last executing test programs: 17m23.773156619s ago: executing program 32 (id=17): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 17m9.04499389s ago: executing program 33 (id=30): socket(0x28, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 16m48.297425305s ago: executing program 34 (id=53): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8=r1, @ANYBLOB="41f53d8ea4eec15e3b0ac51edc2f1a99904001af7628ab56cda055a83b23b4f950c1c337588ed3b42f34752bd70e307237c846cc2d4de67127ff2177b7ea426e8b93f4f72bd2f6a34234016c53ee26f75eaa7e6df5a207f445cd303f6afb4f6370dc09696c91a171cbb13732c4f50f6b8ad51c1317eea579f39b1b38e75b237b78fbdef031ae262245dad9f72613b062a823e826dd87cac564731eb0f5bf6f48d4a3bf48ac3bf16381b3da5cd075213cf2f8d136d8653803ba3dc9e88a953bb68a9f1b4f2c06baa855d2cfcdb94edc48223db9c7a2c25a3b9080ecd549252f5ab8f73f46a9e8da6d7a0ff3", @ANYRESHEX, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2c6, &(0x7f0000000740)="$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") 14m36.153211789s ago: executing program 35 (id=150): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x1, 0x1, "528035", "b5ea47", 0x1, 0xd, 0x6, @any, 0x0, 0xff, 0x0, 0xf5, 0x8, 0xf9, 0x3}}}, 0x1d) 9m57.257784073s ago: executing program 36 (id=392): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 8m11.878296384s ago: executing program 37 (id=583): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m42.404805876s ago: executing program 9 (id=853): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x2, "b5b2"}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x40, 0xd, 0x5, "e44d97dd68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5m39.168950445s ago: executing program 9 (id=860): fsopen(&(0x7f0000000180)='securityfs\x00', 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x13, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 5m38.439918686s ago: executing program 9 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, 0x0) 5m36.861882733s ago: executing program 9 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010003904000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000480012800b000100697036746e6c00003800028014000300fc0100000000000000000000000000010400130014000200fc"], 0x68}}, 0x0) 5m35.859432971s ago: executing program 9 (id=874): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5m31.813300397s ago: executing program 9 (id=883): move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ffc000) 5m19.861195652s ago: executing program 38 (id=876): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000300)={[{@utf8}, {}, {@keep_last_dots}, {@discard}, {@discard}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x1, 0x152b, &(0x7f0000004200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m16.268901587s ago: executing program 39 (id=883): move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ffc000) 3m40.590037805s ago: executing program 5 (id=1179): mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 3m39.57081559s ago: executing program 5 (id=1184): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3m38.780718961s ago: executing program 5 (id=1188): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, 0x0, 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4000000d, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m37.65947538s ago: executing program 5 (id=1192): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000001240)={[0xffff]}, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x8) 3m36.466792666s ago: executing program 5 (id=1194): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf357}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffeaa, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 3m35.495135406s ago: executing program 5 (id=1199): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m20.154045292s ago: executing program 40 (id=1199): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m19.007989402s ago: executing program 0 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @remote, 0xffffff00, 0xffffff00, 0x4, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x80, 0x81, 0x0, 0xbd, 0x5, 'veth0_vlan\x00', 'caif0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x401}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8cc489da1088", @empty, @broadcast, @remote, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) r3 = socket(0x15, 0x5, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m18.262920325s ago: executing program 0 (id=1372): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2m17.523646252s ago: executing program 0 (id=1377): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m11.603231709s ago: executing program 0 (id=1392): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0xffe0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="30000000000000008400000001000000f8ff000004"], 0x30}], 0x1, 0x0) 2m10.861802404s ago: executing program 0 (id=1396): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 2m10.067583003s ago: executing program 0 (id=1402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1m52.826955221s ago: executing program 41 (id=1402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1m36.187945846s ago: executing program 3 (id=1471): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 1m35.600475265s ago: executing program 3 (id=1474): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x6, &(0x7f0000000d80)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000000340)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, 0x0}]) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 1m34.897497531s ago: executing program 3 (id=1477): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 1m31.21842472s ago: executing program 3 (id=1484): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m30.770939908s ago: executing program 2 (id=1486): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r2, 0xcb9}, &(0x7f0000000540)=0x8) 1m30.601471661s ago: executing program 3 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13f8ff000000007a0ae8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m29.862970928s ago: executing program 3 (id=1489): move_pages(0x0, 0x200000000000019a, &(0x7f0000000000)=[&(0x7f0000002000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) 1m29.522186084s ago: executing program 2 (id=1490): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') 1m27.937856609s ago: executing program 2 (id=1493): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000008000600ac1e000108000b00", @ANYBLOB="5a1c0f9d"], 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) 1m26.895213321s ago: executing program 2 (id=1495): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x9) 1m23.245137529s ago: executing program 2 (id=1501): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, 0x0) dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 1m20.368470165s ago: executing program 2 (id=1505): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m14.661107797s ago: executing program 42 (id=1489): move_pages(0x0, 0x200000000000019a, &(0x7f0000000000)=[&(0x7f0000002000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) 1m4.89973386s ago: executing program 43 (id=1505): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14.706584683s ago: executing program 7 (id=1752): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002840)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.972033926s ago: executing program 7 (id=1754): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f0314206544000000000000", 0x12) 7.369253206s ago: executing program 8 (id=1768): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 6.308289482s ago: executing program 4 (id=1774): r0 = socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000e80)={{r2}, r7, 0x10, @inherit={0x60, &(0x7f0000000480)={0x1, 0x3, 0x7, 0x0, {0x5, 0xffff, 0x3ff, 0x2, 0x8}, [0x3, 0xffff, 0x8]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080)=0x3, 0x12) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x100, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x6c, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0xf7, 0x801f, {0x14, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback, {[@timestamp={0x44, 0x8, 0x37, 0x0, 0x2, [0x801]}, @timestamp_addr={0x44, 0x34, 0x89, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x32c}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) 6.014242193s ago: executing program 1 (id=1776): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 5.624947445s ago: executing program 8 (id=1777): r0 = syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 4.933854727s ago: executing program 1 (id=1778): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.102436482s ago: executing program 6 (id=1780): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) 3.231374201s ago: executing program 8 (id=1781): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001400050a28bd7000fddbdf2511000d0001008f88ab"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.164976658s ago: executing program 4 (id=1782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.127405742s ago: executing program 1 (id=1783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x80000001, 0x54000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 3.06994935s ago: executing program 6 (id=1784): sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[], 0x4, 0x27a, &(0x7f0000000440)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020301020000000000001e000100000808000340000000060900020000000009010000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x40008c0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x7f}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.74843024s ago: executing program 7 (id=1785): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x1c, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000ff00000000041000008520"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.627770157s ago: executing program 1 (id=1786): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/186, 0xba, 0x9) 2.504721307s ago: executing program 4 (id=1787): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x161000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x10000005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r2, r4, 0x0, 0x20000000000006) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r5, r6, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 2.49955969s ago: executing program 6 (id=1788): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setreuid(0x0, 0xee01) r1 = syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) 2.289972287s ago: executing program 7 (id=1789): socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) open(0x0, 0x143142, 0xa2) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 2.289797677s ago: executing program 8 (id=1790): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r1, @ANYBLOB="019800000000000020001280080001006772650014000280080007f3891414bb06000e0002000000637132acd4984372716d5687ec0e7b3a4452efdb10cc283580832d576bbfd3551d02659362"], 0x40}}, 0x0) 2.135890675s ago: executing program 1 (id=1791): syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f00000020c0)="$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") r0 = socket$inet_sctp(0x2, 0x5, 0x84) mknod$loop(0x0, 0x40, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x3beb44c, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) 1.61586878s ago: executing program 7 (id=1792): ftruncate(0xffffffffffffffff, 0x51a9497) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/216, 0xd8}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 1.422914561s ago: executing program 6 (id=1793): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x10) 1.315387201s ago: executing program 8 (id=1794): syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='securityfs\x00', 0x42, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x104d886, 0x0) 1.222553049s ago: executing program 4 (id=1795): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f0314206544000000000000", 0x12) 985.514337ms ago: executing program 7 (id=1796): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004000) 908.042035ms ago: executing program 6 (id=1797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 699.648858ms ago: executing program 4 (id=1798): r0 = socket(0x2, 0x80805, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68020000000501542bb2c6fdc10100000000000000000700000154020100020000000100000004a802000000100073797a31000000000000000000000000000000000000000000000000000000009f2664b706c6e6aab484b4f451ba9f31061bb9190da69032bc35489425e4f965a0532c537c9eb93b38918b0d01204740634f5c8fbf6449a0286c5f9b0950133bf2000600020000000900000007000100010000005e0a00000400ff7f03000000000000000500810003000000070000000700060002"], 0x268}}, 0x8880) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8) 487.233479ms ago: executing program 8 (id=1799): memfd_create(&(0x7f0000000300)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaac1aaaaaaaaaaaaaaaa88a80c40814f8a1ede4ccb03"], 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051) 430.217504ms ago: executing program 6 (id=1800): io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0xfffffff9) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) 79.109695ms ago: executing program 1 (id=1801): faccessat(0xffffffffffffffff, 0x0, 0x22) 0s ago: executing program 4 (id=1802): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): 0: entered allmulticast mode [ 791.414480][ T9078] bridge_slave_0: entered promiscuous mode [ 791.454537][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.519845][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.550355][ T9078] bridge_slave_1: entered allmulticast mode [ 791.598896][ T9078] bridge_slave_1: entered promiscuous mode [ 792.231422][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.360117][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.008137][ T9078] team0: Port device team_slave_0 added [ 793.126297][ T9078] team0: Port device team_slave_1 added [ 793.309709][ T5831] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 793.510376][ T5831] usb 6-1: device descriptor read/64, error -71 [ 793.749892][ T5831] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 793.839087][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.854009][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.872027][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.903289][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.915065][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.944269][ T5831] usb 6-1: device descriptor read/64, error -71 [ 794.035960][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.069991][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.102359][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.120894][ T5831] usb usb6-port1: attempt power cycle [ 