last executing test programs: 17m8.457848574s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) syz_create_resource$binfmt(0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="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", 0x2000, 0x0) 17m7.049098324s ago: executing program 0 (id=13): r0 = socket$inet6(0xa, 0x3, 0x8) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x80000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) sendmmsg$inet6(r6, &(0x7f0000001780)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x6, @loopback, 0x9d6f}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000004c0)}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e20, 0x7, @mcast2, 0x598a}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000700)="05fa91b2c833ee60a10a3704d1bb192f7b3e5588fd1b078055bcad212ca321d40eeafd86b5d4b33f1c71f9a2b808f5dd96a1d6c81f36e3578911c0c7ba76a41c2e3048e4958e350f2c53f847914abb1970af9e20f398459090ec5ba9e229377472eda2fa6a987fb5aca96c12b2375d253e2ed0ce9b746a287c0413b3aad41165f3551d0ddb48caa39e7f990938c61033cea4970802793685ee06ce9c6107d12a199c01b7c69d2c94695c4889ea8d2a8f3dc5a7eeff3172d4f673e1c0c4f9b5ff82921018afc454c7753a", 0xca}], 0x1, &(0x7f0000000940)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @dstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x3c, 0x6, '\x00', [@jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x1}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xa5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xbb000000}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="990120d05bde91ec1a6402223a84bcb38f", 0x11}, {0x0}, {&(0x7f0000000cc0)}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001180)="ca5119ab8dca615c981f6210141c9374bc2525c7f7cef6e8124353ba9e67b8a773f7ca00bc605ca01b08ba445db1956ed74f73f933f2286be910abe07edc3191e4f5183dbde741af6a345e2a32658ef3c22e95a910d2e851205e983b86506a6430fcfa970e3cb8d99da0848e0957eeebda12ba81403500db9441749721735c3d48b3cb9bda690cf82e84ad8a67cb201e90af6b456a147358", 0x98}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001580)="8dc4cf870aee449300dfc836a195aa0d37d96a80cfddbfdf97065ac88b2abc400452c4ca4b2c5dd25a0a09e8249ea91cce6778da1b82e8d621a7ccbf70b2bcea605dcca161a40d880519a181d7c77c617a3e98b4d67f7246e6", 0x59}, {&(0x7f0000001600)="ecf6c5e2666f4c0fcc2f7c", 0xb}, {&(0x7f0000001640)="fc7dc8468d6c96e1a2bc2c13dd61660ca13879fabf128703d42f7e034bcca32fb690ac832fae694653a04a775d7a5a881eed92b33aff7a679156d5181ab61de6dc0df130a8606caa6082248f22a2dcc24cb25e16a7264ab793202abb89097a76569ae906b549b76fcc2a5e0a9af5929d273ccfb73d86f9f283dfd466878dc886b84af1d9b42e91964478d5560e958dd1114f27e81611b1287fdc24efb758cbfa232b1eb0dfad331ccf393c3f781959bc767e915c3c9971fbdd70b7afa77fa2b81f673230ebe600fdee3be10b85b368075e1c59683b", 0xd5}], 0x3}}], 0x5, 0x4000800) 17m4.801279422s ago: executing program 0 (id=16): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000280)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 16m58.841053476s ago: executing program 4 (id=25): r0 = socket$inet6(0xa, 0x3, 0x8) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x80000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) sendmmsg$inet6(r6, &(0x7f0000001780)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x6, @loopback, 0x9d6f}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000004c0)}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e20, 0x7, @mcast2, 0x598a}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000700)="05fa91b2c833ee60a10a3704d1bb192f7b3e5588fd1b078055bcad212ca321d40eeafd86b5d4b33f1c71f9a2b808f5dd96a1d6c81f36e3578911c0c7ba76a41c2e3048e4958e350f2c53f847914abb1970af9e20f398459090ec5ba9e229377472eda2fa6a987fb5aca96c12b2375d253e2ed0ce9b746a287c0413b3aad41165f3551d0ddb48caa39e7f990938c61033cea4970802793685ee06ce9c6107d12a199c01b7c69d2c94695c4889ea8d2a8f3dc5a7eeff3172d4f673e1c0c4f9b5ff82921018afc454c7753a", 0xca}], 0x1, &(0x7f0000000940)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @dstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x3c, 0x6, '\x00', [@jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x1}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xa5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xbb000000}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="990120d05bde91ec1a6402223a84bcb38f", 0x11}, {0x0}, {&(0x7f0000000cc0)}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001180)="ca5119ab8dca615c981f6210141c9374bc2525c7f7cef6e8124353ba9e67b8a773f7ca00bc605ca01b08ba445db1956ed74f73f933f2286be910abe07edc3191e4f5183dbde741af6a345e2a32658ef3c22e95a910d2e851205e983b86506a6430fcfa970e3cb8d99da0848e0957eeebda12ba81403500db9441749721735c3d48b3cb9bda690cf82e84ad8a67cb201e90af6b456a147358", 0x98}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001580)="8dc4cf870aee449300dfc836a195aa0d37d96a80cfddbfdf97065ac88b2abc400452c4ca4b2c5dd25a0a09e8249ea91cce6778da1b82e8d621a7ccbf70b2bcea605dcca161a40d880519a181d7c77c617a3e98b4d67f7246e6", 0x59}, {&(0x7f0000001600)="ecf6c5e2666f4c0fcc2f7c", 0xb}, {&(0x7f0000001640)="fc7dc8468d6c96e1a2bc2c13dd61660ca13879fabf128703d42f7e034bcca32fb690ac832fae694653a04a775d7a5a881eed92b33aff7a679156d5181ab61de6dc0df130a8606caa6082248f22a2dcc24cb25e16a7264ab793202abb89097a76569ae906b549b76fcc2a5e0a9af5929d273ccfb73d86f9f283dfd466878dc886b84af1d9b42e91964478d5560e958dd1114f27e81611b1287fdc24efb758cbfa232b1eb0dfad331ccf393c3f781959bc767e915c3c9971fbdd70b7afa77fa2b81f673230ebe600fdee3be10b85b368075e1c59683b", 0xd5}], 0x3}}], 0x5, 0x4000800) 16m57.181108876s ago: executing program 4 (id=28): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x2) 16m55.738458102s ago: executing program 0 (id=31): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xe) 16m54.189809808s ago: executing program 4 (id=34): syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) poll(&(0x7f0000000040), 0x0, 0xd065) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 16m46.534248102s ago: executing program 4 (id=41): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m38.088297059s