length. [ 748.400521][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 750.622852][ T5610] Bluetooth: hci5: command tx timeout [ 750.622874][ T5612] Bluetooth: hci0: command tx timeout [ 752.069858][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 752.638539][ T5612] Bluetooth: hci5: command tx timeout [ 758.697181][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.697329][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.697563][T11112] bridge_slave_0: entered allmulticast mode [ 758.743726][T11112] bridge_slave_0: entered promiscuous mode [ 758.861263][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.861378][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.861542][T11132] bridge_slave_0: entered allmulticast mode [ 758.866088][T11132] bridge_slave_0: entered promiscuous mode [ 758.876807][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.877176][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.877636][T11112] bridge_slave_1: entered allmulticast mode [ 758.918108][T11112] bridge_slave_1: entered promiscuous mode [ 758.938599][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.938721][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.938910][T11132] bridge_slave_1: entered allmulticast mode [ 758.953634][T11132] bridge_slave_1: entered promiscuous mode [ 759.124236][T11265] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 759.124267][T11265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.124419][T11265] vhci_hcd vhci_hcd.0: Device attached [ 759.164683][T11266] vhci_hcd: connection closed [ 759.167630][ T171] vhci_hcd vhci_hcd.1: stop threads [ 759.167658][ T171] vhci_hcd vhci_hcd.1: release socket [ 759.167698][ T171] vhci_hcd vhci_hcd.1: disconnect device [ 759.303558][T11112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.364326][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.458752][T11112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.474046][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.969508][T11112] team0: Port device team_slave_0 added [ 759.973467][T11132] team0: Port device team_slave_0 added [ 760.175821][T11112] team0: Port device team_slave_1 added [ 760.188830][T11132] team0: Port device team_slave_1 added [ 760.431073][T10818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 760.452328][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.526536][T10818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 760.579886][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.583583][T11112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.583600][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.583631][T11112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.592282][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.592334][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.592409][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.602824][T10818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 760.707315][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.040290][T11112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.040304][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.040326][T11112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.042093][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.042108][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.042136][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.043237][T10818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.668622][T10818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.472963][T11304] 9p: Bad value for 'rfdno' [ 767.513923][T11112] hsr_slave_0: entered promiscuous mode [ 767.516596][T11112] hsr_slave_1: entered promiscuous mode [ 767.517295][T11112] debugfs: 'hsr0' already exists in 'hsr' [ 767.517313][T11112] Cannot create hsr debugfs directory [ 767.544994][T11132] hsr_slave_0: entered promiscuous mode [ 767.546722][T11132] hsr_slave_1: entered promiscuous mode [ 767.547860][T11132] debugfs: 'hsr0' already exists in 'hsr' [ 767.547887][T11132] Cannot create hsr debugfs directory [ 768.568441][T10653] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 768.746007][T10653] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 768.746040][T10653] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 768.746062][T10653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 768.746114][T10653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 768.746143][T10653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 768.782941][T10653] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 768.783032][T10653] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 768.783094][T10653] usb 2-1: Product: syz [ 768.783136][T10653] usb 2-1: Manufacturer: syz [ 768.923770][T10653] cdc_wdm 2-1:1.0: skipping garbage [ 768.923794][T10653] cdc_wdm 2-1:1.0: skipping garbage [ 768.924682][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 768.986321][T10653] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 768.986347][T10653] cdc_wdm 2-1:1.0: Unknown control protocol [ 769.226046][T10653] usb 2-1: USB disconnect, device number 16 [ 769.618744][ T8677] bridge_slave_1: left allmulticast mode [ 769.618773][ T8677] bridge_slave_1: left promiscuous mode [ 769.618983][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.690351][ T8677] bridge_slave_0: left allmulticast mode [ 769.690392][ T8677] bridge_slave_0: left promiscuous mode [ 769.690661][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.878840][ T8677] bridge_slave_1: left allmulticast mode [ 769.878961][ T8677] bridge_slave_1: left promiscuous mode [ 769.879213][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.951598][ T8677] bridge_slave_0: left allmulticast mode [ 769.951637][ T8677] bridge_slave_0: left promiscuous mode [ 769.951907][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.369343][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.461267][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.555853][ T8677] bond0 (unregistering): Released all slaves [ 771.049387][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.129179][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.194541][ T8677] bond0 (unregistering): Released all slaves [ 771.858482][T11343] 9p: Bad value for 'rfdno' [ 775.908696][ T8677] hsr_slave_0: left promiscuous mode [ 776.019797][ T8677] hsr_slave_1: left promiscuous mode [ 776.020823][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.069599][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.241544][ T8677] hsr_slave_0: left promiscuous mode [ 776.278587][ T8677] hsr_slave_1: left promiscuous mode [ 776.279379][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.330435][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.893071][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 776.962511][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 777.501669][T11366] Bluetooth: MGMT ver 1.23 [ 777.506101][T11366] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 777.709179][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 777.761684][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 778.161001][T10818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.214940][T10818] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.274191][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.274285][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.887394][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.887554][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.014074][T11390] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 781.276671][T11113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 781.316163][T11113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 781.320909][T11113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 781.348892][T11113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 781.359897][T11113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 783.611208][ T5612] Bluetooth: hci1: command tx timeout [ 783.868578][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 784.020451][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 784.040661][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 784.040694][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 784.040719][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 784.040742][ T10] usb 3-1: config 1 has no interface number 0 [ 784.040790][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 784.040820][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 784.040865][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 784.040890][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.163705][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 784.316601][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 785.483376][ T10] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 785.678471][T11113] Bluetooth: hci1: command tx timeout [ 785.774477][ T5789] usb 3-1: USB disconnect, device number 7 [ 785.874889][ T5789] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 787.763328][T11113] Bluetooth: hci1: command tx timeout [ 789.449176][T11112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 789.485152][T11112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.544123][T11112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 789.560006][ T5613] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 789.592244][T11112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.662269][T11112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 789.708415][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 789.712837][ T5613] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 789.712868][ T5613] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 789.712892][ T5613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 789.712915][ T5613] usb 3-1: config 1 has no interface number 0 [ 789.712962][ T5613] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 789.712990][ T5613] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 789.713036][ T5613] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 789.713061][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.814194][T11112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.839061][T11403] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.839259][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.839506][T11403] bridge_slave_0: entered allmulticast mode [ 789.844551][ T5613] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 789.851300][T11113] Bluetooth: hci1: command tx timeout [ 789.872772][T11403] bridge_slave_0: entered promiscuous mode [ 789.909208][T11112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 789.980799][T11112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.981522][T11403] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.981785][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.982156][T11403] bridge_slave_1: entered allmulticast mode [ 789.986879][T11403] bridge_slave_1: entered promiscuous mode [ 790.024628][ T5613] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 790.483868][ T10] usb 3-1: USB disconnect, device number 8 [ 790.505272][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 790.640094][T11403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.678197][T11403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.231620][T11403] team0: Port device team_slave_0 added [ 791.257740][T11403] team0: Port device team_slave_1 added [ 793.115265][T11403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.115282][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.115306][T11403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.289444][T11403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.289464][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.289495][T11403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.292037][T11132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 