794.164633][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.201024][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.294598][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.308211][ T58] bridge_slave_1: left allmulticast mode [ 794.315022][ T58] bridge_slave_1: left promiscuous mode [ 794.323531][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.441685][ T58] bridge_slave_0: left allmulticast mode [ 794.459501][ T58] bridge_slave_0: left promiscuous mode [ 794.489810][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.512972][ T5831] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 794.513661][ T5826] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 794.553457][ T5831] usb 6-1: device descriptor read/8, error -71 [ 794.711138][ T5826] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 794.777421][ T5826] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 794.836245][ T5831] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 794.839510][ T5826] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 794.889425][ T5826] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 794.930405][ T5831] usb 6-1: device descriptor read/8, error -71 [ 794.956194][ T5826] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 795.003280][ T5826] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.052173][ T5826] usb 7-1: string descriptor 0 read error: -22 [ 795.074611][ T5826] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 795.081911][ T5831] usb usb6-port1: unable to enumerate USB device [ 795.118595][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.194841][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.234106][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.304108][ T5826] adutux 7-1:168.0: interrupt endpoints not found [ 795.326653][ T58] bond0 (unregistering): Released all slaves [ 795.494239][ T5826] usb 7-1: USB disconnect, device number 11 [ 796.020698][ T5786] Bluetooth: hci3: command tx timeout [ 796.557063][ T9078] hsr_slave_0: entered promiscuous mode [ 796.603954][ T9078] hsr_slave_1: entered promiscuous mode [ 796.663550][ T9078] debugfs: 'hsr0' already exists in 'hsr' [ 796.689947][ T9078] Cannot create hsr debugfs directory [ 797.442396][ T58] hsr_slave_0: left promiscuous mode [ 797.456311][ T58] hsr_slave_1: left promiscuous mode [ 797.480716][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.505448][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.099712][ T5786] Bluetooth: hci3: command tx timeout [ 799.159461][ T58] team0 (unregistering): Port device team_slave_1 removed [ 799.284894][ T58] team0 (unregistering): Port device team_slave_0 removed [ 799.999688][ T5826] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 800.149860][ T5826] usb 8-1: device descriptor read/64, error -71 [ 800.189719][ T5786] Bluetooth: hci3: command tx timeout [ 800.399403][ T5826] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 800.569958][ T5826] usb 8-1: device descriptor read/64, error -71 [ 800.681542][ T5826] usb usb8-port1: attempt power cycle [ 800.971709][ T9246] evm: overlay not supported [ 801.069551][ T5826] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 801.095924][ T9249] trusted_key: encrypted_key: hex blob is missing [ 801.127748][ T5826] usb 8-1: device descriptor read/8, error -71 [ 801.457623][ T5826] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 801.519914][ T5826] usb 8-1: device descriptor read/8, error -71 [ 801.607708][ T9257] loop6: detected capacity change from 0 to 256 [ 801.667057][ T9257] exfat: Deprecated parameter 'utf8' [ 801.687831][ T5826] usb usb8-port1: unable to enumerate USB device [ 801.854908][ T9257] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 801.961150][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 802.294600][ T5786] Bluetooth: hci3: command tx timeout [ 802.408464][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.924484][ T9268] loop7: detected capacity change from 0 to 32768 [ 804.934871][ T9268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.646 (9268) [ 804.987474][ T9268] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 804.998027][ T9268] BTRFS info (device loop7): using sha256 checksum algorithm [ 805.157988][ T9268] BTRFS info (device loop7): enabling ssd optimizations [ 805.165159][ T9268] BTRFS info (device loop7): turning on async discard [ 805.172153][ T9268] BTRFS info (device loop7): enabling free space tree [ 805.194972][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.262378][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.558728][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.942516][ T7618] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 809.332647][ T9301] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 809.381930][ T9078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 809.546926][ T9078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 809.641750][ T9078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 809.731776][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.748361][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.784633][ T9183] bridge_slave_0: entered allmulticast mode [ 809.840734][ T9183] bridge_slave_0: entered promiscuous mode [ 810.055381][ T9078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 810.223682][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.284279][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.329963][ T9183] bridge_slave_1: entered allmulticast mode [ 810.383133][ T9183] bridge_slave_1: entered promiscuous mode [ 810.888960][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link syzkaller syzkaller login: [ 811.069288][ T58] bridge_slave_1: left allmulticast mode [ 811.075133][ T58] bridge_slave_1: left promiscuous mode [ 811.121993][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.200848][ T58] bridge_slave_0: left allmulticast mode [ 811.206705][ T58] bridge_slave_0: left promiscuous mode [ 811.270280][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.354024][ T9324] loop5: detected capacity change from 0 to 256 [ 811.385591][ T9324] exfat: Deprecated parameter 'utf8' [ 811.408297][ T9239] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 811.512408][ T9324] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 811.559618][ T9239] usb 8-1: device descriptor read/64, error -71 [ 812.633973][ T9299] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 812.910167][ T9299] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 812.945175][ T9299] usb 7-1: config 0 has no interface number 0 [ 812.980038][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.990202][ T9299] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 813.052219][ T9299] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 813.076224][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.112213][ T9299] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 813.137845][ T58] bond0 (unregistering): Released all slaves [ 813.159610][ T9299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.283419][ T9299] usb 7-1: config 0 descriptor?? [ 813.295418][ T9330] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 813.341623][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.544562][ T9299] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 814.280355][ T9239] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 814.608742][ T5826] usb 7-1: USB disconnect, device number 12 [ 814.645959][ T58] hsr_slave_0: left promiscuous mode [ 814.711452][ T58] hsr_slave_1: left promiscuous mode [ 814.771785][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.808630][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.862833][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.909418][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.020726][ T58] veth1_macvtap: left promiscuous mode [ 815.026544][ T58] veth0_macvtap: left promiscuous mode [ 815.060294][ T58] veth1_vlan: left promiscuous mode [ 815.065864][ T58] veth0_vlan: left promiscuous mode [ 816.917853][ T58] team0 (unregistering): Port device team_slave_1 removed [ 817.049590][ T58] team0 (unregistering): Port device team_slave_0 removed [ 817.363042][ T9360] loop5: detected capacity change from 0 to 256 [ 817.415043][ T9360] exfat: Deprecated parameter 'utf8' [ 817.668802][ T9360] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) syzkaller syzkaller login: [ 818.140822][ T9183] team0: Port device team_slave_0 added [ 818.270620][ T9299] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 818.413026][ T9183] team0: Port device team_slave_1 added [ 818.519800][ T9299] usb 7-1: device descriptor read/64, error -71 [ 818.941086][ T9299] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 819.089640][ T9299] usb 7-1: device descriptor read/64, error -71 [ 819.236756][ T9299] usb usb7-port1: attempt power cycle [ 819.617339][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.629491][ T9299] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 819.659529][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.741923][ T9299] usb 7-1: device descriptor read/8, error -71 [ 819.810213][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.921835][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.979062][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.027003][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.038377][ T9299] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 820.070168][ T9299] usb 7-1: device descriptor read/8, error -71 [ 820.141886][ T7285] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 820.185356][ T9299] usb usb7-port1: unable to enumerate USB device [ 820.329769][ T7285] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.366692][ T7285] usb 8-1: config 0 has no interface number 0 [ 820.401971][ T7285] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 820.446239][ T7285] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 820.510158][ T7285] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 820.530889][ T7285] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.626946][ T7285] usb 8-1: config 0 descriptor?? [ 820.651040][ T9368] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 820.666450][ T9183] hsr_slave_0: entered promiscuous mode [ 820.695218][ T9183] hsr_slave_1: entered promiscuous mode [ 820.722456][ T7285] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 820.722688][ T9183] debugfs: 'hsr0' already exists in 'hsr' [ 820.813865][ T9183] Cannot create hsr debugfs directory [ 821.108470][ C1] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 821.120997][ T5826] usb 8-1: USB disconnect, device number 31 [ 822.818149][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.197969][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.320366][ T9402] loop7: detected capacity change from 0 to 256 [ 823.355752][ T9402] exfat: Deprecated parameter 'utf8' [ 823.442912][ T7285] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 823.454522][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.459266][ T9402] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 823.462352][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.642131][ T7285] usb 7-1: device descriptor read/64, error -71 [ 823.818463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.826073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.990864][ T7285] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 824.199745][ T7285] usb 7-1: device descriptor read/64, error -71 [ 824.315773][ T7285] usb usb7-port1: attempt power cycle [ 824.788291][ T9183] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 824.829566][ T7285] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 824.872064][ T7285] usb 7-1: device descriptor read/8, error -71 [ 824.886097][ T9183] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 824.970419][ T9183] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 825.048622][ T9183] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 825.129912][ T7285] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 825.188726][ T7285] usb 7-1: device descriptor read/8, error -71 [ 825.320767][ T7285] usb usb7-port1: unable to enumerate USB device [ 827.219524][ T5826] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 827.508429][ T5826] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 827.552899][ T5826] usb 7-1: config 0 has no interface number 0 [ 827.595505][ T5826] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 827.656628][ T5826] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 828.092091][ T5826] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 828.101613][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.131741][ T5826] usb 7-1: config 0 descriptor?? [ 828.138776][ T9421] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 828.241315][ T5826] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 828.527151][ T5826] usb 7-1: USB disconnect, device number 21 [ 828.548823][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.910879][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.016701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.024326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.255331][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.262922][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.633258][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.527355][ T9459] loop5: detected capacity change from 0 to 256 [ 830.602313][ T9459] exfat: Deprecated parameter 'utf8' [ 830.895038][ T9459] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 831.039957][ T9078] veth0_vlan: entered promiscuous mode [ 832.818125][ T9078] veth1_vlan: entered promiscuous mode [ 834.246053][ T9078] veth0_macvtap: entered promiscuous mode [ 834.389044][ T9078] veth1_macvtap: entered promiscuous mode [ 834.546371][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.643083][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.5.692'. [ 834.692083][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.846643][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.895517][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.965022][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.027900][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.236153][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.868925][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.899756][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.322546][ T9526] loop7: detected capacity change from 0 to 256 [ 839.427889][ T9526] exfat: Deprecated parameter 'utf8' [ 839.574160][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 839.589965][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 839.598883][ T9526] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 839.613430][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 839.661429][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 839.683433][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 841.779548][ T5786] Bluetooth: hci4: command tx timeout [ 842.101725][ T9183] veth0_vlan: entered promiscuous mode [ 842.428831][ T9183] veth1_vlan: entered promiscuous mode [ 842.816657][ T9546] fuse: Bad value for 'fd' [ 843.283760][ T9183] veth0_macvtap: entered promiscuous mode [ 843.441068][ T9183] veth1_macvtap: entered promiscuous mode [ 843.859578][ T5786] Bluetooth: hci4: command tx timeout [ 844.061796][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 844.284878][ T5931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.547582][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.690798][ T5931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.114587][ T5931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.264909][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.437505][ T5931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.593857][ T5982] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.617010][ T5982] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.637821][ T9580] loop7: detected capacity change from 0 to 256 [ 845.656666][ T9580] exfat: Deprecated parameter 'utf8' [ 845.679571][ T54] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.717461][ T54] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.844411][ T9580] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 845.946731][ T5786] Bluetooth: hci4: command tx timeout [ 847.749629][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.757297][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.804184][ T9531] bridge_slave_0: entered allmulticast mode [ 847.934544][ T9531] bridge_slave_0: entered promiscuous mode [ 848.023314][ T5786] Bluetooth: hci4: command tx timeout [ 848.742728][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.809661][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.817399][ T9531] bridge_slave_1: entered allmulticast mode [ 848.917800][ T9531] bridge_slave_1: entered promiscuous mode [ 849.150919][ T5931] bridge_slave_1: left allmulticast mode [ 849.156767][ T5931] bridge_slave_1: left promiscuous mode [ 849.195526][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.373169][ T5931] bridge_slave_0: left allmulticast mode [ 849.379448][ T5931] bridge_slave_0: left promiscuous mode [ 849.385916][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.749134][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.893559][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.926426][ T5931] bond0 (unregistering): Released all slaves [ 851.183015][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.289371][ T5826] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 851.306021][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.469367][ T5826] usb 8-1: device descriptor read/64, error -71 [ 851.698309][ T5931] hsr_slave_0: left promiscuous mode [ 851.721230][ T5826] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 851.765280][ T5931] hsr_slave_1: left promiscuous mode [ 851.785406][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.830791][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.862418][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.889318][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.900398][ T5826] usb 8-1: device descriptor read/64, error -71 [ 852.015925][ T5931] veth1_macvtap: left promiscuous mode [ 852.036033][ T5931] veth0_macvtap: left promiscuous mode [ 852.054018][ T5826] usb usb8-port1: attempt power cycle [ 852.059601][ T5931] veth1_vlan: left promiscuous mode [ 852.059832][ T5931] veth0_vlan: left promiscuous mode [ 852.115503][ T9638] loop6: detected capacity change from 0 to 256 [ 852.157102][ T9638] exfat: Deprecated parameter 'utf8' [ 852.334895][ T9638] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 852.492784][ T5826] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 852.575491][ T5826] usb 8-1: device descriptor read/8, error -71 [ 852.876991][ T5826] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 852.940210][ T5826] usb 8-1: device descriptor read/8, error -71 [ 853.060968][ T5826] usb usb8-port1: unable to enumerate USB device [ 853.328435][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 853.337689][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 853.350211][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 853.363516][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 853.375926][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 854.566699][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 854.645611][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 855.413091][ T9531] team0: Port device team_slave_0 added [ 855.469636][ T5781] Bluetooth: hci2: command tx timeout [ 855.482422][ T9531] team0: Port device team_slave_1 added [ 856.081595][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.109526][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.203972][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.269824][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.276945][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.389348][ T9531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.261449][ T9531] hsr_slave_0: entered promiscuous mode [ 857.283528][ T9531] hsr_slave_1: entered promiscuous mode [ 857.317238][ T9531] debugfs: 'hsr0' already exists in 'hsr' [ 857.359335][ T9531] Cannot create hsr debugfs directory [ 857.543686][ T5781] Bluetooth: hci2: command tx timeout [ 859.368956][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.621452][ T5781] Bluetooth: hci2: command tx timeout [ 859.763492][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.905124][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 860.055389][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.353688][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.430157][ T13] bridge_slave_1: left allmulticast mode [ 861.488776][ T13] bridge_slave_1: left promiscuous mode [ 861.550507][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.587457][ T13] bridge_slave_0: left allmulticast mode [ 861.613056][ T13] bridge_slave_0: left promiscuous mode [ 861.645899][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.699861][ T5781] Bluetooth: hci2: command tx timeout [ 862.805108][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.921385][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.958809][ T13] bond0 (unregistering): Released all slaves [ 863.329587][ T9299] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 863.519410][ T9299] usb 7-1: device descriptor read/64, error -71 [ 863.539624][ T13] hsr_slave_0: left promiscuous mode [ 863.575841][ T13] hsr_slave_1: left promiscuous mode [ 863.635174][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.660630][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.690537][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.698093][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.810167][ T9299] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 863.834766][ T13] veth1_macvtap: left promiscuous mode [ 863.862535][ T13] veth0_macvtap: left promiscuous mode [ 863.876945][ T13] veth1_vlan: left promiscuous mode [ 863.894633][ T13] veth0_vlan: left promiscuous mode [ 863.960082][ T9299] usb 7-1: device descriptor read/64, error -71 [ 864.070805][ T9299] usb usb7-port1: attempt power cycle [ 864.445987][ T9299] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 864.492339][ T9299] usb 7-1: device descriptor read/8, error -71 [ 864.749664][ T9299] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 864.820402][ T9299] usb 7-1: device descriptor read/8, error -71 [ 864.931257][ T9299] usb usb7-port1: unable to enumerate USB device [ 865.541311][ T13] team0 (unregistering): Port device team_slave_1 removed [ 865.679738][ T13] team0 (unregistering): Port device team_slave_0 removed [ 865.860451][ T9299] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 866.049575][ T9299] usb 6-1: Using ep0 maxpacket: 16 [ 866.086574][ T9299] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 866.135781][ T9299] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 866.169601][ T9299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.177815][ T9299] usb 6-1: Product: syz [ 866.229531][ T9299] usb 6-1: Manufacturer: syz [ 866.234333][ T9299] usb 6-1: SerialNumber: syz [ 866.293952][ T9299] usb 6-1: config 0 descriptor?? [ 866.526731][ T9531] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 866.671500][ T9531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 866.839340][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.862706][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.879997][ T9646] bridge_slave_0: entered allmulticast mode [ 866.893927][ T9646] bridge_slave_0: entered promiscuous mode [ 866.924984][ T9531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 866.978935][ T9531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.034818][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.070027][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.109903][ T9646] bridge_slave_1: entered allmulticast mode [ 867.137767][ T9646] bridge_slave_1: entered promiscuous mode [ 867.365956][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.403881][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.667641][ T9646] team0: Port device team_slave_0 added [ 867.722649][ T9646] team0: Port device team_slave_1 added [ 867.915734][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.926065][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.970373][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.001622][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.008730][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.067729][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.595785][ T9646] hsr_slave_0: entered promiscuous mode [ 868.627328][ T9646] hsr_slave_1: entered promiscuous mode [ 868.647732][ T9646] debugfs: 'hsr0' already exists in 'hsr' [ 868.683410][ T9646] Cannot create hsr debugfs directory [ 869.128306][ T5831] usb 6-1: USB disconnect, device number 20 [ 869.594799][ T9753] loop5: detected capacity change from 0 to 256 [ 869.628219][ T9753] exfat: Deprecated parameter 'utf8' [ 869.967529][ T9753] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 871.571762][ T5826] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 871.739956][ T5826] usb 7-1: device descriptor read/64, error -71 [ 871.766407][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.981433][ T5826] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 872.019002][ T9531] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.134899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.142399][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.169588][ T5826] usb 7-1: device descriptor read/64, error -71 [ 872.297219][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.304867][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.311034][ T5826] usb usb7-port1: attempt power cycle [ 872.742713][ T5826] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 872.776242][ T5826] usb 7-1: device descriptor read/8, error -71 [ 873.024195][ T5826] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 873.063222][ T5826] usb 7-1: device descriptor read/8, error -71 [ 873.108595][ T9531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.211467][ T5826] usb usb7-port1: unable to enumerate USB device [ 873.438647][ T9646] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 873.524516][ T9646] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 873.620031][ T9646] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 873.678846][ T9646] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 874.371014][ T9774] netlink: 'syz.5.748': attribute type 1 has an invalid length. [ 874.684533][ T9774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.224470][ T9777] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 876.581620][ T9778] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 876.873104][ T9778] bond1 (unregistering): Released all slaves [ 877.545416][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.031582][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.454768][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.687407][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.694954][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.850412][ T9531] veth0_vlan: entered promiscuous mode [ 878.905323][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.912848][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.497910][ T9531] veth1_vlan: entered promiscuous mode [ 880.436299][ T9531] veth0_macvtap: entered promiscuous mode [ 880.448850][ T9801] loop7: detected capacity change from 0 to 256 [ 880.526741][ T9801] exfat: Deprecated parameter 'utf8' [ 880.578813][ T9531] veth1_macvtap: entered promiscuous mode [ 880.730823][ T9801] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 880.918492][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.058212][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.336497][ T9074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.408274][ T9074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.454894][ T9074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.573108][ T9074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.370543][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.228752][ T9646] veth0_vlan: entered promiscuous mode [ 885.357550][ T9646] veth1_vlan: entered promiscuous mode [ 885.957791][ T9646] veth0_macvtap: entered promiscuous mode [ 886.080701][ T9646] veth1_macvtap: entered promiscuous mode [ 886.351457][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.426820][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.722455][ T9074] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.779579][ T9074] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.884955][ T9074] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.913088][ T9074] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.697309][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.740464][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.093858][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.142058][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.635582][ T5781] Bluetooth: hci0: unexpected event for opcode 0x202d [ 891.081328][ T9895] loop5: detected capacity change from 0 to 2048 [ 891.215901][ T9895] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.768: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 891.389498][ T9895] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 891.391665][ T9895] EXT4-fs (loop5): get root inode failed [ 891.426096][ T9910] loop0: detected capacity change from 0 to 256 [ 891.461778][ T9895] EXT4-fs (loop5): mount failed [ 891.505440][ T9910] exfat: Deprecated parameter 'utf8' [ 891.693752][ T9910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 897.692411][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.751224][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.969619][ T5781] Bluetooth: hci5: unexpected event for opcode 0x202d [ 898.069987][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.114756][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.207323][ T9970] loop7: detected capacity change from 0 to 2048 [ 898.360135][ T9970] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.783: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 898.449057][ T9970] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 898.525624][ T9970] EXT4-fs (loop7): get root inode failed [ 898.574426][ T9970] EXT4-fs (loop7): mount failed [ 899.981088][ T9989] Zero length message leads to an empty skb [ 900.296908][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.306461][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.112095][T10001] loop7: detected capacity change from 0 to 256 [ 901.190318][T10001] exfat: Deprecated parameter 'utf8' [ 901.402408][T10001] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 903.711596][T10023] loop0: detected capacity change from 0 to 2048 [ 903.837249][T10023] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.798: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 903.890338][T10023] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 903.891861][T10023] EXT4-fs (loop0): get root inode failed [ 903.991393][T10023] EXT4-fs (loop0): mount failed [ 906.206934][T10051] loop6: detected capacity change from 0 to 256 [ 906.302298][T10051] vfat: Bad value for 'dmask' [ 908.354601][T10070] loop0: detected capacity change from 0 to 2048 [ 908.619465][T10070] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.810: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 908.699783][T10070] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 908.722143][T10070] EXT4-fs (loop0): get root inode failed [ 908.897480][T10070] EXT4-fs (loop0): mount failed [ 909.209967][T10087] loop6: detected capacity change from 0 to 256 [ 909.300955][T10087] exfat: Deprecated parameter 'utf8' [ 909.538109][T10087] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 914.969877][ T5826] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 915.172395][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 915.224016][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.252045][ T5826] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 915.290310][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.415552][ T5826] usb 1-1: config 0 descriptor?? [ 916.310369][T10141] loop7: detected capacity change from 0 to 2048 [ 916.515810][ T5826] usbhid 1-1:0.0: can't add hid device: -71 [ 916.566630][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 916.729730][T10141] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.826: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 916.801929][ T5826] usb 1-1: USB disconnect, device number 4 [ 916.860302][T10141] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 916.867574][T10141] EXT4-fs (loop7): get root inode failed [ 917.014414][T10141] EXT4-fs (loop7): mount failed [ 918.373684][T10166] loop7: detected capacity change from 0 to 256 [ 918.436594][T10166] exfat: Deprecated parameter 'utf8' [ 918.601574][T10166] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 921.589615][ T5826] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 921.699801][T10199] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 921.788129][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 921.838335][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.869422][ T5826] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 921.878705][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.914309][ T5826] usb 1-1: config 0 descriptor?? [ 922.942337][T10204] loop9: detected capacity change from 0 to 2048 [ 923.054949][ T5826] usbhid 1-1:0.0: can't add hid device: -71 [ 923.092732][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 923.201084][ T5826] usb 1-1: USB disconnect, device number 5 [ 923.264925][T10204] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #2: comm syz.9.843: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 923.290524][T10204] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 923.332416][T10204] EXT4-fs (loop9): get root inode failed [ 923.388969][T10204] EXT4-fs (loop9): mount failed [ 924.302595][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.9.849'. [ 925.969685][ T9299] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 926.020390][T10245] fuse: Bad value for 'fd' [ 926.187682][ T9299] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 926.238426][ T9299] usb 10-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 926.330076][ T9299] usb 10-1: config 0 interface 0 has no altsetting 0 [ 926.337057][ T9299] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 926.409957][ T9299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.465053][ T9299] usb 10-1: config 0 descriptor?? [ 926.984729][T10258] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 927.396674][ T9299] pyra 0003:1E7D:2C24.0004: ignoring exceeding usage max [ 927.465959][ T9299] pyra 0003:1E7D:2C24.0004: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.9-1/input0 [ 927.996596][ T9299] pyra 0003:1E7D:2C24.0004: couldn't init struct pyra_device [ 928.029390][ T9299] pyra 0003:1E7D:2C24.0004: couldn't install mouse [ 928.077741][ T9299] pyra 0003:1E7D:2C24.0004: probe with driver pyra failed with error -71 [ 928.227989][ T9299] usb 10-1: USB disconnect, device number 2 [ 928.385638][T10259] fido_id[10259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 929.204934][T10274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.360264][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.869'. [ 931.991224][ T9299] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 932.202460][ T9299] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 932.269425][ T9299] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.350219][ T9299] usb 8-1: config 0 interface 0 has no altsetting 0 [ 932.386454][ T9299] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 932.429866][ T9299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.453059][ T9299] usb 8-1: config 0 descriptor?? [ 932.570289][ T5826] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 932.780232][ T5826] usb 10-1: Using ep0 maxpacket: 16 [ 932.828242][ T5826] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 932.857104][T10317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.919444][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 932.977317][ T9299] pyra 0003:1E7D:2C24.0005: ignoring exceeding usage max [ 932.977550][ T5826] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 933.078549][T10320] loop6: detected capacity change from 0 to 256 [ 933.085368][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.109320][ T5826] usb 10-1: Product: syz [ 933.110173][ T9299] pyra 0003:1E7D:2C24.0005: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.7-1/input0 [ 933.155367][T10320] exfat: Deprecated parameter 'utf8' [ 933.189695][ T5826] usb 10-1: Manufacturer: syz [ 933.194597][ T5826] usb 10-1: SerialNumber: syz [ 933.299859][ T5826] usb 10-1: config 0 descriptor?? [ 933.371605][T10320] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 933.435315][ T5826] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 933.512393][ T5826] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 934.035818][ T5826] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 934.112386][ T5826] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 934.231648][ T9299] pyra 0003:1E7D:2C24.0005: couldn't init struct pyra_device [ 934.257637][ T5826] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 934.262891][ T9299] pyra 0003:1E7D:2C24.0005: couldn't install mouse [ 934.307818][ T5826] em28xx 10-1:0.0: No AC97 audio processor [ 934.312326][ T9299] pyra 0003:1E7D:2C24.0005: probe with driver pyra failed with error -71 [ 934.423100][ T9299] usb 8-1: USB disconnect, device number 36 [ 934.534136][T10321] fido_id[10321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:1E7D:2C24.0005/report_descriptor': No such device [ 935.105307][ T29] audit: type=1326 audit(1770843601.738:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 935.315518][ T29] audit: type=1326 audit(1770843601.818:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 935.539399][ T29] audit: type=1326 audit(1770843601.848:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 935.799392][ T29] audit: type=1326 audit(1770843601.848:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 935.924018][ T9299] usb 10-1: USB disconnect, device number 3 [ 935.997984][ T9299] em28xx 10-1:0.0: Disconnecting em28xx [ 936.037840][ T29] audit: type=1326 audit(1770843601.848:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 936.134153][ T9299] em28xx 10-1:0.0: Freeing device [ 936.282242][ T29] audit: type=1326 audit(1770843601.858:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 936.473732][ T29] audit: type=1326 audit(1770843601.858:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 936.625757][ T29] audit: type=1326 audit(1770843601.878:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 936.742748][ T29] audit: type=1326 audit(1770843601.878:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 936.893276][ T29] audit: type=1326 audit(1770843601.888:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 939.142438][T10367] loop7: detected capacity change from 0 to 8192 [ 940.410135][T10388] xt_connbytes: Forcing CT accounting to be enabled [ 940.920865][ T9299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 941.117524][ T9299] usb 1-1: Using ep0 maxpacket: 16 [ 941.184904][ T9299] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 941.227396][ T9299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 941.312626][ T9299] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 941.347230][ T9299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.377770][ T9299] usb 1-1: Product: syz [ 941.410883][ T9299] usb 1-1: Manufacturer: syz [ 941.415798][ T9299] usb 1-1: SerialNumber: syz [ 941.492777][ T9299] usb 1-1: config 0 descriptor?? [ 941.594575][ T9299] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 941.734915][ T9299] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 942.254747][ T9299] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 942.389499][ T9299] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 942.502649][ T9299] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 942.590258][ T9299] em28xx 1-1:0.0: No AC97 audio processor [ 944.238323][ T5831] usb 1-1: USB disconnect, device number 6 [ 944.301331][ T5831] em28xx 1-1:0.0: Disconnecting em28xx [ 944.337905][ T5831] em28xx 1-1:0.0: Freeing device [ 944.559790][ T5826] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 944.789573][ T5826] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 944.839642][ T5826] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 944.879411][ T5826] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.967203][ T5826] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 945.011341][ T5826] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 945.055538][ T5826] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 945.129581][ T5826] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 945.175353][ T5826] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 945.246902][ T5826] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 945.340354][ T5826] usb 8-1: string descriptor 0 read error: -22 [ 945.347789][ T5826] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 945.389680][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.508791][ T5826] adutux 8-1:168.0: interrupt endpoints not found [ 945.738268][ T5826] usb 8-1: USB disconnect, device number 37 [ 948.464869][ T5831] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 948.754455][ T5831] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 949.006490][ T5831] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 949.149417][ T5831] usb 8-1: config 0 interface 0 has no altsetting 0 [ 949.219445][ T5831] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 949.338596][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.482617][ T5831] usb 8-1: config 0 descriptor?? [ 950.151752][ T5831] pyra 0003:1E7D:2C24.0006: ignoring exceeding usage max [ 950.465125][ T5831] pyra 0003:1E7D:2C24.0006: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.7-1/input0 [ 950.647523][ T5831] pyra 0003:1E7D:2C24.0006: couldn't init struct pyra_device [ 950.719596][ T5831] pyra 0003:1E7D:2C24.0006: couldn't install mouse [ 950.824318][ T5831] pyra 0003:1E7D:2C24.0006: probe with driver pyra failed with error -5 [ 951.248851][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 951.267663][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 951.278423][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 951.304850][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 951.320490][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 952.368228][ T5826] usb 8-1: USB disconnect, device number 38 [ 953.419477][ T5786] Bluetooth: hci3: command tx timeout [ 954.198313][ T5781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 954.228543][ T5781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 954.251070][ T5781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 954.288995][ T5781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 954.305770][ T5781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 954.329626][T10459] chnl_net:caif_netlink_parms(): no params data found [ 954.571140][T10481] 9p: Bad value for 'rfdno' [ 954.725632][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 954.896166][ T5980] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.448261][ T5980] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.469439][ T5781] Bluetooth: hci3: command tx timeout [ 955.867140][ T5980] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.901734][T10498] trusted_key: encrypted_key: insufficient parameters specified [ 956.334083][ T5980] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.499625][ T5781] Bluetooth: hci6: command tx timeout [ 957.496711][T10514] capability: warning: `syz.0.925' uses 32-bit capabilities (legacy support in use) [ 957.539549][ T5781] Bluetooth: hci3: command tx timeout [ 957.601301][T10459] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.610168][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.617933][T10459] bridge_slave_0: entered allmulticast mode [ 957.629565][T10459] bridge_slave_0: entered promiscuous mode [ 957.863000][T10459] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.913457][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.939930][T10459] bridge_slave_1: entered allmulticast mode [ 957.970395][T10459] bridge_slave_1: entered promiscuous mode [ 958.579314][ T5781] Bluetooth: hci6: command tx timeout [ 959.335356][ T5980] bridge_slave_1: left allmulticast mode [ 959.346825][ T5980] bridge_slave_1: left promiscuous mode [ 959.361045][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.471876][ T5980] bridge_slave_0: left allmulticast mode [ 959.477719][ T5980] bridge_slave_0: left promiscuous mode [ 959.521172][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.625646][T10534] capability: warning: `syz.5.929' uses deprecated v2 capabilities in a way that may be insecure [ 959.629827][ T5781] Bluetooth: hci3: command tx timeout [ 960.364514][T10541] trusted_key: encrypted_key: insufficient parameters specified [ 960.662340][ T5781] Bluetooth: hci6: command tx timeout [ 961.051006][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.210839][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.316129][ T5980] bond0 (unregistering): Released all slaves [ 961.486466][T10459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.522326][T10459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.019442][T10552] loop0: detected capacity change from 0 to 32768 [ 962.031688][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.038286][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.131402][T10552] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.935 (10552) [ 962.221394][T10552] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 962.231866][T10552] BTRFS info (device loop0): using sha256 checksum algorithm [ 962.486765][T10552] BTRFS info (device loop0): enabling ssd optimizations [ 962.494159][T10552] BTRFS info (device loop0): turning on async discard [ 962.504039][T10552] BTRFS info (device loop0): enabling free space tree [ 962.743167][ T5786] Bluetooth: hci6: command tx timeout [ 963.263080][T10459] team0: Port device team_slave_0 added [ 963.306205][T10475] chnl_net:caif_netlink_parms(): no params data found [ 963.374710][ T9531] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 963.581993][T10459] team0: Port device team_slave_1 added [ 964.120257][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 965.430210][T10591] process 'syz.0.941' launched '/dev/fd/4' with NULL argv: empty string added [ 965.661231][T10459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.711564][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.871597][T10459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.964105][T10459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.009453][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.159700][T10459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.469826][ T5980] hsr_slave_0: left promiscuous mode [ 966.503064][ T5980] hsr_slave_1: left promiscuous mode [ 966.551629][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.589634][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.632569][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.679553][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.839898][ T5980] veth1_macvtap: left promiscuous mode [ 966.845640][ T5980] veth0_macvtap: left promiscuous mode [ 966.882362][ T5980] veth1_vlan: left promiscuous mode [ 966.898379][ T5980] veth0_vlan: left promiscuous mode [ 967.807317][ T5826] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 968.062658][ T5826] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 968.088009][ T5826] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 968.149510][ T5826] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 968.218529][ T5826] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 968.253853][ T5826] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 968.299560][ T5826] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 968.393912][ T5826] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 968.430293][ T5826] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 968.523333][ T5826] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 968.649697][ T5826] usb 1-1: string descriptor 0 read error: -22 [ 968.656503][ T5826] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 968.728327][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.798693][ T5826] adutux 1-1:168.0: interrupt endpoints not found [ 969.217758][ T5826] usb 1-1: USB disconnect, device number 7 [ 970.951825][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 971.104411][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 972.602412][T10459] hsr_slave_0: entered promiscuous mode [ 972.652580][T10459] hsr_slave_1: entered promiscuous mode [ 972.685788][T10459] debugfs: 'hsr0' already exists in 'hsr' [ 972.730939][T10459] Cannot create hsr debugfs directory [ 973.058388][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.131087][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.138798][T10475] bridge_slave_0: entered allmulticast mode [ 973.203187][T10475] bridge_slave_0: entered promiscuous mode [ 973.276138][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 973.276215][ T29] audit: type=1326 audit(1770843639.918:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 973.337209][ T29] audit: type=1326 audit(1770843639.958:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 973.449479][ T29] audit: type=1326 audit(1770843639.958:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 973.577605][ T29] audit: type=1326 audit(1770843639.968:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 973.668212][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.679824][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.706092][T10475] bridge_slave_1: entered allmulticast mode [ 973.729543][ T29] audit: type=1326 audit(1770843639.968:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 973.778178][T10475] bridge_slave_1: entered promiscuous mode [ 973.834192][ T29] audit: type=1326 audit(1770843639.968:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 973.954210][ T29] audit: type=1326 audit(1770843639.968:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 974.087266][ T29] audit: type=1326 audit(1770843639.968:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 974.147283][ T29] audit: type=1326 audit(1770843639.968:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 974.261800][ T29] audit: type=1326 audit(1770843639.968:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66b433d399 code=0x7ffc0000 [ 974.439649][T10475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.532016][T10475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.488176][T10475] team0: Port device team_slave_0 added [ 975.575127][T10475] team0: Port device team_slave_1 added [ 976.241270][T10475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.248327][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.353876][T10475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.471456][T10475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.532916][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.619753][T10475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.709360][ T9299] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 976.912850][ T9299] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 976.954478][ T9299] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 976.994205][ T9299] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.052149][ T9299] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 977.072028][ T9299] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 977.118668][ T9299] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.149551][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.5.961'. [ 977.195965][ T9299] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 977.206002][ T9299] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 977.220790][T10475] hsr_slave_0: entered promiscuous mode [ 977.253202][ T9299] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.269476][T10475] hsr_slave_1: entered promiscuous mode [ 977.278156][T10475] debugfs: 'hsr0' already exists in 'hsr' [ 977.329638][T10475] Cannot create hsr debugfs directory [ 977.335457][ T9299] usb 8-1: string descriptor 0 read error: -22 [ 977.342999][ T9299] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 977.389642][ T9299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.486167][ T9299] adutux 8-1:168.0: interrupt endpoints not found [ 977.740208][ T7238] usb 8-1: USB disconnect, device number 39 [ 979.144751][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 979.755375][T10459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 979.996406][T10459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 980.190958][T10459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 980.621487][T10459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 982.215943][T10475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 982.258226][T10711] xt_hashlimit: size too large, truncated to 1048576 [ 982.313939][T10475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 982.441306][T10475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 982.661111][T10475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 983.077182][T10459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.555596][T10459] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.747860][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.755436][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.064788][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.072366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.137703][T10475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.665682][T10475] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.826667][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.834375][ T8219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.027484][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.035165][ T8219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.379027][T10751] trusted_key: encrypted_key: key user:syz not found [ 986.612523][T10754] overlayfs: failed to clone upperpath [ 986.763880][T10475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 986.966442][T10757] fuse: Unknown parameter 'group_i00000000000000000000' [ 987.673157][T10459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.144131][T10475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.868442][T10475] veth0_vlan: entered promiscuous mode [ 990.008712][T10475] veth1_vlan: entered promiscuous mode [ 990.576341][T10475] veth0_macvtap: entered promiscuous mode [ 990.672046][T10803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.989'. [ 990.731002][T10475] veth1_macvtap: entered promiscuous mode [ 990.774078][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.783706][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.452983][T10459] veth0_vlan: entered promiscuous mode [ 991.578828][T10475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.735787][T10475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.947039][T10459] veth1_vlan: entered promiscuous mode [ 991.978794][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.053351][ T8219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.114702][ T8219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.227564][ T8219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.862432][T10459] veth0_macvtap: entered promiscuous mode [ 992.996215][T10459] veth1_macvtap: entered promiscuous mode [ 993.366261][T10459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.458761][T10459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.771480][ T5984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.815201][ T5984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.867053][ T5984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.902968][ T5984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.999247][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 999.999320][ T29] audit: type=1326 audit(1770843666.608:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.130713][ T29] audit: type=1326 audit(1770843666.678:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.269376][ T29] audit: type=1326 audit(1770843666.678:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.376965][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.400248][ T29] audit: type=1326 audit(1770843666.678:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.444459][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.565824][ T29] audit: type=1326 audit(1770843666.678:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.678267][ T29] audit: type=1326 audit(1770843666.678:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.819956][ T29] audit: type=1326 audit(1770843666.678:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.847788][ T29] audit: type=1326 audit(1770843666.708:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.863567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.872772][ T29] audit: type=1326 audit(1770843666.708:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1000.959401][ T29] audit: type=1326 audit(1770843666.708:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.5.