last executing test programs: 3m3.614176938s ago: executing program 1 (id=2): pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000006e, 0x0, 0xfffffffffffffffe, 0x1f, 0x4003, 0x0, 0x200, 0x8, 0x8000000000000, 0x80000004010080, 0x0, 0x208, 0x1ffffe, 0x4, 0x7, 0x9], 0x26000, 0x184210}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x800) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 3m1.85704098s ago: executing program 1 (id=14): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x926, 0x2f, 0x1, 0x2, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x9, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x8, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xa00007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) 2m59.126211018s ago: executing program 1 (id=18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m53.201308398s ago: executing program 3 (id=27): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x800) 2m51.735882839s ago: executing program 3 (id=29): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r3) syz_create_resource$binfmt(0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) umount2(0x0, 0x1) ioctl$TCSETAF(r2, 0x5408, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2m50.504988572s ago: executing program 3 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x884) 2m48.60187283s ago: executing program 3 (id=35): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r3 = dup(r0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 2m47.723854387s ago: executing program 3 (id=37): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$nl_netfilter(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x8810) 2m45.978435915s ago: executing program 3 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x800) 2m42.382590141s ago: executing program 32 (id=18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m54.787091234s ago: executing program 0 (id=102): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000180)=0x9, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000140)={0x1}) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) renameat(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)=""/103) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r6, &(0x7f0000000140)=""/87, 0x57) close_range(r4, 0xffffffffffffffff, 0x0) 1m52.818932902s ago: executing program 0 (id=104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000001000010029bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b000000000027c370475d4e88ba6a9312876be9ba0bf448eb2a5a3c24ee492c000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res(0x0, 0x9, 0xfffffffb) 1m50.147599034s ago: executing program 0 (id=105): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000012d80000000000c6"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x6, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0x2, 0xa1d, 0x7, 0x5, 0x79, 0x2000000003, 0x2], 0x3332d000, 0x100282}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x76, 0x3, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0xd, 0xeb, 0x2, 0x2, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xdddd0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x8, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x1c, 0x6, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x9, 0x78, 0x8, 0x0, 0x2, 0x1f, 0xa3, 0xff, 0x5}, {0xe000, 0xeeef0000, 0xa, 0x3, 0x0, 0x0, 0x7, 0x20}, {0x0, 0xdddd0000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0xf0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x100000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000e00)={0x40002, 0x0, {[0x3, 0xfffffffffffffffe, 0x4, 0x8, 0x6, 0x4, 0x718e000, 0xd]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.988486719s ago: executing program 0 (id=106): fsopen(&(0x7f0000001c80)='9p\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, 0x0) ptrace(0x4208, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, 0x0) close(0x3) socket$packet(0x11, 0x2, 0x300) 1m47.402596969s ago: executing program 0 (id=108): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$char_usb(r3, &(0x7f0000000f80)="ce56e8a0a5", 0x5) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) 1m46.386980898s ago: executing program 0 (id=109): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x301) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b7000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 1m31.082467515s ago: executing program 33 (id=109): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x301) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b7000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 12.559846575s ago: executing program 2 (id=211): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r0, 0xa0200) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 12.065813097s ago: executing program 2 (id=212): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1ff}, [@exit]}, &(0x7f0000000140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 11.730157721s ago: executing program 2 (id=213): r0 = socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 8.912419794s ago: executing program 2 (id=214): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x0, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x28000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x10, 0x8f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) 8.441728529s ago: executing program 2 (id=215): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) futex(&(0x7f00000002c0), 0x6, 0x0, &(0x7f0000000440), 0x0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah', 0x4) syz_usb_connect$uac1(0x3, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x81, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc65d, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7f, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x2, "f2e8"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x1, 0x8, {0x7, 0x25, 0x1, 0x8, 0x9, 0x32}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') shutdown(r0, 0x1) getpid() 6.608515144s ago: executing program 2 (id=217): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=ANY=[@ANYBLOB="580000000206050b000000000000000000000001050001000700000011000300686173683a61702c706f7274000000000900020073797a320000000005000400010000000c0007800500ff0700000000000005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x10000080}, 0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) cachestat(r4, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0, 0x56}, 0x2, 0x0, 0x0, 0x1}, 0x4040005) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54ebadd", 0xcb}, {&(0x7f0000001240)="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", 0x1b5}], 0x2}, 0x9cdc2384056b48b8) 6.231779297s ago: executing program 4 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 5.562439577s ago: executing program 4 (id=219): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x10b040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.667111754s ago: executing program 4 (id=220): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r0, 0xa0200) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.817965842s ago: executing program 4 (id=221): openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 2.526443128s ago: executing program 4 (id=222): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 0s ago: executing program 4 (id=223): r0 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 191.109137][ T5560] cgroup: Unknown subsys name 'net' [ 191.240520][ T5560] cgroup: Unknown subsys name 'cpuset' [ 191.256151][ T5560] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.325245][ T5560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.219196][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.231441][ T5579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.249947][ T5579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.271357][ T5579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.286899][ T5579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.427090][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.438597][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.451616][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.471494][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.485531][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.497355][ T5589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.512026][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.556199][ T5579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.575558][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.611019][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.626084][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.627113][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.636977][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.658606][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.667510][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.682502][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.691767][ T5588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.712352][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.740024][ T4878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.766928][ T4878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.263718][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.271992][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.369895][ T5589] Bluetooth: hci0: command tx timeout [ 205.530121][ T5589] Bluetooth: hci1: command tx timeout [ 205.775336][ T5589] Bluetooth: hci2: command tx timeout [ 205.784283][ T5589] Bluetooth: hci3: command tx timeout [ 205.860076][ T5589] Bluetooth: hci4: command tx timeout [ 207.449913][ T5589] Bluetooth: hci0: command tx timeout [ 207.620150][ T5589] Bluetooth: hci1: command tx timeout [ 207.851410][ T5589] Bluetooth: hci3: command tx timeout [ 207.852138][ T4878] Bluetooth: hci2: command tx timeout [ 207.931265][ T4878] Bluetooth: hci4: command tx timeout [ 209.195361][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.213492][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.227257][ T5578] bridge_slave_0: entered allmulticast mode [ 209.237763][ T5578] bridge_slave_0: entered promiscuous mode [ 209.293302][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.305993][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.324954][ T5578] bridge_slave_1: entered allmulticast mode [ 209.344494][ T5578] bridge_slave_1: entered promiscuous mode [ 209.380247][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.401318][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.412348][ T5582] bridge_slave_0: entered allmulticast mode [ 209.437005][ T5582] bridge_slave_0: entered promiscuous mode [ 209.530266][ T4878] Bluetooth: hci0: command tx timeout [ 209.691593][ T4878] Bluetooth: hci1: command tx timeout [ 209.710916][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.718891][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.729891][ T5582] bridge_slave_1: entered allmulticast mode [ 209.738737][ T5582] bridge_slave_1: entered promiscuous mode [ 209.898914][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.930364][ T4878] Bluetooth: hci3: command tx timeout [ 209.939782][ T4878] Bluetooth: hci2: command tx timeout [ 209.942515][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.953284][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.961737][ T5585] bridge_slave_0: entered allmulticast mode [ 209.970856][ T5585] bridge_slave_0: entered promiscuous mode [ 209.983168][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.991223][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.999091][ T5586] bridge_slave_0: entered allmulticast mode [ 210.008835][ T5586] bridge_slave_0: entered promiscuous mode [ 210.019898][ T4878] Bluetooth: hci4: command tx timeout [ 210.060548][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.070408][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.077965][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.086277][ T5583] bridge_slave_0: entered allmulticast mode [ 210.095236][ T5583] bridge_slave_0: entered promiscuous mode [ 210.108501][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.116669][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.124725][ T5585] bridge_slave_1: entered allmulticast mode [ 210.133325][ T5585] bridge_slave_1: entered promiscuous mode [ 210.143802][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.151311][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.158726][ T5586] bridge_slave_1: entered allmulticast mode [ 210.168630][ T5586] bridge_slave_1: entered promiscuous mode [ 210.187995][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.224493][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.232213][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.240540][ T5583] bridge_slave_1: entered allmulticast mode [ 210.249234][ T5583] bridge_slave_1: entered promiscuous mode [ 210.351702][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.512901][ T5578] team0: Port device team_slave_0 added [ 210.528554][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.548304][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.567673][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.622409][ T5578] team0: Port device team_slave_1 added [ 210.636430][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.655074][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.673555][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.691547][ T5582] team0: Port device team_slave_0 added [ 210.817386][ T5582] team0: Port device team_slave_1 added [ 210.992495][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.000133][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.026722][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.047493][ T5583] team0: Port device team_slave_0 added [ 211.062552][ T5585] team0: Port device team_slave_0 added [ 211.077285][ T5586] team0: Port device team_slave_0 added [ 211.086166][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.093871][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.120359][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.135250][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.143008][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.169932][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.190659][ T5583] team0: Port device team_slave_1 added [ 211.205112][ T5585] team0: Port device team_slave_1 added [ 211.219696][ T5586] team0: Port device team_slave_1 added [ 211.228140][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.235737][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.262214][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.510148][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.517271][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.543786][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.562257][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.569396][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.595792][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.610948][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.611152][ T4878] Bluetooth: hci0: command tx timeout [ 211.623930][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.652750][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.667458][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.674671][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.700852][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.719291][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.726627][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.753057][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.770141][ T4878] Bluetooth: hci1: command tx timeout [ 211.833272][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.840515][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.866712][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.011258][ T4878] Bluetooth: hci2: command tx timeout [ 212.017002][ T5589] Bluetooth: hci3: command tx timeout [ 212.024699][ T5582] hsr_slave_0: entered promiscuous mode [ 212.034818][ T5582] hsr_slave_1: entered promiscuous mode [ 212.059065][ T5578] hsr_slave_0: entered promiscuous mode [ 212.068198][ T5578] hsr_slave_1: entered promiscuous mode [ 212.077263][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 212.083229][ T5578] Cannot create hsr debugfs directory [ 212.099939][ T5589] Bluetooth: hci4: command tx timeout [ 212.327581][ T5585] hsr_slave_0: entered promiscuous mode [ 212.341889][ T5585] hsr_slave_1: entered promiscuous mode [ 212.349781][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 212.355703][ T5585] Cannot create hsr debugfs directory [ 212.397549][ T5586] hsr_slave_0: entered promiscuous mode [ 212.406515][ T5586] hsr_slave_1: entered promiscuous mode [ 212.415251][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 212.421290][ T5586] Cannot create hsr debugfs directory [ 212.568068][ T5583] hsr_slave_0: entered promiscuous mode [ 212.577625][ T5583] hsr_slave_1: entered promiscuous mode [ 212.586409][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 212.592398][ T5583] Cannot create hsr debugfs directory [ 213.952685][ T5578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.987347][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.004170][ T5578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.024371][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.035823][ T5578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.060585][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.092885][ T5578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.115863][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.225129][ T5582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.256424][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.268809][ T5582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.295668][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.308445][ T5582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.336016][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.346558][ T5582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.369116][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.611529][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.633365][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.648160][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.675394][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.726814][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.750747][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.784376][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.810913][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.075774][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.099131][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.119232][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.144430][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.192212][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.216620][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.258064][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.282196][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.542479][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.564999][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.612592][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.637693][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.648051][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.670683][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.682653][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.706270][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.789381][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.962872][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.063603][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.071328][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.146391][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.233040][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.240907][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.407240][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.462490][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.470125][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.587563][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.595116][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.754393][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.946866][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.984103][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.126612][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.134136][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.257396][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.265187][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.459928][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.496126][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.598078][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.605759][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.808279][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.816172][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.965762][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.064105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.072407][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.367075][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.375154][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.594649][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.435824][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.510828][ T5578] veth0_vlan: entered promiscuous mode [ 221.692947][ T5578] veth1_vlan: entered promiscuous mode [ 222.415386][ T5578] veth0_macvtap: entered promiscuous mode [ 222.510992][ T5582] veth0_vlan: entered promiscuous mode [ 222.526507][ T5578] veth1_macvtap: entered promiscuous mode [ 222.653135][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.742602][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.829842][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.845594][ T5582] veth1_vlan: entered promiscuous mode [ 