794.442888][T11132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 794.530126][T11132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 794.583581][T11132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.781442][ T8677] bridge_slave_1: left allmulticast mode [ 794.781479][ T8677] bridge_slave_1: left promiscuous mode [ 794.781765][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.130167][ T8677] bridge_slave_0: left allmulticast mode [ 795.130205][ T8677] bridge_slave_0: left promiscuous mode [ 795.130487][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.238607][T11576] 9p: Bad value for 'rfdno' [ 796.059230][ T67] ------------[ cut here ]------------ [ 796.059246][ T67] time_after(jiffies, timeout) [ 796.059263][ T67] WARNING: io_uring/io_uring.c:2352 at io_ring_exit_work+0x4b9/0x970, CPU#0: kworker/u8:4/67 [ 796.059344][ T67] Modules linked in: [ 796.059364][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 796.059388][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.059404][ T67] Workqueue: iou_exit io_ring_exit_work [ 796.059433][ T67] RIP: 0010:io_ring_exit_work+0x4b9/0x970 [ 796.059463][ T67] Code: c6 05 31 31 48 0e 01 48 c7 c7 e0 f9 a5 8b be 25 00 00 00 48 c7 c2 00 f5 a5 8b e8 72 e2 75 00 e9 7e fe ff ff e8 a8 cb 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 796.059483][ T67] RSP: 0018:ffffc9000152f940 EFLAGS: 00010293 [ 796.059501][ T67] RAX: ffffffff812aa598 RBX: 000000010000c106 RCX: ffff88801b739ec0 [ 796.059518][ T67] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.059531][ T67] RBP: ffffc9000152fad0 R08: 0000000000000000 R09: 0000000000000000 [ 796.059546][ T67] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: dffffc0000000000 [ 796.059563][ T67] R13: 000000010000c101 R14: 0000000000002000 R15: ffff8880314a0000 [ 796.059579][ T67] FS: 0000000000000000(0000) GS:ffff88812617c000(0000) knlGS:0000000000000000 [ 796.059597][ T67] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.059612][ T67] CR2: 00007f494df0011e CR3: 0000000021f6a000 CR4: 00000000003526f0 [ 796.059633][ T67] Call Trace: [ 796.059641][ T67] [ 796.059650][ T67] ? trace_hrtimer_start+0x82/0x200 [ 796.059749][ T67] ? __pfx_io_ring_exit_work+0x10/0x10 [ 796.059806][ T67] ? process_scheduled_works+0xa70/0x1860 [ 796.059848][ T67] ? process_scheduled_works+0xa70/0x1860 [ 796.059874][ T67] process_scheduled_works+0xb5d/0x1860 [ 796.059960][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 796.059995][ T67] ? assign_work+0x3d5/0x5e0 [ 796.060025][ T67] worker_thread+0xa53/0xfc0 [ 796.060082][ T67] kthread+0x388/0x470 [ 796.060113][ T67] ? __pfx_worker_thread+0x10/0x10 [ 796.060137][ T67] ? __pfx_kthread+0x10/0x10 [ 796.060169][ T67] ret_from_fork+0x514/0xb70 [ 796.060215][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 796.060242][ T67] ? __switch_to+0xc79/0x1410 [ 796.060280][ T67] ? __pfx_kthread+0x10/0x10 [ 796.060313][ T67] ret_from_fork_asm+0x1a/0x30 [ 796.060361][ T67] [ 796.060373][ T67] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 796.060389][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 796.060414][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.060428][ T67] Workqueue: iou_exit io_ring_exit_work [ 796.060456][ T67] Call Trace: [ 796.060465][ T67] [ 796.060474][ T67] vpanic+0x56c/0xa60 [ 796.060503][ T67] ? __pfx__printk+0x10/0x10 [ 796.060535][ T67] ? __pfx_vpanic+0x10/0x10 [ 796.060561][ T67] ? is_bpf_text_address+0x292/0x2b0 [ 796.060631][ T67] ? is_bpf_text_address+0x26/0x2b0 [ 796.060671][ T67] panic+0xc5/0xd0 [ 796.060699][ T67] ? __pfx_panic+0x10/0x10 [ 796.060738][ T67] ? ret_from_fork_asm+0x1a/0x30 [ 796.060781][ T67] __warn+0x315/0x4c0 [ 796.060807][ T67] ? io_ring_exit_work+0x4b9/0x970 [ 796.060838][ T67] ? io_ring_exit_work+0x4b9/0x970 [ 796.060870][ T67] __report_bug+0x29a/0x540 [ 796.060950][ T67] ? io_ring_exit_work+0x4b9/0x970 [ 796.060980][ T67] ? __pfx___report_bug+0x10/0x10 [ 796.061023][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 796.061094][ T67] ? io_ring_exit_work+0x4b9/0x970 [ 796.061123][ T67] report_bug+0x16a/0x220 [ 796.061158][ T67] ? io_ring_exit_work+0x4b9/0x970 [ 796.061185][ T67] ? io_ring_exit_work+0x4bb/0x970 [ 796.061213][ T67] handle_bug+0x9c/0x200 [ 796.061240][ T67] exc_invalid_op+0x1a/0x50 [ 796.061266][ T67] asm_exc_invalid_op+0x1a/0x20 [ 796.061289][ T67] RIP: 0010:io_ring_exit_work+0x4b9/0x970 [ 796.061318][ T67] Code: c6 05 31 31 48 0e 01 48 c7 c7 e0 f9 a5 8b be 25 00 00 00 48 c7 c2 00 f5 a5 8b e8 72 e2 75 00 e9 7e fe ff ff e8 a8 cb 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 796.061337][ T67] RSP: 0018:ffffc9000152f940 EFLAGS: 00010293 [ 796.061355][ T67] RAX: ffffffff812aa598 RBX: 000000010000c106 RCX: ffff88801b739ec0 [ 796.061372][ T67] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.061385][ T67] RBP: ffffc9000152fad0 R08: 0000000000000000 R09: 0000000000000000 [ 796.061399][ T67] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: dffffc0000000000 [ 796.061417][ T67] R13: 000000010000c101 R14: 0000000000002000 R15: ffff8880314a0000 [ 796.061442][ T67] ? io_ring_exit_work+0x4b8/0x970 [ 796.061477][ T67] ? trace_hrtimer_start+0x82/0x200 [ 796.061516][ T67] ? __pfx_io_ring_exit_work+0x10/0x10 [ 796.061566][ T67] ? process_scheduled_works+0xa70/0x1860 [ 796.061589][ T67] ? process_scheduled_works+0xa70/0x1860 [ 796.061617][ T67] process_scheduled_works+0xb5d/0x1860 [ 796.061679][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 796.061712][ T67] ? assign_work+0x3d5/0x5e0 [ 796.061744][ T67] worker_thread+0xa53/0xfc0 [ 796.061809][ T67] kthread+0x388/0x470 [ 796.061841][ T67] ? __pfx_worker_thread+0x10/0x10 [ 796.061864][ T67] ? __pfx_kthread+0x10/0x10 [ 796.061897][ T67] ret_from_fork+0x514/0xb70 [ 796.061926][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 796.061952][ T67] ? __switch_to+0xc79/0x1410 [ 796.061990][ T67] ? __pfx_kthread+0x10/0x10 [ 796.062022][ T67] ret_from_fork_asm+0x1a/0x30 [ 796.062071][ T67] [ 796.062654][ T67] Kernel Offset: disabled