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94abf9bf79 code=0x7ffc0000 [ 1001.039389][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.250660][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1015'. [ 1001.287427][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 1001.527855][T10929] bond1: option lp_interval: invalid value (0) [ 1001.549573][T10929] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1001.625816][T10929] bond1 (unregistering): Released all slaves [ 1004.169984][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.220325][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.606604][ T9074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.633485][ T9074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.809648][ T7238] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1006.039354][ T7238] usb 5-1: Using ep0 maxpacket: 16 [ 1006.081478][ T7238] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1006.129920][ T7238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1006.208191][T10982] loop0: detected capacity change from 0 to 164 [ 1006.208765][ T7238] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1006.245119][ T7238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.268118][ T7238] usb 5-1: Product: syz [ 1006.274302][ T7238] usb 5-1: Manufacturer: syz [ 1006.286625][ T7238] usb 5-1: SerialNumber: syz [ 1006.325095][T10982] ISOFS: Bad logical zone size 2816 [ 1006.377295][ T7238] usb 5-1: config 0 descriptor?? [ 1006.517392][ T7238] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1006.643455][ T7238] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1007.091190][ T7238] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1007.181581][ T7238] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1007.223554][ T7238] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1007.271273][ T7238] em28xx 5-1:0.0: No AC97 audio processor [ 1008.140047][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1008.329579][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.417164][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.439583][ T10] usb 4-1: Product: syz [ 1008.443964][ T10] usb 4-1: Manufacturer: syz [ 1008.499317][ T10] usb 4-1: SerialNumber: syz [ 1008.753917][ T7238] kernel write not supported for file [eventfd] (pid: 7238 comm: kworker/1:5) [ 1008.838305][ T7238] usb 5-1: USB disconnect, device number 4 [ 1008.897510][ T7238] em28xx 5-1:0.0: Disconnecting em28xx [ 1008.934800][ T7238] em28xx 5-1:0.0: Freeing device [ 1009.682185][ T10] cdc_ncm 4-1:1.0: failed to get mac address [ 1009.765384][ T10] cdc_ncm 4-1:1.0: bind() failure [ 1009.892308][ T10] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1009.973797][ T10] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1010.062488][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1010.142900][ T10] usb 4-1: USB disconnect, device number 4 [ 1012.332810][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1012.549348][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1012.600836][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1012.660091][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1012.720872][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1012.767868][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.808360][ T10] usb 1-1: Product: syz [ 1012.824191][ T10] usb 1-1: Manufacturer: syz [ 1012.829001][ T10] usb 1-1: SerialNumber: syz [ 1012.879044][ T10] usb 1-1: config 0 descriptor?? [ 1013.004970][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1013.089878][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1013.679551][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1013.711836][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1013.787795][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1013.818704][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 1015.327251][ T10] usb 1-1: USB disconnect, device number 8 [ 1015.343712][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 1015.391915][ T10] em28xx 1-1:0.0: Freeing device [ 1016.154659][ T5984] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.488717][ T5984] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.166651][ T5984] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.486423][ T5984] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.430109][ T5984] bridge_slave_1: left allmulticast mode [ 1018.435968][ T5984] bridge_slave_1: left promiscuous mode [ 1018.557457][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.700765][ T5984] bridge_slave_0: left allmulticast mode [ 1018.706621][ T5984] bridge_slave_0: left promiscuous mode [ 1018.750447][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.593231][T11154] xt_hashlimit: size too large, truncated to 1048576 [ 1019.650931][T11157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1020.651634][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.811014][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.964249][ T5984] bond0 (unregistering): Released all slaves [ 1023.165765][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.179866][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1025.521763][ T5984] hsr_slave_0: left promiscuous mode [ 1025.594021][ T5984] hsr_slave_1: left promiscuous mode [ 1025.602986][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.637650][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.751964][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.780272][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.901457][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 1025.945532][ T5984] veth1_macvtap: left promiscuous mode [ 1025.991421][ T5984] veth0_macvtap: left promiscuous mode [ 1026.026293][ T5984] veth1_vlan: left promiscuous mode [ 1026.044449][ T5984] veth0_vlan: left promiscuous mode [ 1030.306577][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 1030.430539][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 1035.701068][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1035.930333][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.979623][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.987853][ T10] usb 4-1: Product: syz [ 1036.031202][ T10] usb 4-1: Manufacturer: syz [ 1036.044069][ T10] usb 4-1: SerialNumber: syz [ 1037.173106][ T10] cdc_ncm 4-1:1.0: failed to get mac address [ 1037.212971][ T10] cdc_ncm 4-1:1.0: bind() failure [ 1037.290070][ T10] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1037.329303][ T10] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1037.414164][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1037.486796][ T10] usb 4-1: USB disconnect, device number 5 [ 1040.423173][T11365] overlayfs: failed to clone upperpath [ 1040.708073][T11370] loop3: detected capacity change from 0 to 128 [ 1043.330840][T11410] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1157'. [ 1044.894482][T11438] 9p: Bad value for 'port' [ 1046.250439][T11455] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1172'. [ 1047.748981][T11473] 9p: Could not find request transport: f [ 1049.330418][T11501] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1186'. [ 1052.491327][T11538] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1052.538651][T11538] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1052.589568][T11538] overlayfs: missing 'lowerdir' [ 1052.793612][T11544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1200'. [ 1055.955888][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1055.955968][ T29] audit: type=1326 audit(1770843722.598:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1056.164063][ T29] audit: type=1326 audit(1770843722.678:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1056.309312][ T29] audit: type=1326 audit(1770843722.678:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1056.486897][ T29] audit: type=1326 audit(1770843722.678:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1056.736181][ T29] audit: type=1326 audit(1770843722.688:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f66b435c84e code=0x7ffc0000 [ 1056.930378][ T29] audit: type=1326 audit(1770843722.688:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f66b435c84e code=0x7ffc0000 [ 1057.784036][ T29] audit: type=1326 audit(1770843722.688:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f66b435c84e code=0x7ffc0000 [ 1058.406620][ T29] audit: type=1326 audit(1770843722.688:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1058.612326][T11591] netlink: 'syz.7.1213': attribute type 5 has an invalid length. [ 1058.673984][ T29] audit: type=1326 audit(1770843722.688:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1058.727587][T11591] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1213'. [ 1058.889607][ T29] audit: type=1326 audit(1770843722.728:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b439bf79 code=0x7ffc0000 [ 1061.568970][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1061.590719][ T29] audit: type=1326 audit(1770843728.198:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1061.709317][ T29] audit: type=1326 audit(1770843728.238:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1061.869369][ T29] audit: type=1326 audit(1770843728.238:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1061.995768][ T29] audit: type=1326 audit(1770843728.238:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1062.128454][ T29] audit: type=1326 audit(1770843728.268:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1062.279520][ T29] audit: type=1326 audit(1770843728.268:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1062.474607][T11632] netlink: 'syz.7.1225': attribute type 5 has an invalid length. [ 1062.579849][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1225'. [ 1066.706396][ T29] audit: type=1326 audit(1770843733.348:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1066.777977][ T29] audit: type=1326 audit(1770843733.348:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1066.884709][ T29] audit: type=1326 audit(1770843733.418:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1066.987309][ T29] audit: type=1326 audit(1770843733.418:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1067.104656][ T29] audit: type=1326 audit(1770843733.418:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1067.227965][ T29] audit: type=1326 audit(1770843733.488:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1067.399318][ T29] audit: type=1326 audit(1770843733.488:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.7.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea79bf79 code=0x7ffc0000 [ 1068.035580][T11681] netlink: 'syz.0.1238': attribute type 5 has an invalid length. [ 1068.089660][T11681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1238'. [ 1070.338583][T11700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1070.366176][T11700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1070.375789][T11700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1070.405949][T11700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1070.422838][T11700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1071.271241][ T29] audit: type=1326 audit(1770843737.888:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a99bf79 code=0x7ffc0000 [ 1071.429328][ T29] audit: type=1326 audit(1770843737.918:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a99bf79 code=0x7ffc0000 [ 1071.573405][ T29] audit: type=1326 audit(1770843738.028:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f110a99bf79 code=0x7ffc0000 [ 1071.718411][ T29] audit: type=1326 audit(1770843738.028:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a99bf79 code=0x7ffc0000 [ 1071.919611][ T29] audit: type=1326 audit(1770843738.028:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f110a99bf79 code=0x7ffc0000 [ 1072.070092][ T29] audit: type=1326 audit(1770843738.028:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a99bf79 code=0x7ffc0000 [ 1072.772857][T11714] loop4: detected capacity change from 0 to 32768 [ 1072.790720][T11700] Bluetooth: hci1: command tx timeout [ 1072.834699][T11714] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1249 (11714) [ 1072.859789][T11714] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1072.870179][T11714] BTRFS info (device loop4): using sha256 checksum algorithm [ 1073.003731][T11714] BTRFS info (device loop4): enabling ssd optimizations [ 1073.010966][T11714] BTRFS info (device loop4): turning on async discard [ 1073.017809][T11714] BTRFS info (device loop4): enabling free space tree [ 1074.111533][T11716] net_ratelimit: 1974 callbacks suppressed [ 1074.111617][T11716] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1074.819573][ T5781] Bluetooth: hci1: command tx timeout [ 1076.420353][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 1076.851233][T10459] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1076.909540][T11700] Bluetooth: hci1: command tx timeout [ 1077.562342][T11750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1251'. [ 1077.586399][T11699] chnl_net:caif_netlink_parms(): no params data found [ 1079.020420][ T5781] Bluetooth: hci1: command tx timeout [ 1079.664339][ T6189] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.014458][ T6189] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.465441][ T6189] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.541888][T11700] Bluetooth: hci6: command 0x0406 tx timeout [ 1081.840439][T11792] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1267'. [ 1082.125830][ T6189] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.394792][T11699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.437110][T11699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.495387][T11699] bridge_slave_0: entered allmulticast mode [ 1082.544544][T11699] bridge_slave_0: entered promiscuous mode [ 1082.627203][T11699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.649646][T11699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.661640][T11699] bridge_slave_1: entered allmulticast mode [ 1082.673879][T11699] bridge_slave_1: entered promiscuous mode [ 1082.681785][T11806] usb usb4: usbfs: process 11806 (syz.0.1270) did not claim interface 7 before use [ 1082.784608][T11806] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1083.513271][T11808] bond1: Removing last ns target with arp_interval on [ 1083.769831][T11699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.978935][T11699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.619275][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.639981][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.959737][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1276'. [ 1085.579939][ T6189] bridge_slave_1: left allmulticast mode [ 1085.632524][ T6189] bridge_slave_1: left promiscuous mode [ 1085.639240][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.770549][ T6189] bridge_slave_0: left allmulticast mode [ 1085.811277][ T6189] bridge_slave_0: left promiscuous mode [ 1085.817898][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.754783][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.824883][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.865900][ T6189] bond0 (unregistering): Released all slaves [ 1088.052462][T11699] team0: Port device team_slave_0 added [ 1088.128394][T11699] team0: Port device team_slave_1 added [ 1088.430347][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1283'. [ 1088.441290][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1283'. [ 1088.625520][T11851] loop0: detected capacity change from 0 to 128 [ 1088.682721][T11849] erspan1: entered promiscuous mode [ 1088.792751][T11699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.813989][T11699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.959651][T11699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.177673][T11699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.199410][T11699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.319481][T11699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.690610][T11856] bond2: Removing last ns target with arp_interval on [ 1090.012584][ T6189] hsr_slave_0: left promiscuous mode [ 1090.063427][ T6189] hsr_slave_1: left promiscuous mode [ 1090.099896][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.107489][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.200405][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.208039][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.719868][ T6189] veth1_macvtap: left promiscuous mode [ 1091.725606][ T6189] veth0_macvtap: left promiscuous mode [ 1092.149622][ T6189] veth1_vlan: left promiscuous mode [ 1092.369368][ T6189] veth0_vlan: left promiscuous mode [ 1094.411601][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 1094.500625][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 