ago: executing program 32 (id=31): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xe) 16m38.049517294s ago: executing program 4 (id=46): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/111, 0x6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18ef5db23600000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcdfffff000000000000000085000000410000008500000005000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) splice(r7, &(0x7f00000003c0)=0x8, r8, &(0x7f0000001bc0)=0x9b80, 0x7, 0xe) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000440)=""/128, 0x80}], 0x4, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f0000001a40)=""/196, 0xc4}], 0x7, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 16m31.225934499s ago: executing program 4 (id=49): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x82f1, 0xffffffffffffffff, 0xffffd000) 16m14.104313432s ago: executing program 33 (id=49): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x82f1, 0xffffffffffffffff, 0xffffd000) 14m21.813974118s ago: executing program 3 (id=189): mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 14m20.410796463s ago: executing program 3 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/111, 0x6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18ef5db23600000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcdfffff000000000000000085000000410000008500000005000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) splice(r7, &(0x7f00000003c0)=0x8, r8, &(0x7f0000001bc0)=0x9b80, 0x7, 0xe) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000440)=""/128, 0x80}], 0x4, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f0000001a40)=""/196, 0xc4}], 0x7, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 14m13.84356785s ago: executing program 3 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf7473000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) 14m12.183069527s ago: executing program 3 (id=200): syz_clone3(&(0x7f0000000600)={0x22028000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) llistxattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$can_bcm(0x1d, 0x2, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x100000000000000) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000000)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x1}], 0x1000, 0x0, &(0x7f0000000680)="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"}) 14m8.638099961s ago: executing program 3 (id=203): syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000000b000000", 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) r7 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x7ffffffe, 0x12) 14m7.146173609s ago: executing program 3 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/111, 0x6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18ef5db23600000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcdfffff000000000000000085000000410000008500000005000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) splice(r7, &(0x7f00000003c0)=0x8, r8, &(0x7f0000001bc0)=0x9b80, 0x7, 0xe) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000440)=""/128, 0x80}], 0x4, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f0000001a40)=""/196, 0xc4}], 0x7, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 13m51.916255669s ago: executing program 34 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/111, 0x6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18ef5db23600000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcdfffff000000000000000085000000410000008500000005000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) splice(r7, &(0x7f00000003c0)=0x8, r8, &(0x7f0000001bc0)=0x9b80, 0x7, 0xe) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000440)=""/128, 0x80}], 0x4, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f0000001a40)=""/196, 0xc4}], 0x7, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 12m58.835000686s ago: executing program 2 (id=273): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 12m51.923157487s ago: executing program 2 (id=279): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0xc044840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 12m47.808503203s ago: executing program 2 (id=282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x4a}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 12m45.026762976s ago: executing program 2 (id=284): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 12m43.527639895s ago: executing program 2 (id=285): mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) gettid() open(&(0x7f0000000000)='./file1\x00', 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 12m42.249757969s ago: executing program 2 (id=287): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x10200, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write(r0, &(0x7f0000000040)="240000001a00df0214f9f407000904001f000000ff030002000200000800040001000000", 0x24) 12m26.330831803s ago: executing program 35 (id=287): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x10200, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write(r0, &(0x7f0000000040)="240000001a00df0214f9f407000904001f000000ff030002000200000800040001000000", 0x24) 15.09385653s ago: executing program 8 (id=1002): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c00)={0x1c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14.33717885s ago: executing program 1 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/226, 0x3a, 0xe2, 0x1}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b08000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12.559362842s ago: executing program 1 (id=1006): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, 0x0, 0x0) 12.342352903s ago: executing program 1 (id=1007): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200320002030000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa00000000fa0000000300"], 0x80}}, 0x0) 12.105396084s ago: executing program 1 (id=1008): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write(r2, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 10.897821377s ago: executing program 1 (id=1009): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8a"}}, 0x119) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 10.693173577s ago: executing program 1 (id=1011): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x5, 0x52a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x800809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff77, 0x401, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x8, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x401, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x9, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x7, 0x5, 0x7f, 0x59, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x2, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000006c0)="17000000020001004003be8c5e687a8a6a003c00020100ecff3f00000003a96c6b06169da9c0f8d94d5bbb6a880a00243c5197b29f9368bdd6c8db933e7a2fdfff0afc5e0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df018000000300000000feff000080c457681f", 0x70) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.020161625s ago: executing program 6 (id=1013): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0xa) 9.637486098s ago: executing program 6 (id=1014): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 9.637047788s ago: executing program 5 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/226, 0x3a, 0xe2, 0x1}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b08000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 9.46579153s ago: executing program 6 (id=1016): r0 = gettid() io_uring_setup(0x17f7, &(0x7f0000000500)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.834157689s ago: executing program 5 (id=1018): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write(r2, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 7.666063679s ago: executing program 6 (id=1019): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.384179538s ago: executing program 6 (id=1020): eventfd2(0xb105, 0x1) getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.681120145s ago: executing program 7 (id=1022): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r4, 0x0, &(0x7f0000000080)) 6.080488055s ago: executing program 5 (id=1023): syz_emit_ethernet(0x3a1, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x36b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x100, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x19, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x8, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 5.381978697s ago: executing program 8 (id=1024): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xa) 5.093388142s ago: executing program 7 (id=1025): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x2, 0x0, 0x7, 0x0, [], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={&(0x7f00000002c0)=[r6], 0x1, r7, r10, 0x5, 0xaf, 0x401, 0x6, {0x40, 0x1, 0xfffc, 0x9, 0x1, 0x8, 0x4, 0x3, 0x800, 0x0, 0xbb35, 0x6, 0x9, 0x80000001, "c642398647a5b49497a88415bf0652aecd8d8dfce87410c86e3ac3674f470bec"}}) 5.03370408s ago: executing program 5 (id=1026): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000032c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) 4.747318821s ago: executing program 8 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b08000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.838581189s ago: executing program 5 (id=1028): r0 = gettid() io_uring_setup(0x17f7, &(0x7f0000000500)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.775319092s ago: executing program 7 (id=1029): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xeaef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a1, 0x20000], [0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 2.619289092s ago: executing program 8 (id=1030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b1", 0x2d) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="1b54beef9765f16d31f668d2db37f75318510ca6025213c6788499c98b9f0e44fbf86f9f5723d4dd85b291e05f5e2aff1bf823e761dd38fed3c9d4fd078734acf85dae7e65c031996462832f2e43e417a5bb2caf853034fa56ca2546e93a459f675d2eb87a6a770800000000000000f27e32f6198656ad1152d7fd310000", 0x7e}, {&(0x7f00000005c0)="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", 0xf7c}, {&(0x7f0000000140)="c7eff66a802c9b2e3b534c61cad2848571fb7fc30e08", 0x16}], 0x3, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000880}], 0x1, 0x4054) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) 2.398502841s ago: executing program 8 (id=1031): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.04803885s ago: executing program 8 (id=1032): readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.760821234s ago: executing program 5 (id=1033): syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) poll(&(0x7f0000000040), 0x0, 0xd065) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 453.414758ms ago: executing program 7 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 290.51314ms ago: executing program 7 (id=1035): syz_emit_ethernet(0x3a1, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x36b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x100, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x19, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x8, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 38.623698ms ago: executing program 7 (id=1036): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) creat(&(0x7f0000000080)='./bus\x00', 0x100) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) close(0x3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1037): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000032c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) kernel console output (not intermixed with test programs): tadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.970820][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.149341][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 