222.884258][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.991473][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.022429][ T2978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.032383][ T2978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.073935][ T2978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.088729][ T2978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.684150][ T5582] veth0_macvtap: entered promiscuous mode [ 223.748984][ T5586] veth0_vlan: entered promiscuous mode [ 223.905122][ T5582] veth1_macvtap: entered promiscuous mode [ 223.918061][ T5585] veth0_vlan: entered promiscuous mode [ 224.058528][ T5586] veth1_vlan: entered promiscuous mode [ 224.121784][ T5585] veth1_vlan: entered promiscuous mode [ 224.377417][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.464263][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.608208][ T2978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.617439][ T2978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.678401][ T2978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.691778][ T2978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.766181][ T5586] veth0_macvtap: entered promiscuous mode [ 224.988805][ T5586] veth1_macvtap: entered promiscuous mode [ 225.025376][ T5585] veth0_macvtap: entered promiscuous mode [ 225.126572][ T5585] veth1_macvtap: entered promiscuous mode [ 225.362751][ T5583] veth0_vlan: entered promiscuous mode [ 225.462582][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.564889][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.598224][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.712948][ T5583] veth1_vlan: entered promiscuous mode [ 225.798440][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.830972][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.864405][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.911367][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.950184][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.088690][ T2978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.117136][ T2978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.150073][ T2978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.179385][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.604169][ T5583] veth0_macvtap: entered promiscuous mode [ 226.740910][ T5583] veth1_macvtap: entered promiscuous mode [ 227.077004][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.213390][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.390028][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.448429][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.491499][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.547642][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.856756][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.922975][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.295537][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.326430][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.094370][ T5578] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 232.446225][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.502017][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.833257][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.861538][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.115223][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.165919][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.647458][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.718667][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.845781][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.883507][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.148119][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.184081][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.544883][ T5685] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 235.778586][ T5685] usb 1-1: Using ep0 maxpacket: 8 [ 235.817757][ T5685] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 235.860954][ T5685] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.933476][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.982217][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.028547][ T5685] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.075011][ T5685] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.116921][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.221060][ T5857] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 236.336465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.402256][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.506735][ T5685] usb 1-1: usb_control_msg returned -32 [ 236.536229][ T5685] usbtmc 1-1:16.0: can't read capabilities [ 236.851371][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.864893][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.324676][ T5868] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 237.470703][ T5685] usb 1-1: USB disconnect, device number 2 [ 238.001424][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 238.177016][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.187086][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.599959][ T5899] netlink: 'syz.0.16': attribute type 33 has an invalid length. [ 239.670378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 239.692580][ T5899] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16'. [ 239.790770][ T5900] tipc: Started in network mode [ 239.862796][ T5900] tipc: Node identity 3ea5cc2a17de, cluster identity 4711 [ 240.005486][ T5900] tipc: Enabled bearer , priority 0 [ 240.103948][ T5899] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 240.264469][ T5897] syzkaller0: entered promiscuous mode [ 240.298700][ T5897] syzkaller0: entered allmulticast mode [ 240.701912][ T5897] tipc: Resetting bearer [ 240.787462][ T5894] tipc: Resetting bearer [ 240.962670][ T5894] tipc: Disabling bearer [ 241.181132][ T11] tipc: Node number set to 695979050 [ 241.521729][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 241.744770][ T11] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.782904][ T11] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.837974][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.884136][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.940090][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 242.018401][ T11] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.054045][ T11] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.096166][ T11] usb 1-1: Product: syz [ 242.128710][ T11] usb 1-1: Manufacturer: syz [ 242.204512][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 242.210048][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 242.297682][ T11] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 242.323133][ T11] cdc_wdm 1-1:1.0: Unknown control protocol [ 242.750550][ T5916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'. [ 243.228402][ T2070] usb 1-1: USB disconnect, device number 3 [ 243.726365][ T2070] IPVS: starting estimator thread 0... [ 243.854609][ T5923] IPVS: using max 288 ests per chain, 14400 per kthread [ 243.869710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.082172][ T2070] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 246.316285][ T2070] usb 3-1: Using ep0 maxpacket: 32 [ 246.447868][ T2070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 246.505717][ T2070] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 246.578796][ T2070] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 246.637060][ T2070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.680036][ T2070] usb 3-1: Product: syz [ 246.707021][ T2070] usb 3-1: Manufacturer: syz [ 246.740945][ T2070] usb 3-1: SerialNumber: syz [ 247.234582][ T2070] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 247.298807][ T2070] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 247.332025][ T2070] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 248.215024][ T2070] usb 3-1: USB disconnect, device number 2 [ 249.072455][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.447281][ T5956] macvlan2: entered promiscuous mode [ 249.501406][ T5956] macvlan2: entered allmulticast mode [ 249.540020][ T5956] bond0: entered allmulticast mode [ 249.571866][ T5956] bond_slave_0: entered allmulticast mode [ 249.615508][ T5956] bond_slave_1: entered allmulticast mode [ 249.653618][ T5956] bond_slave_0: entered promiscuous mode [ 249.659959][ T5956] bond_slave_1: entered promiscuous mode [ 249.741351][ T5956] bond0: entered promiscuous mode [ 249.863014][ T5956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.057945][ T5956] team0: Port device macvlan2 added [ 251.601405][ T2070] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 251.930118][ T2070] usb 1-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 251.967654][ T2070] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.028709][ T2070] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.064407][ T2070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.083540][ T2070] usb 1-1: Product: syz [ 252.107287][ T2070] usb 1-1: Manufacturer: syz [ 252.126577][ T2070] usb 1-1: SerialNumber: syz [ 252.205980][ T2070] usb 1-1: config 0 descriptor?? [ 253.435269][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.781094][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.092567][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.454625][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.002754][ T2070] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 255.067800][ T2070] usb 1-1: USB disconnect, device number 4 [ 255.358235][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.447506][ T12] bridge_slave_1: left allmulticast mode [ 255.475283][ T12] bridge_slave_1: left promiscuous mode [ 255.499668][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.562302][ T12] bridge_slave_0: left allmulticast mode [ 255.594107][ T12] bridge_slave_0: left promiscuous mode [ 255.630376][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.679969][ T12] bond0 (unregistering): left allmulticast mode [ 256.694119][ T12] bond_slave_0: left allmulticast mode [ 256.710043][ T12] bond_slave_1: left allmulticast mode [ 256.720129][ T12] bond0 (unregistering): left promiscuous mode [ 256.743240][ T12] bond_slave_0: left promiscuous mode [ 256.781106][ T12] bond_slave_1: left promiscuous mode [ 256.892947][ T12] team0: Port device macvlan2 removed [ 257.095861][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.195900][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.312119][ T12] bond0 (unregistering): Released all slaves [ 258.952997][ T12] hsr_slave_0: left promiscuous mode [ 259.034296][ T12] hsr_slave_1: left promiscuous mode [ 259.091516][ T4878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.106383][ T4878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.108827][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.145137][ T4878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.174195][ T4878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.199100][ T4878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.292928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.363298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.385530][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.408777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.420204][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.445872][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.483781][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.507621][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.521556][ T12] veth1_macvtap: left promiscuous mode [ 259.536611][ T12] veth0_macvtap: left promiscuous mode [ 259.543594][ T12] veth1_vlan: left promiscuous mode [ 259.551840][ T12] veth0_vlan: left promiscuous mode [ 261.292539][ T4878] Bluetooth: hci1: command tx timeout [ 261.610915][ T4878] Bluetooth: hci5: command tx timeout [ 262.471885][ T12] team0 (unregistering): Port device team_slave_1 removed [ 262.842103][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.330846][ T6013] netlink: 184 bytes leftover after parsing attributes in process `syz.2.46'. [ 263.371705][ T4878] Bluetooth: hci1: command tx timeout [ 263.689908][ T4878] Bluetooth: hci5: command tx timeout [ 265.198068][ T6022] loop0: detected capacity change from 0 to 32768 [ 265.206845][ T6022] ======================================================= [ 265.206845][ T6022] WARNING: The mand mount option has been deprecated and [ 265.206845][ T6022] and is ignored by this kernel. Remove the mand [ 265.206845][ T6022] option from the mount to silence this warning. [ 265.206845][ T6022] ======================================================= [ 265.306337][ T6022] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 265.334974][ T6022] JBD2: Ignoring recovery information on journal [ 265.450535][ T4878] Bluetooth: hci1: command tx timeout [ 265.504027][ T6022] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 265.583466][ T29] audit: type=1800 audit(1781616321.522:2): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.47" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 265.714274][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.726447][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.769814][ T4878] Bluetooth: hci5: command tx timeout [ 266.004905][ T12] IPVS: stop unused estimator thread 0... [ 266.194933][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 266.623953][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.846454][ T5578] ocfs2: Unmounting device (7,0) on (node local) [ 267.070147][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.396828][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.533637][ T4878] Bluetooth: hci1: command tx timeout [ 267.695221][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.856436][ T4878] Bluetooth: hci5: command tx timeout [ 268.736033][ T55] bridge_slave_1: left allmulticast mode [ 268.791273][ T55] bridge_slave_1: left promiscuous mode [ 268.836392][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.942297][ T55] bridge_slave_0: left allmulticast mode [ 268.982855][ T55] bridge_slave_0: left promiscuous mode [ 269.009619][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.974542][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.090345][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.223285][ T55] bond0 (unregistering): Released all slaves [ 273.631339][ T55] hsr_slave_0: left promiscuous mode [ 273.677689][ T55] hsr_slave_1: left promiscuous mode [ 273.707212][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.728877][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.781588][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.799786][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.922486][ T55] veth1_macvtap: left promiscuous mode [ 273.943528][ T55] veth0_macvtap: left promiscuous mode [ 273.978567][ T55] veth1_vlan: left promiscuous mode [ 273.984761][ T55] veth0_vlan: left promiscuous mode [ 274.294908][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 276.966953][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 277.113588][ T55] team0 (unregistering): Port device team_slave_1 removed [ 277.152682][ T55] team0 (unregistering): Port device team_slave_0 removed [ 277.207885][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.220081][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.241650][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.271637][ T11] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.291693][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.361550][ T11] usb 3-1: config 0 descriptor?? [ 277.872467][ T11] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 277.913787][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.809163][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 279.170904][ T5675] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 279.411548][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.450071][ T5675] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 279.477470][ T5675] usb 1-1: can't read configurations, error -71 [ 279.877590][ T2070] usb 3-1: USB disconnect, device number 3 [ 280.884036][ T6118] bridge0: port 3(netdevsim3) entered blocking state [ 280.903554][ T6118] bridge0: port 3(netdevsim3) entered disabled state [ 280.938417][ T6118] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 281.024671][ T6118] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 281.056833][ T6118] bridge0: port 3(netdevsim3) entered blocking state [ 281.064390][ T6118] bridge0: port 3(netdevsim3) entered forwarding state [ 281.988317][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 282.414094][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.457520][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.511957][ T5987] bridge_slave_0: entered allmulticast mode [ 282.560976][ T5987] bridge_slave_0: entered promiscuous mode [ 282.636268][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.657511][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.685391][ T5987] bridge_slave_1: entered allmulticast mode [ 282.718756][ T5987] bridge_slave_1: entered promiscuous mode [ 283.082263][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 283.278245][ T11] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 283.305485][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.323764][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.374459][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.439949][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.468798][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.606187][ T11] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.700331][ T11] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.852574][ T11] usb 5-1: Manufacturer: syz [ 283.911220][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.929224][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.942500][ T11] usb 5-1: config 0 descriptor?? [ 283.948597][ T5984] bridge_slave_0: entered allmulticast mode [ 283.978913][ T5984] bridge_slave_0: entered promiscuous mode [ 284.770016][ T11] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 284.854734][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.865241][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.897551][ T5984] bridge_slave_1: entered allmulticast mode [ 284.905712][ T11] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 284.956782][ T5984] bridge_slave_1: entered promiscuous mode [ 285.273717][ T5987] team0: Port device team_slave_0 added [ 285.465363][ T5675] usb 5-1: USB disconnect, device number 2 [ 285.493711][ T5987] team0: Port device team_slave_1 added [ 285.590075][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.968348][ T6154] fido_id[6154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 286.288821][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.467936][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.495805][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.524985][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.550222][ T5232] 8021q: adding VLAN 0 to HW filter on device eth3 [ 286.676787][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.708795][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.781660][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.897469][ T5984] team0: Port device team_slave_0 added [ 287.013171][ T5984] team0: Port device team_slave_1 added [ 287.509849][ T5987] hsr_slave_0: entered promiscuous mode [ 287.535126][ T5987] hsr_slave_1: entered promiscuous mode [ 287.578175][ T6167] loop4: detected capacity change from 0 to 164 [ 287.664501][ T6167] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 287.712318][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.732793][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.766495][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.805470][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.823000][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.860959][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.746329][ T5984] hsr_slave_0: entered promiscuous mode [ 288.780106][ T5984] hsr_slave_1: entered promiscuous mode [ 288.804700][ T5984] debugfs: 'hsr0' already exists in 'hsr' [ 288.810968][ T5984] Cannot create hsr debugfs directory [ 290.748151][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 290.933309][ T6188] loop0: detected capacity change from 0 to 512 [ 291.005437][ T6188] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 291.076380][ T6188] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.275813][ T6188] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 291.393026][ T6188] EXT4-fs (loop0): 1 truncate cleaned up [ 291.427228][ T6188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.441052][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 293.012047][ T5987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.418723][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.513630][ T5987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.815880][ T6208] loop4: detected capacity change from 0 to 164 [ 293.879152][ T6208] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 294.506861][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.534598][ T5987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.075169][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.094593][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.243250][ T5987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.379107][ T5987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.631458][ T6222] tipc: Started in network mode [ 296.652071][ T6222] tipc: Node identity 96b4cfd4ad85, cluster identity 4711 [ 296.662944][ T6222] tipc: Enabled bearer , priority 0 [ 296.775173][ T6223] syzkaller0: entered promiscuous mode [ 296.796082][ T6223] syzkaller0: entered allmulticast mode [ 296.846797][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 296.930803][ T6232] tipc: Resetting bearer [ 297.080732][ T6221] tipc: Resetting bearer [ 297.163916][ T6221] tipc: Disabling bearer [ 297.597446][ T5984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.674756][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.707090][ T5984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.793834][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.843253][ T5984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.958168][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.052377][ T5984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.130983][ T5984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.308561][ T6246] loop2: detected capacity change from 0 to 164 [ 298.403775][ T6246] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 298.663959][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.193665][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.414735][ T6250] loop4: detected capacity change from 0 to 512 [ 299.495217][ T6250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 299.502260][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.513106][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.596484][ T6250] EXT4-fs (loop4): 1 truncate cleaned up [ 299.616921][ T6250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.985412][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.993390][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.480427][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 301.154037][ T5583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.373454][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.661748][ T2070] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 302.750816][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.988562][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.996069][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.190086][ T2070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.215556][ T2070] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.279270][ T2070] usb 5-1: New USB device found, idVendor=09ef, idProduct=022b, bcdDevice= 0.00 [ 303.292897][ T2070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.308216][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.315761][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.389073][ T2070] usb 5-1: config 0 descriptor?? [ 303.796772][ T5232] 8021q: adding VLAN 0 to HW filter on device eth5 [ 308.754526][ T6297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.795982][ T6297] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 308.958870][ T6297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.023078][ T6297] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 309.166487][ T6297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 309.218999][ T6297] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 310.117071][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.399134][ T6297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.478019][ T6297] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 310.606657][ T6297] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 310.646374][ T6297] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 310.666434][ T29] audit: type=1326 audit(1781616366.612:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.106" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa70359ce59 code=0x0 [ 310.746284][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 312.187276][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.192573][ T5984] veth0_vlan: entered promiscuous mode [ 313.428205][ T5984] veth1_vlan: entered promiscuous mode [ 313.453750][ T5685] usb 5-1: USB disconnect, device number 3 [ 313.542899][ T5678] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 313.758693][ T5678] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 313.811931][ T5678] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.865977][ T5678] usb 1-1: config 0 has no interface number 0 [ 313.907898][ T5678] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 313.958326][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.016109][ T5678] usb 1-1: config 0 descriptor?? [ 314.159006][ T5678] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 314.654435][ T5984] veth0_macvtap: entered promiscuous mode [ 315.210394][ T157] usb 1-1: Failed to submit usb control message: -110 [ 315.248708][ T157] usb 1-1: unable to send the bmi data to the device: -110 [ 315.305567][ T157] usb 1-1: unable to get target info from device [ 315.370902][ T157] usb 1-1: could not get target info (-110) [ 315.410517][ T157] usb 1-1: could not probe fw (-110) [ 315.595899][ T5987] veth0_vlan: entered promiscuous mode [ 315.640532][ T6365] tap0: tun_chr_ioctl cmd 1074025677 [ 315.655697][ T6365] tap0: linktype set to 769 [ 315.746152][ T5984] veth1_macvtap: entered promiscuous mode [ 316.142284][ T5987] veth1_vlan: entered promiscuous mode [ 316.510755][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.724843][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.934153][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.978053][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.103290][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.175160][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.424605][ T5232] 8021q: adding VLAN 0 to HW filter on device eth7 [ 319.870008][ T5589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.887786][ T5589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.903573][ T5589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.942101][ T5589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.961580][ T5589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.056815][ T4878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.068680][ T4878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.117622][ T4878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.144286][ T4878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.165554][ T4878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.752608][ T4878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.774826][ T4878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.785533][ T4878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.807993][ T4878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.822238][ T4878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.250639][ T5589] Bluetooth: hci3: command tx timeout [ 322.891873][ T5589] Bluetooth: hci6: command tx timeout [ 324.342633][ T5589] Bluetooth: hci3: command tx timeout [ 324.972664][ T5589] Bluetooth: hci6: command tx timeout [ 326.409858][ T5589] Bluetooth: hci3: command tx timeout [ 327.036164][ T56] bridge_slave_1: left allmulticast mode [ 327.060486][ T5589] Bluetooth: hci6: command tx timeout [ 327.066793][ T56] bridge_slave_1: left promiscuous mode [ 327.079060][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.138557][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.146162][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.207607][ T56] bridge_slave_0: left allmulticast mode [ 327.234315][ T56] bridge_slave_0: left promiscuous mode [ 327.261481][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.490039][ T5589] Bluetooth: hci3: command tx timeout [ 328.606858][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.672569][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.778662][ T56] bond0 (unregistering): Released all slaves [ 329.116375][ T5678] usb 1-1: USB disconnect, device number 7 [ 329.136613][ T5589] Bluetooth: hci6: command tx timeout [ 329.395201][ T5232] 8021q: adding VLAN 0 to HW filter on device eth8 [ 330.187933][ T4878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.199926][ T4878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.207378][ T56] hsr_slave_0: left promiscuous mode [ 330.229242][ T4878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.258975][ T4878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.293654][ T56] hsr_slave_1: left promiscuous mode [ 330.316512][ T4878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.476022][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.712148][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.423531][ T56] veth1_vlan: left promiscuous mode [ 331.520242][ T56] veth0_vlan: left promiscuous mode [ 332.411420][ T5589] Bluetooth: hci1: command tx timeout [ 334.213380][ T56] team0 (unregistering): Port device team_slave_1 removed [ 334.288424][ T56] team0 (unregistering): Port device team_slave_0 removed [ 334.494795][ T5589] Bluetooth: hci1: command tx timeout [ 336.380198][ T56] bridge0: port 3(netdevsim3) entered disabled state [ 336.423681][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): left allmulticast mode [ 336.448017][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): left promiscuous mode [ 336.470468][ T56] bridge0: port 3(netdevsim3) entered disabled state [ 336.545979][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.586161][ T5589] Bluetooth: hci1: command tx timeout [ 336.879195][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.137188][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.647767][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.660850][ T5589] Bluetooth: hci1: command tx timeout [ 338.843362][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 339.089287][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.147608][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.168135][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.197070][ T11] usb 5-1: Product: syz [ 339.213117][ T11] usb 5-1: Manufacturer: syz [ 339.236580][ T11] usb 5-1: SerialNumber: syz [ 340.317497][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.379144][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.405909][ T6382] bridge_slave_0: entered allmulticast mode [ 340.445597][ T6382] bridge_slave_0: entered promiscuous mode [ 340.648610][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.852183][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.906291][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.973367][ T6382] bridge_slave_1: entered allmulticast mode [ 341.022220][ T6382] bridge_slave_1: entered promiscuous mode [ 341.427130][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.914072][ T11] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 341.963342][ T11] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 342.098689][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.344423][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.387004][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.413558][ T6388] bridge_slave_0: entered allmulticast mode [ 342.448513][ T6388] bridge_slave_0: entered promiscuous mode [ 342.608369][ T11] usb 5-1: USB disconnect, device number 4 [ 342.768567][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.896925][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.630197][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.660190][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.684404][ T6388] bridge_slave_1: entered allmulticast mode [ 344.743311][ T6388] bridge_slave_1: entered promiscuous mode [ 344.846780][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.976379][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.251818][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.385209][ T6382] team0: Port device team_slave_0 added [ 346.567835][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.922306][ T6382] team0: Port device team_slave_1 added [ 347.754929][ T6388] team0: Port device team_slave_0 added [ 347.791744][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.824182][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.985984][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.206442][ T6388] team0: Port device team_slave_1 added [ 348.233745][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.254065][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.342251][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.057840][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.083524][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.156404][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.235690][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.255035][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.281828][ T6475] bridge_slave_0: entered allmulticast mode [ 349.296370][ T6475] bridge_slave_0: entered promiscuous mode [ 349.337950][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.358225][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.440167][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.718326][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.751058][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.770793][ T6475] bridge_slave_1: entered allmulticast mode [ 349.798059][ T6475] bridge_slave_1: entered promiscuous mode [ 349.889146][ T56] bridge_slave_1: left allmulticast mode [ 349.895684][ T56] bridge_slave_1: left promiscuous mode [ 349.911133][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.957094][ T56] bridge_slave_0: left allmulticast mode [ 349.988841][ T56] bridge_slave_0: left promiscuous mode [ 350.003612][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.069826][ T56] bridge_slave_1: left allmulticast mode [ 350.106322][ T56] bridge_slave_1: left promiscuous mode [ 350.128098][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.181645][ T56] bridge_slave_0: left allmulticast mode [ 350.193388][ T56] bridge_slave_0: left promiscuous mode [ 350.217421][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.541339][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 351.266073][ T6661] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 351.266073][ T6661] program syz.2.144 not setting count and/or reply_len properly [ 351.548158][ T6663] 9p: Bad value for 'rfdno' [ 351.820124][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.823415][ T6665] Zero length message leads to an empty skb [ 351.857029][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.875398][ T56] bond0 (unregistering): Released all slaves [ 352.237066][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.297450][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.335550][ T56] bond0 (unregistering): Released all slaves [ 352.392887][ T6382] hsr_slave_0: entered promiscuous mode [ 352.405155][ T6382] hsr_slave_1: entered promiscuous mode [ 352.722126][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.821349][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.963254][ T6388] hsr_slave_0: entered promiscuous mode [ 354.014154][ T6388] hsr_slave_1: entered promiscuous mode [ 354.051224][ T6388] debugfs: 'hsr0' already exists in 'hsr' [ 354.076722][ T6388] Cannot create hsr debugfs directory [ 354.272967][ T6475] team0: Port device team_slave_0 added [ 354.436032][ T6475] team0: Port device team_slave_1 added [ 355.156381][ T56] hsr_slave_0: left promiscuous mode [ 355.198226][ T56] hsr_slave_1: left promiscuous mode [ 355.231699][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.267806][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.317142][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.331039][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.387787][ T56] hsr_slave_0: left promiscuous mode [ 355.428298][ T56] hsr_slave_1: left promiscuous mode [ 355.474720][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.501211][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.528552][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.555943][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.681700][ T56] veth1_macvtap: left promiscuous mode [ 355.700257][ T56] veth0_macvtap: left promiscuous mode [ 355.707891][ T56] veth1_vlan: left promiscuous mode [ 355.716802][ T56] veth0_vlan: left promiscuous mode [ 355.728916][ T56] veth1_macvtap: left promiscuous mode [ 355.740152][ T56] veth0_macvtap: left promiscuous mode [ 355.754601][ T56] veth1_vlan: left promiscuous mode [ 355.776014][ T56] veth0_vlan: left promiscuous mode [ 357.744547][ T6705] 9p: Bad value for 'rfdno' [ 359.688418][ T56] team0 (unregistering): Port device team_slave_1 removed [ 359.777981][ T56] team0 (unregistering): Port device team_slave_0 removed [ 361.534301][ T56] team0 (unregistering): Port device team_slave_1 removed [ 361.617130][ T56] team0 (unregistering): Port device team_slave_0 removed [ 362.422837][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.452752][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.532263][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.841077][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.873910][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.956005][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.583893][ T6475] hsr_slave_0: entered promiscuous mode [ 364.627218][ T6475] hsr_slave_1: entered promiscuous mode [ 364.662444][ T6475] debugfs: 'hsr0' already exists in 'hsr' [ 364.683486][ T6475] Cannot create hsr debugfs directory [ 367.938024][ T6388] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.035826][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.045141][ T6755] 9p: Bad value for 'rfdno' [ 368.056123][ T6388] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.087992][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.133050][ T6388] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.192120][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.265255][ T6388] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.366816][ T6388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.794690][ T6382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.882456][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.933348][ T6382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.048741][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.086029][ T6382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.223862][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.382421][ T6382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.480001][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.594848][ T2070] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 369.801024][ T2070] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.825263][ T2070] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.843736][ T2070] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 369.872094][ T2070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.924067][ T2070] usb 3-1: config 0 descriptor?? [ 370.120845][ T6475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.164644][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.228929][ T6475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 370.298067][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.347147][ T6475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 370.383562][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.447331][ T2070] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 370.475286][ T2070] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 370.485344][ T2070] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 370.493395][ T2070] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 370.496433][ T6475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 370.506534][ T2070] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 370.517278][ T2070] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 370.538219][ T2070] greenasia 0003:0E8F:0012.0003: unexpected long global item [ 370.565412][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.572850][ T2070] greenasia 0003:0E8F:0012.0003: parse failed [ 370.573349][ T2070] greenasia 0003:0E8F:0012.0003: probe with driver greenasia failed with error -22 [ 370.698355][ T5685] usb 3-1: USB disconnect, device number 4 [ 371.722993][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.046781][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.075515][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.262667][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.270581][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.496085][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.504016][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.611842][ T5232] 8021q: adding VLAN 0 to HW filter on device eth9 [ 372.656309][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.841478][ T11] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 372.859569][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.867345][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.958859][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.040888][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 373.067225][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.075454][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.090846][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 373.106057][ T11] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 373.134055][ T11] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 373.161602][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.174439][ T11] usb 3-1: Product: syz [ 373.182004][ T11] usb 3-1: Manufacturer: syz [ 373.186927][ T11] usb 3-1: SerialNumber: syz [ 373.542516][ T11] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 373.573690][ T11] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 373.602166][ T11] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 373.698689][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.984784][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.992717][ T6506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.205076][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.212925][ T6506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.227786][ T11] usb 3-1: USB disconnect, device number 5 [ 374.769280][ T6769] udevd[6769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.787367][ T6808] netlink: 320 bytes leftover after parsing attributes in process `syz.2.175'. [ 377.221215][ T40] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 377.420122][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 377.485615][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.550758][ T40] usb 3-1: config 0 has no interfaces? [ 377.645281][ T40] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 377.697561][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.750020][ T40] usb 3-1: Product: syz [ 377.791541][ T40] usb 3-1: Manufacturer: syz [ 377.808054][ T40] usb 