1095.801556][T11891] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1096.223976][T11699] hsr_slave_0: entered promiscuous mode [ 1096.333530][T11699] hsr_slave_1: entered promiscuous mode [ 1098.636323][T11917] loop4: detected capacity change from 0 to 128 [ 1100.002654][T11699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1100.135857][T11699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1100.283162][T11699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1100.387190][T11699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1103.967079][T11699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.219441][T11699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.321199][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.328714][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.462046][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.469643][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.072706][T11699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.735448][T11699] veth0_vlan: entered promiscuous mode [ 1110.933424][T11699] veth1_vlan: entered promiscuous mode [ 1111.373216][T11699] veth0_macvtap: entered promiscuous mode [ 1111.463603][T11699] veth1_macvtap: entered promiscuous mode [ 1111.738858][T11699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.931333][T11699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.070150][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.099910][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.168912][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.199484][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.552424][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'. [ 1123.275940][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.316312][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.694227][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.731821][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.351594][T12170] overlayfs: failed to clone upperpath [ 1137.317009][T12225] netlink: 'syz.0.1396': attribute type 12 has an invalid length. [ 1144.221034][T12260] loop3: detected capacity change from 0 to 128 [ 1145.248807][T12266] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1410'. [ 1145.349526][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 1146.360164][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.366763][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1149.580414][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'. [ 1150.321157][T12301] netlink: 'syz.3.1422': attribute type 27 has an invalid length. [ 1152.048126][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.057745][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.221638][T12301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.382608][T12301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.795675][T11700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1156.828150][T11700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1156.848294][T11700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1156.875762][T11700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1156.888221][T11700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.144774][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.227479][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.331609][T12306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1158.979396][T11700] Bluetooth: hci0: command tx timeout [ 1159.521115][ T1150] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.572323][ T1150] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.759432][ T1150] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.887667][ T1150] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.066403][T11700] Bluetooth: hci0: command tx timeout [ 1161.191770][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.810007][T12382] program syz.2.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1161.849533][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.272589][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.740457][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.156426][T11700] Bluetooth: hci0: command tx timeout [ 1165.182956][T12345] chnl_net:caif_netlink_parms(): no params data found [ 1165.273544][T11700] Bluetooth: hci0: command tx timeout [ 1165.416649][T12410] 9pnet_virtio: no channels available for device ./file0 [ 1166.138969][ T1150] bridge_slave_1: left allmulticast mode [ 1166.145988][ T1150] bridge_slave_1: left promiscuous mode [ 1166.306446][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.581030][ T1150] bridge_slave_0: left allmulticast mode [ 1166.600191][ T1150] bridge_slave_0: left promiscuous mode [ 1166.606784][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.674550][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.835303][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.905616][ T1150] bond0 (unregistering): Released all slaves [ 1170.074412][T12452] 9p: Could not find request transport: 0xffffffffffffffff [ 1170.932080][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.947498][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.978617][T12345] bridge_slave_0: entered allmulticast mode [ 1171.012718][T12345] bridge_slave_0: entered promiscuous mode [ 1171.075845][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.114199][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.137122][T12345] bridge_slave_1: entered allmulticast mode [ 1171.184208][T12345] bridge_slave_1: entered promiscuous mode [ 1171.812677][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.943090][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.234967][ T1150] hsr_slave_0: left promiscuous mode [ 1172.293231][ T1150] hsr_slave_1: left promiscuous mode [ 1172.315698][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.379907][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.532641][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.579490][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.647230][ T1150] veth1_macvtap: left promiscuous mode [ 1172.663437][ T1150] veth0_macvtap: left promiscuous mode [ 1172.700459][ T1150] veth1_vlan: left promiscuous mode [ 1172.705997][ T1150] veth0_vlan: left promiscuous mode [ 1175.509536][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 1175.611463][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 1176.346927][T12345] team0: Port device team_slave_0 added [ 1176.440890][T12345] team0: Port device team_slave_1 added [ 1176.831467][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.838597][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.969990][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.059551][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.066675][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.199207][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.557977][T12532] sctp: [Deprecated]: syz.2.1486 (pid 12532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1177.557977][T12532] Use struct sctp_sack_info instead [ 1177.813210][T12345] hsr_slave_0: entered promiscuous mode [ 1177.854192][T12345] hsr_slave_1: entered promiscuous mode [ 1177.894207][T12345] debugfs: 'hsr0' already exists in 'hsr' [ 1177.909973][T12345] Cannot create hsr debugfs directory [ 1180.968633][T12345] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1180.976041][ T29] audit: type=1326 audit(1770843847.608:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008a19bf79 code=0x7ffc0000 [ 1181.049261][ T29] audit: type=1326 audit(1770843847.608:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008a19bf79 code=0x7ffc0000 [ 1181.169277][ T29] audit: type=1326 audit(1770843847.728:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.4.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f008a19bf79 code=0x7ffc0000 [ 1181.174480][T12345] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1181.420553][T12345] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1181.532327][T12345] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1182.640412][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.792273][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.862632][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.870224][ T9074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.101687][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.109308][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.604409][T12345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.945967][T12598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1185.499289][ T7278] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 1185.787909][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.869744][ T7278] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1185.877997][ T7278] usb 3-1: config 0 has no interface number 0 [ 1185.919296][ T7278] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1185.930934][ T7278] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1185.947515][ T7278] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1185.957720][ T7278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.971201][ T7278] usb 3-1: config 0 descriptor?? [ 1185.980982][T12604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1186.013674][ T7278] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1186.435738][ T34] usb 3-1: USB disconnect, device number 10 [ 1188.654543][T12345] veth0_vlan: entered promiscuous mode [ 1188.793720][T12345] veth1_vlan: entered promiscuous mode [ 1189.595100][T12345] veth0_macvtap: entered promiscuous mode [ 1189.670186][T12345] veth1_macvtap: entered promiscuous mode [ 1189.838000][T12345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.993117][T12345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.118135][ T9074] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.161418][ T6189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.236439][ T6189] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.289986][T12646] fuse: Unknown parameter 'fd0x0000000000000003' [ 1190.300679][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.187850][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1194.384275][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1194.393665][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1194.403259][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1194.416325][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1194.514449][T11700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1195.021532][T12707] xt_hashlimit: size too large, truncated to 1048576 [ 1195.842376][T12717] fuse: Unknown parameter 'fd0x0000000000000003' [ 1196.663785][ T5781] Bluetooth: hci2: command tx timeout [ 1196.835824][T12694] chnl_net:caif_netlink_parms(): no params data found [ 1197.162272][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.205974][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.556971][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.589281][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.749220][ T5781] Bluetooth: hci2: command tx timeout [ 1198.761293][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.800834][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.856292][T12694] bridge_slave_0: entered allmulticast mode [ 1198.892663][T12694] bridge_slave_0: entered promiscuous mode [ 1198.972827][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.024443][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.073948][T12694] bridge_slave_1: entered allmulticast mode [ 1199.105582][T12694] bridge_slave_1: entered promiscuous mode [ 1199.466938][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.562869][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.942771][T12694] team0: Port device team_slave_0 added [ 1200.034200][T12694] team0: Port device team_slave_1 added [ 1200.587344][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.629461][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.774762][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.827757][ T5781] Bluetooth: hci2: command tx timeout [ 1200.919857][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.993088][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.087200][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.697107][T12694] hsr_slave_0: entered promiscuous mode [ 1201.752946][T12694] hsr_slave_1: entered promiscuous mode [ 1201.801358][T12694] debugfs: 'hsr0' already exists in 'hsr' [ 1201.839538][T12694] Cannot create hsr debugfs directory [ 1202.901320][ T5781] Bluetooth: hci2: command tx timeout [ 1204.517422][T11700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1204.533615][T11700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1204.560414][T11700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1204.591992][T11700] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1204.614185][T11700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1206.413279][T12694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1206.660127][ T5781] Bluetooth: hci4: command tx timeout [ 1206.819350][T12694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1206.937012][T12694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1207.260874][T12694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1207.542068][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.559975][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1208.461708][T12814] chnl_net:caif_netlink_parms(): no params data found [ 1208.740061][ T5781] Bluetooth: hci4: command tx timeout [ 1209.493665][T12876] tmpfs: Unknown parameter 'si' [ 1209.727787][ T9074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.177459][ T9074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.545690][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.708821][ T9074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.823063][ T5781] Bluetooth: hci4: command tx timeout [ 1211.107923][T12814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.143064][T12814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.181378][T12814] bridge_slave_0: entered allmulticast mode [ 1211.223811][T12814] bridge_slave_0: entered promiscuous mode [ 1211.339539][T12814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.371564][T12814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.394717][T12814] bridge_slave_1: entered allmulticast mode [ 1211.450009][T12814] bridge_slave_1: entered promiscuous mode [ 1211.527740][ T9074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.016078][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.099784][T12814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.212309][T12814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.649097][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.656579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.717344][T12814] team0: Port device team_slave_0 added [ 1212.816002][T12814] team0: Port device team_slave_1 