3-1: SerialNumber: syz [ 377.868969][ T40] usb 3-1: config 0 descriptor?? [ 378.220194][ T5675] usb 3-1: USB disconnect, device number 6 [ 380.138074][ T5232] 8021q: adding VLAN 0 to HW filter on device eth10 [ 380.493724][ T4878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.520163][ T4878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.536867][ T4878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.566131][ T4878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.587802][ T4878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.085245][ T4878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.098861][ T4878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.115593][ T4878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.156585][ T4878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.182816][ T4878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.650076][ T4878] Bluetooth: hci0: command tx timeout [ 383.293028][ T4878] Bluetooth: hci5: command tx timeout [ 383.404312][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.732394][ T4878] Bluetooth: hci0: command tx timeout [ 385.374161][ T4878] Bluetooth: hci5: command tx timeout [ 386.798388][ T6895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.817878][ T4878] Bluetooth: hci0: command tx timeout [ 387.065896][ T6494] bridge_slave_1: left allmulticast mode [ 387.076530][ T6494] bridge_slave_1: left promiscuous mode [ 387.090746][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.107401][ T6494] bridge_slave_0: left allmulticast mode [ 387.114083][ T6494] bridge_slave_0: left promiscuous mode [ 387.122573][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.262207][ T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 387.450999][ T4878] Bluetooth: hci5: command tx timeout [ 387.463233][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 387.519020][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.585491][ T11] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 387.653489][ T11] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 387.685381][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.707167][ T11] usb 5-1: Product: syz [ 387.718155][ T11] usb 5-1: Manufacturer: syz [ 387.757754][ T11] usb 5-1: SerialNumber: syz [ 388.021490][ T6494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.082110][ T6494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.093709][ T11] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 388.115017][ T11] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 388.135440][ T11] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 388.143306][ T6494] bond0 (unregistering): Released all slaves [ 388.296647][ T5232] 8021q: adding VLAN 0 to HW filter on device eth11 [ 388.465535][ T6494] hsr_slave_0: left promiscuous mode [ 388.520351][ T6494] hsr_slave_1: left promiscuous mode [ 388.558890][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.588018][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.604020][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.647136][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.662859][ T11] usb 5-1: USB disconnect, device number 5 [ 388.890262][ T4878] Bluetooth: hci0: command tx timeout [ 388.960279][ T6621] udevd[6621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.412027][ T11] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 389.530235][ T4878] Bluetooth: hci5: command tx timeout [ 389.636255][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 389.693256][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.734723][ T11] usb 3-1: config 0 has no interfaces? [ 389.791159][ T11] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 389.814650][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.828896][ T11] usb 3-1: Product: syz [ 389.834800][ T11] usb 3-1: Manufacturer: syz [ 389.848245][ T11] usb 3-1: SerialNumber: syz [ 389.911008][ T11] usb 3-1: config 0 descriptor?? [ 390.011397][ T5589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.027751][ T5589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.040294][ T5589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.070367][ T5589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.085881][ T5589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.202577][ T11] usb 3-1: USB disconnect, device number 7 [ 390.493208][ T6494] team0 (unregistering): Port device team_slave_1 removed [ 390.582337][ T6494] team0 (unregistering): Port device team_slave_0 removed [ 392.052477][ T6934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.171410][ T5589] Bluetooth: hci3: command tx timeout [ 393.863326][ T5675] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 394.080506][ T5675] usb 3-1: Using ep0 maxpacket: 32 [ 394.137690][ T5675] usb 3-1: unable to get BOS descriptor or descriptor too short [ 394.204325][ T5675] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 394.251796][ T5589] Bluetooth: hci3: command tx timeout [ 394.258315][ T5675] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 394.280002][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.288446][ T5675] usb 3-1: Product: syz [ 394.301852][ T5675] usb 3-1: Manufacturer: syz [ 394.320477][ T5675] usb 3-1: SerialNumber: syz [ 394.678812][ T5675] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 394.713323][ T5675] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 394.755711][ T5675] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 395.532074][ T5675] usb 3-1: USB disconnect, device number 8 [ 395.670443][ T6915] udevd[6915]: setting owner of /dev/bus/usb/003/008 to uid=0, gid=0 failed: No such file or directory [ 396.102430][ T6916] udevd[6916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.335776][ T5589] Bluetooth: hci3: command tx timeout [ 396.418959][ T6495] bridge_slave_1: left allmulticast mode [ 396.423872][ T5675] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 396.457733][ T6495] bridge_slave_1: left promiscuous mode [ 396.472475][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.509923][ T6495] bridge_slave_0: left allmulticast mode [ 396.516106][ T6495] bridge_slave_0: left promiscuous mode [ 396.523733][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.599949][ T5675] usb 3-1: Using ep0 maxpacket: 16 [ 396.632380][ T5675] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.660210][ T5675] usb 3-1: config 0 has no interfaces? [ 396.686794][ T5675] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 396.705620][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.726340][ T5675] usb 3-1: Product: syz [ 396.738493][ T5675] usb 3-1: Manufacturer: syz [ 396.751797][ T5675] usb 3-1: SerialNumber: syz [ 396.781938][ T5675] usb 3-1: config 0 descriptor?? [ 397.017902][ T5675] usb 3-1: USB disconnect, device number 9 [ 397.421736][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.488420][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.551253][ T6495] bond0 (unregistering): Released all slaves [ 398.270356][ T6986] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 398.410095][ T5589] Bluetooth: hci3: command tx timeout [ 398.447174][ T6495] hsr_slave_0: left promiscuous mode [ 398.463258][ T6495] hsr_slave_1: left promiscuous mode [ 398.473982][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.486304][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.037241][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.491048][ T6495] team0 (unregistering): Port device team_slave_1 removed [ 399.532176][ T6495] team0 (unregistering): Port device team_slave_0 removed [ 400.084439][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.116030][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.138531][ T6849] bridge_slave_0: entered allmulticast mode [ 400.181028][ T6849] bridge_slave_0: entered promiscuous mode [ 400.280345][ T5232] 8021q: adding VLAN 0 to HW filter on device eth12 [ 400.450582][ T5675] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 400.496137][ T6996] warning: `syz.2.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 400.555460][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.563848][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.572397][ T6849] bridge_slave_1: entered allmulticast mode [ 400.583073][ T6849] bridge_slave_1: entered promiscuous mode [ 400.626166][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 400.654899][ T5675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 400.680796][ T5675] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 400.708036][ T5675] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 400.735213][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.755459][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.767741][ T5675] usb 5-1: Product: syz [ 400.770261][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.787708][ T5675] usb 5-1: Manufacturer: syz [ 400.788266][ T6854] bridge_slave_0: entered allmulticast mode [ 400.805500][ T5675] usb 5-1: SerialNumber: syz [ 400.809029][ T6854] bridge_slave_0: entered promiscuous mode [ 400.930326][ T6849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.956599][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.991406][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.011732][ T6854] bridge_slave_1: entered allmulticast mode [ 401.027548][ T6854] bridge_slave_1: entered promiscuous mode [ 401.162571][ T5675] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 401.187016][ T6849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.188455][ T5675] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 401.258614][ T5675] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 401.558081][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.803256][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.816407][ T5675] usb 5-1: USB disconnect, device number 6 [ 402.066399][ T6849] team0: Port device team_slave_0 added [ 402.212196][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.581058][ T6849] team0: Port device team_slave_1 added [ 402.708701][ T6854] team0: Port device team_slave_0 added [ 402.967339][ T6854] team0: Port device team_slave_1 added [ 403.119277][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.143092][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.208359][ T6849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.278115][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.307018][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.395392][ T6849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.688522][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.726873][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.789711][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.843548][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.859236][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.926366][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.843033][ T6849] hsr_slave_0: entered promiscuous mode [ 404.865386][ T6849] hsr_slave_1: entered promiscuous mode [ 405.662861][ T6854] hsr_slave_0: entered promiscuous mode [ 405.697324][ T6854] hsr_slave_1: entered promiscuous mode [ 