added [ 1212.899784][ T5781] Bluetooth: hci4: command tx timeout [ 1212.958028][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.965742][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.526720][T12814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.554363][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.625599][T12814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.693158][T12814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.709113][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.774247][T12814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.125883][ T9074] bridge_slave_1: left allmulticast mode [ 1214.156895][ T9074] bridge_slave_1: left promiscuous mode [ 1214.220106][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.279927][ T9074] bridge_slave_0: left allmulticast mode [ 1214.286116][ T9074] bridge_slave_0: left promiscuous mode [ 1214.350476][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.051606][ T9074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.148801][ T9074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.194777][ T9074] bond0 (unregistering): Released all slaves [ 1217.311772][T12814] hsr_slave_0: entered promiscuous mode [ 1217.343771][T12814] hsr_slave_1: entered promiscuous mode [ 1217.381939][T12814] debugfs: 'hsr0' already exists in 'hsr' [ 1217.387853][T12814] Cannot create hsr debugfs directory [ 1217.395675][T12959] xt_TCPMSS: Only works on TCP SYN packets [ 1218.248906][ T9074] hsr_slave_0: left promiscuous mode [ 1218.290887][ T9074] hsr_slave_1: left promiscuous mode [ 1218.327893][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.359267][ T9074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.409792][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.417464][ T9074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.550050][ T9074] veth1_macvtap: left promiscuous mode [ 1218.555761][ T9074] veth0_macvtap: left promiscuous mode [ 1218.591550][ T9074] veth1_vlan: left promiscuous mode [ 1218.616103][ T9074] veth0_vlan: left promiscuous mode [ 1220.725702][ T9074] team0 (unregistering): Port device team_slave_1 removed [ 1220.801208][ T9074] team0 (unregistering): Port device team_slave_0 removed [ 1221.076806][T12999] fuse: Bad value for 'group_id' [ 1221.120576][T12999] fuse: Bad value for 'group_id' [ 1221.133055][T13000] loop8: detected capacity change from 0 to 128 [ 1221.684549][T12968] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1594'. [ 1222.966423][T13025] fuse: Bad value for 'fd' [ 1223.405474][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.507464][T13032] fuse: Bad value for 'group_id' [ 1223.531779][T13032] fuse: Bad value for 'group_id' [ 1224.355322][T12694] veth0_vlan: entered promiscuous mode [ 1224.504347][T12814] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1224.652168][T12814] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1224.748615][T12814] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1224.847779][T12694] veth1_vlan: entered promiscuous mode [ 1224.927551][T12814] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1225.410243][T12694] veth0_macvtap: entered promiscuous mode [ 1225.527245][T12694] veth1_macvtap: entered promiscuous mode [ 1225.965172][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.146742][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.364220][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.405859][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.460049][T13074] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1627'. [ 1226.485986][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.520663][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.977737][T12814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.177140][T13088] fuse: Bad value for 'fd' [ 1227.209744][T13084] bond1: entered allmulticast mode [ 1227.390442][T12814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.495233][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.502803][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.691251][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.698745][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.827301][T13113] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1638'. [ 1229.473177][T13125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1641'. [ 1230.391153][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.233544][T13155] netlink: 192 bytes leftover after parsing attributes in process `syz.8.1649'. [ 1233.052995][T12814] veth0_vlan: entered promiscuous mode [ 1233.202047][T12814] veth1_vlan: entered promiscuous mode [ 1233.931233][T12814] veth0_macvtap: entered promiscuous mode [ 1234.018939][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.028427][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.047813][T12814] veth1_macvtap: entered promiscuous mode [ 1234.308518][ T5871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.360600][ T5871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.512373][T12814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.648939][T12814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.804487][ T5871] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.910581][ T5871] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.983368][ T5982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.029378][ T5982] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.896785][T13217] loop1: detected capacity change from 0 to 128 [ 1236.847745][T13229] fuse: Bad value for 'fd' [ 1240.073076][T13282] netlink: 'syz.1.1682': attribute type 3 has an invalid length. [ 1240.161345][T13283] overlayfs: missing 'lowerdir' [ 1240.290734][T13287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1684'. [ 1240.341285][T13287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1684'. [ 1240.923569][T13294] fuse: Bad value for 'fd' [ 1243.174241][T13329] overlayfs: missing 'lowerdir' [ 1243.195481][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.235426][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.628791][ T5871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.640497][ T5871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.229847][ T1150] bridge_slave_1: left allmulticast mode [ 1244.235703][ T1150] bridge_slave_1: left promiscuous mode [ 1244.312240][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.440415][ T1150] bridge_slave_0: left allmulticast mode [ 1244.446264][ T1150] bridge_slave_0: left promiscuous mode [ 1244.501111][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.323706][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.405819][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.440390][ T1150] bond0 (unregistering): Released all slaves [ 1247.174945][ T1150] hsr_slave_0: left promiscuous mode [ 1247.215795][ T1150] hsr_slave_1: left promiscuous mode [ 1247.251657][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.322423][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.078750][T13397] 9p: Bad value for 'rfdno' [ 1248.841090][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 1249.134058][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 1258.276122][T13497] loop6: detected capacity change from 0 to 128 [ 1258.521222][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1258.581256][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1260.780312][T13532] io-wq is not configured for unbound workers [ 1267.524200][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.538928][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.905295][T13629] ===================================================== [ 1267.912761][T13629] BUG: KMSAN: uninit-value in validate_xmit_skb+0x14e1/0x2400 [ 1267.920632][T13629] validate_xmit_skb+0x14e1/0x2400 [ 1267.925908][T13629] validate_xmit_skb_list+0xd4/0x320 [ 1267.931478][T13629] sch_direct_xmit+0xd4/0xcf0 [ 1267.936300][T13629] __dev_queue_xmit+0x2f2d/0x5890 [ 1267.941695][T13629] packet_xmit+0x8f/0x710 [ 1267.946270][T13629] packet_sendmsg+0x91d9/0xa320 [ 1267.951478][T13629] ____sys_sendmsg+0xfe7/0x1080 [ 1267.956577][T13629] ___sys_sendmsg+0x271/0x3b0 [ 1267.961601][T13629] __x64_sys_sendmsg+0x211/0x3e0 [ 1267.966724][T13629] x64_sys_call+0x1e20/0x3ea0 [ 1267.971733][T13629] do_syscall_64+0x134/0xf80 [ 1267.976569][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.982834][T13629] [ 1267.985232][T13629] Uninit was stored to memory at: [ 1267.990650][T13629] validate_xmit_skb+0x14da/0x2400 [ 1267.996093][T13629] validate_xmit_skb_list+0xd4/0x320 [ 1268.001715][T13629] sch_direct_xmit+0xd4/0xcf0 [ 1268.006552][T13629] __dev_queue_xmit+0x2f2d/0x5890 [ 1268.011905][T13629] packet_xmit+0x8f/0x710 [ 1268.016390][T13629] packet_sendmsg+0x91d9/0xa320 [ 1268.021622][T13629] ____sys_sendmsg+0xfe7/0x1080 [ 1268.026635][T13629] ___sys_sendmsg+0x271/0x3b0 [ 1268.031625][T13629] __x64_sys_sendmsg+0x211/0x3e0 [ 1268.036731][T13629] x64_sys_call+0x1e20/0x3ea0 [ 1268.041802][T13629] do_syscall_64+0x134/0xf80 [ 1268.046545][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.052758][T13629] [ 1268.055150][T13629] Uninit was created at: [ 1268.059827][T13629] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 1268.065975][T13629] kmalloc_reserve+0x13c/0x4b0 [ 1268.071116][T13629] __alloc_skb+0x805/0x1030 [ 1268.075761][T13629] alloc_skb_with_frags+0xc5/0xa60 [ 1268.081199][T13629] sock_alloc_send_pskb+0xacb/0xc60 [ 1268.086650][T13629] packet_sendmsg+0x7477/0xa320 [ 1268.091805][T13629] ____sys_sendmsg+0xfe7/0x1080 [ 1268.096827][T13629] ___sys_sendmsg+0x271/0x3b0 [ 1268.101774][T13629] __x64_sys_sendmsg+0x211/0x3e0 [ 1268.106875][T13629] x64_sys_call+0x1e20/0x3ea0 [ 1268.111849][T13629] do_syscall_64+0x134/0xf80 [ 1268.116596][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.122758][T13629] [ 1268.125168][T13629] CPU: 1 UID: 0 PID: 13629 Comm: syz.8.1799 Not tainted syzkaller #0 PREEMPT(full) [ 1268.134806][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1268.145090][T13629] ===================================================== [ 1268.152234][T13629] Disabling lock debugging due to kernel taint [ 1268.158487][T13629] Kernel panic - not syncing: kmsan.panic set ... [ 1268.165035][T13629] CPU: 1 UID: 0 PID: 13629 Comm: syz.8.1799 Tainted: G B syzkaller #0 PREEMPT(full) [ 1268.176154][T13629] Tainted: [B]=BAD_PAGE [ 1268.180381][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1268.190550][T13629] Call Trace: [ 1268.193906][T13629] [ 1268.196911][T13629] __dump_stack+0x26/0x30 [ 1268.201392][T13629] dump_stack_lvl+0x50/0x1c0 [ 1268.206139][T13629] ? dump_stack+0x12/0x25 [ 1268.210614][T13629] dump_stack+0x1e/0x25 [ 1268.214910][T13629] vpanic+0x435/0xd40 [ 1268.219067][T13629] panic+0x15d/0x160 [ 1268.223160][T13629] kmsan_report+0x31a/0x320 [ 1268.227813][T13629] ? __msan_warning+0x1b/0x30 [ 1268.232608][T13629] ? validate_xmit_skb+0x14e1/0x2400 [ 1268.238038][T13629] ? validate_xmit_skb_list+0xd4/0x320 [ 1268.243641][T13629] ? sch_direct_xmit+0xd4/0xcf0 [ 1268.248625][T13629] ? __dev_queue_xmit+0x2f2d/0x5890 [ 1268.253970][T13629] ? packet_xmit+0x8f/0x710 [ 1268.258607][T13629] ? packet_sendmsg+0x91d9/0xa320 [ 1268.263806][T13629] ? ____sys_sendmsg+0xfe7/0x1080 [ 1268.268985][T13629] ? ___sys_sendmsg+0x271/0x3b0 [ 1268.273984][T13629] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1268.279257][T13629] ? x64_sys_call+0x1e20/0x3ea0 [ 1268.284357][T13629] ? do_syscall_64+0x134/0xf80 [ 1268.289333][T13629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.295545][T13629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.301770][T13629] ? skb_network_protocol+0x898/0xaa0 [ 1268.307295][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.312556][T13629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1268.318535][T13629] ? netif_skb_features+0x1788/0x2160 [ 1268.324077][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.329342][T13629] __msan_warning+0x1b/0x30 [ 1268.333976][T13629] validate_xmit_skb+0x14e1/0x2400 [ 1268.339321][T13629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1268.345298][T13629] ? filter_irq_stacks+0x49/0x190 [ 1268.350593][T13629] validate_xmit_skb_list+0xd4/0x320 [ 1268.356055][T13629] sch_direct_xmit+0xd4/0xcf0 [ 1268.360858][T13629] ? kmsan_get_metadata+0x146/0x160 [ 1268.366206][T13629] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1268.372759][T13629] __dev_queue_xmit+0x2f2d/0x5890 [ 1268.377943][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.383205][T13629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1268.389190][T13629] ? __dev_queue_xmit+0x27d/0x5890 [ 1268.394491][T13629] packet_xmit+0x8f/0x710 [ 1268.398963][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.404224][T13629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1268.410190][T13629] packet_sendmsg+0x91d9/0xa320 [ 1268.415211][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.420464][T13629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1268.426430][T13629] ? aa_label_sk_perm+0x759/0x810 [ 1268.431698][T13629] ? tomoyo_socket_sendmsg_permission+0x31/0x590 [ 1268.438256][T13629] ? filter_irq_stacks+0x49/0x190 [ 1268.443437][T13629] ? ip_compute_csum+0x270/0x3f0 [ 1268.448559][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.453826][T13629] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1268.460437][T13629] ? __pfx_packet_sendmsg+0x10/0x10 [ 1268.465807][T13629] ? __pfx_packet_sendmsg+0x10/0x10 [ 1268.471175][T13629] ____sys_sendmsg+0xfe7/0x1080 [ 1268.476232][T13629] ___sys_sendmsg+0x271/0x3b0 [ 1268.481053][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.486334][T13629] ? __rcu_read_unlock+0x6c/0xd0 [ 1268.491528][T13629] ? __fget_files+0x3b4/0x4a0 [ 1268.496426][T13629] ? __fget_files+0x3b9/0x4a0 [ 1268.501258][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.506516][T13629] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1268.512480][T13629] __x64_sys_sendmsg+0x211/0x3e0 [ 1268.517594][T13629] ? kmsan_get_metadata+0xf1/0x160 [ 1268.522868][T13629] x64_sys_call+0x1e20/0x3ea0 [ 1268.527714][T13629] do_syscall_64+0x134/0xf80 [ 1268.532432][T13629] ? clear_bhb_loop+0x50/0xa0 [ 1268.537256][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.543289][T13629] RIP: 0033:0x7f35e059bf79 [ 1268.547801][T13629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.567549][T13629] RSP: 002b:00007f35e13f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.576109][T13629] RAX: ffffffffffffffda RBX: 00007f35e0815fa0 RCX: 00007f35e059bf79 [ 1268.584196][T13629] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000004 [ 1268.592276][T13629] RBP: 00007f35e06327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.600350][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.608430][T13629] R13: 00007f35e0816038 R14: 00007f35e0815fa0 R15: 00007fffe569c0e8 [ 1268.616553][T13629] [ 1268.619812][T13629] Kernel Offset: disabled [ 1268.624187][T13629] Rebooting in 86400 seconds..