405.735017][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 405.765861][ T6854] Cannot create hsr debugfs directory [ 407.499590][ T6495] bridge_slave_1: left allmulticast mode [ 407.510986][ T6495] bridge_slave_1: left promiscuous mode [ 407.531023][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.552617][ T6495] bridge_slave_0: left allmulticast mode [ 407.561096][ T6495] bridge_slave_0: left promiscuous mode [ 407.568517][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.292516][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.313040][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.334910][ T6495] bond0 (unregistering): Released all slaves [ 408.553181][ T5232] 8021q: adding VLAN 0 to HW filter on device eth13 [ 408.714274][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.722770][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.788701][ T6918] bridge_slave_0: entered allmulticast mode [ 408.808562][ T6918] bridge_slave_0: entered promiscuous mode [ 408.962464][ T6495] hsr_slave_0: left promiscuous mode [ 409.017117][ T6495] hsr_slave_1: left promiscuous mode [ 409.034298][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.047507][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.958249][ T6495] team0 (unregistering): Port device team_slave_1 removed [ 409.998495][ T6495] team0 (unregistering): Port device team_slave_0 removed [ 410.550585][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.564294][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.603930][ T6918] bridge_slave_1: entered allmulticast mode [ 410.620046][ T6918] bridge_slave_1: entered promiscuous mode [ 411.128963][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.167366][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.200261][ T2070] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 411.361732][ T2070] usb 3-1: Using ep0 maxpacket: 32 [ 411.393532][ T2070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.407480][ T2070] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 411.433941][ T2070] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 411.443936][ T2070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.454433][ T2070] usb 3-1: Product: syz [ 411.458889][ T2070] usb 3-1: Manufacturer: syz [ 411.465224][ T2070] usb 3-1: SerialNumber: syz [ 411.505582][ T6918] team0: Port device team_slave_0 added [ 411.577757][ T6918] team0: Port device team_slave_1 added [ 411.762742][ T2070] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 411.774078][ T2070] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 411.801623][ T2070] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 412.005982][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.045220][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.132924][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.267789][ T2070] usb 3-1: USB disconnect, device number 10 [ 412.291728][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.327753][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.478851][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.547325][ T6769] udevd[6769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.082973][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 413.219100][ T6918] hsr_slave_0: entered promiscuous mode [ 413.234310][ T6918] hsr_slave_1: entered promiscuous mode [ 413.276057][ T6918] debugfs: 'hsr0' already exists in 'hsr' [ 413.284542][ T6918] Cannot create hsr debugfs directory [ 415.073462][ T6849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.159312][ T6849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.276964][ T6849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.375790][ T6849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.421825][ T6849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.510489][ T6849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.642714][ T6849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.909928][ T6849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.497132][ T6854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.634833][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.687504][ T6854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.774367][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.403707][ T6854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 417.451390][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.504153][ T6854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.582885][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.684268][ T6918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 418.817629][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.944121][ T6918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 419.028415][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.058486][ T6918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 419.156058][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.203825][ T6918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 419.294570][ T6918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.997723][ T6505] ===================================================== [ 420.005788][ T6505] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 420.014817][ T6505] n_tty_receive_buf_standard+0xd32/0xc780 [ 420.021017][ T6505] n_tty_receive_buf_common+0x1a63/0x25a0 [ 420.026994][ T6505] n_tty_receive_buf2+0x4c/0x60 [ 420.032157][ T6505] tty_ldisc_receive_buf+0xc6/0x2c0 [ 420.037596][ T6505] tty_port_default_receive_buf+0xd7/0x1a0 [ 420.043961][ T6505] flush_to_ldisc+0x43e/0xe40 [ 420.048863][ T6505] process_scheduled_works+0xb65/0x1e40 [ 420.054812][ T6505] worker_thread+0xee4/0x1590 [ 420.059931][ T6505] kthread+0x53a/0x5f0 [ 420.064229][ T6505] ret_from_fork+0x20f/0x8d0 [ 420.069030][ T6505] ret_from_fork_asm+0x1a/0x30 [ 420.074194][ T6505] [ 420.076666][ T6505] Uninit was stored to memory at: [ 420.082103][ T6505] n_tty_receive_buf_standard+0xd2b/0xc780 [ 420.088122][ T6505] n_tty_receive_buf_common+0x1a63/0x25a0 [ 420.094250][ T6505] n_tty_receive_buf2+0x4c/0x60 [ 420.099850][ T6505] tty_ldisc_receive_buf+0xc6/0x2c0 [ 420.105367][ T6505] tty_port_default_receive_buf+0xd7/0x1a0 [ 420.111611][ T6505] flush_to_ldisc+0x43e/0xe40 [ 420.116526][ T6505] process_scheduled_works+0xb65/0x1e40 [ 420.122465][ T6505] worker_thread+0xee4/0x1590 [ 420.127341][ T6505] kthread+0x53a/0x5f0 [ 420.131880][ T6505] ret_from_fork+0x20f/0x8d0 [ 420.136655][ T6505] ret_from_fork_asm+0x1a/0x30 [ 420.141833][ T6505] [ 420.144254][ T6505] Uninit was created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 420.148733][ T6505] __kmalloc_noprof+0x482/0x1660 [ 420.154000][ T6505] __tty_buffer_request_room+0x3d4/0x7a0 [ 420.160103][ T6505] __tty_insert_flip_string_flags+0x157/0x6e0 [ 420.166431][ T6505] uart_insert_char+0x368/0x930 [ 420.171675][ T6505] serial8250_read_char+0x1ba/0x670 [ 420.182033][ T6505] serial8250_handle_irq_locked+0x6d4/0xa40 [ 420.188339][ T6505] serial8250_handle_irq+0x189/0x710 [ 420.194035][ T6505] serial8250_default_handle_irq+0x116/0x350 [ 420.200433][ T6505] serial8250_interrupt+0xcb/0x3f0 [ 420.205748][ T6505] __handle_irq_event_percpu+0x118/0xf30 [ 420.211756][ T6505] handle_irq_event+0xe0/0x2a0 [ 420.216706][ T6505] handle_edge_irq+0x2a9/0xaf0 [ 420.222066][ T6505] __common_interrupt+0x9d/0x180 [ 420.227275][ T6505] common_interrupt+0x94/0xb0 [ 420.232434][ T6505] asm_common_interrupt+0x2b/0x40 [ 420.237646][ T6505] [ 420.240272][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 420.251882][ T6505] Tainted: [L]=SOFTLOCKUP [ 420.256318][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.266820][ T6505] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 420.273148][ T6505] ===================================================== [ 420.280366][ T6505] Disabling lock debugging due to kernel taint [ 420.743912][ T6505] Kernel panic - not syncing: kmsan.panic set ... [ 420.750530][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: kworker/u8:26 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 420.761909][ T6505] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 420.767582][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.777807][ T6505] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 420.784078][ T6505] Call Trace: [ 420.787473][ T6505] [ 420.790512][ T6505] __dump_stack+0x26/0x30 [ 420.795056][ T6505] dump_stack_lvl+0x50/0x1c0 [ 420.799862][ T6505] ? dump_stack+0x12/0x25 [ 420.804413][ T6505] dump_stack+0x1e/0x25 [ 420.808766][ T6505] vpanic+0x7b4/0x1430 [ 420.813084][ T6505] panic+0x15d/0x160 [ 420.817216][ T6505] kmsan_report+0x31a/0x320 [ 420.821871][ T6505] ? __msan_warning+0x1b/0x30 [ 420.826671][ T6505] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 420.832777][ T6505] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 420.838794][ T6505] ? n_tty_receive_buf2+0x4c/0x60 [ 420.843928][ T6505] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 420.849455][ T6505] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 420.855677][ T6505] ? flush_to_ldisc+0x43e/0xe40 [ 420.860669][ T6505] ? process_scheduled_works+0xb65/0x1e40 [ 420.866531][ T6505] ? worker_thread+0xee4/0x1590 [ 420.871514][ T6505] ? kthread+0x53a/0x5f0 [ 420.875882][ T6505] ? ret_from_fork+0x20f/0x8d0 [ 420.880795][ T6505] ? ret_from_fork_asm+0x1a/0x30 [ 420.885865][ T6505] ? ret_from_fork_asm+0x1a/0x30 [ 420.890935][ T6505] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 420.896913][ T6505] ? kmsan_get_metadata+0x146/0x160 [ 420.902272][ T6505] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 420.908748][ T6505] ? kmsan_get_metadata+0x146/0x160 [ 420.914088][ T6505] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 420.920047][ T6505] ? n_tty_receive_char+0xf83/0x14a0 [ 420.925458][ T6505] ? kmsan_get_metadata+0xf1/0x160 [ 420.930732][ T6505] __msan_warning+0x1b/0x30 [ 420.935358][ T6505] n_tty_receive_buf_standard+0xd32/0xc780 [ 420.941330][ T6505] ? kmsan_get_metadata+0xf1/0x160 [ 420.946613][ T6505] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 420.953092][ T6505] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 420.959319][ T6505] n_tty_receive_buf_common+0x1a63/0x25a0 [ 420.965271][ T6505] n_tty_receive_buf2+0x4c/0x60 [ 420.970268][ T6505] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 420.975937][ T6505] tty_ldisc_receive_buf+0xc6/0x2c0 [ 420.981310][ T6505] tty_port_default_receive_buf+0xd7/0x1a0 [ 420.987276][ T6505] flush_to_ldisc+0x43e/0xe40 [ 420.992114][ T6505] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 420.998687][ T6505] ? __pfx_flush_to_ldisc+0x10/0x10 [ 421.004028][ T6505] process_scheduled_works+0xb65/0x1e40 [ 421.009755][ T6505] worker_thread+0xee4/0x1590 [ 421.014581][ T6505] kthread+0x53a/0x5f0 [ 421.018805][ T6505] ? __pfx_worker_thread+0x10/0x10 [ 421.024047][ T6505] ? __pfx_kthread+0x10/0x10 [ 421.028771][ T6505] ret_from_fork+0x20f/0x8d0 [ 421.033477][ T6505] ? __switch_to+0x573/0x7a0 [ 421.038203][ T6505] ? __pfx_kthread+0x10/0x10 [ 421.042940][ T6505] ret_from_fork_asm+0x1a/0x30 [ 421.047852][ T6505] [ 421.051229][ T6505] Kernel Offset: disabled [ 421.055617][ T6505] Rebooting in 86400 seconds..