849.605623][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.605652][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.605683][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.901922][ T8675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 849.976154][ T8675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 849.999682][ T8675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.005404][ T8675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.065681][ T8675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.313405][ T9680] hsr_slave_0: entered promiscuous mode [ 851.314369][ T9680] hsr_slave_1: entered promiscuous mode [ 851.314965][ T9680] debugfs: 'hsr0' already exists in 'hsr' [ 851.314981][ T9680] Cannot create hsr debugfs directory [ 851.316472][ T5977] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 851.477814][ T5977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.477845][ T5977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.479999][ T5977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 851.480067][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 851.480081][ T5977] usb 2-1: SerialNumber: syz [ 851.575971][ T3567] hsr_slave_0: left promiscuous mode [ 851.615725][ T3567] hsr_slave_1: left promiscuous mode [ 851.617174][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.639231][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.694930][ T5977] usb 2-1: 0:2 : does not exist [ 851.732686][ T5977] usb 2-1: USB disconnect, device number 27 [ 851.780240][ T9768] udevd[9768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.815607][ T3567] hsr_slave_0: left promiscuous mode [ 851.855704][ T3567] hsr_slave_1: left promiscuous mode [ 851.856435][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.886710][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.185623][ T8675] Bluetooth: hci4: command tx timeout [ 852.696666][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 852.916413][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 854.265780][ T8675] Bluetooth: hci4: command tx timeout [ 854.357894][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 854.507062][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 854.717208][ T9793] netlink: 144 bytes leftover after parsing attributes in process `syz.1.676'. [ 856.451779][ T8675] Bluetooth: hci4: command tx timeout [ 858.535857][ T8675] Bluetooth: hci4: command tx timeout [ 858.915150][ T9587] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 859.001995][ T9587] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 859.143221][ T9587] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 859.420368][ T9587] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 859.746739][ T9772] chnl_net:caif_netlink_parms(): no params data found [ 860.166660][ T9576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 860.269589][ T9576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 860.971248][ T9576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 861.108444][ T9576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 861.424179][ T9772] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.424481][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.424661][ T9772] bridge_slave_0: entered allmulticast mode [ 861.447113][ T9772] bridge_slave_0: entered promiscuous mode [ 861.465292][ T9772] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.472970][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.473414][ T9772] bridge_slave_1: entered allmulticast mode [ 861.493768][ T9772] bridge_slave_1: entered promiscuous mode [ 861.926745][ T9772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.056252][ T9772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.749514][ T9772] team0: Port device team_slave_0 added [ 862.769061][ T9772] team0: Port device team_slave_1 added [ 864.209128][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.209149][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.209164][ T9772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.409238][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.409254][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.409269][ T9772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.204746][ T9772] hsr_slave_0: entered promiscuous mode [ 865.207450][ T9772] hsr_slave_1: entered promiscuous mode [ 865.208611][ T9772] debugfs: 'hsr0' already exists in 'hsr' [ 865.208634][ T9772] Cannot create hsr debugfs directory [ 865.479120][ T9680] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 865.556879][ T9680] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 865.738936][ T9680] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 865.823066][ T9680] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.097387][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.300826][ T3567] bridge_slave_1: left allmulticast mode [ 866.300857][ T3567] bridge_slave_1: left promiscuous mode [ 866.301131][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.367162][ T3567] bridge_slave_0: left allmulticast mode [ 866.367185][ T3567] bridge_slave_0: left promiscuous mode [ 866.367408][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.429054][ T3567] bridge_slave_1: left allmulticast mode [ 866.429077][ T3567] bridge_slave_1: left promiscuous mode [ 866.429259][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.496600][ T3567] bridge_slave_0: left allmulticast mode [ 866.496623][ T3567] bridge_slave_0: left promiscuous mode [ 866.496859][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.356309][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.416237][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.458141][ T3567] bond0 (unregistering): Released all slaves [ 870.026904][ T8472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.041063][ T8472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.042297][ T8472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.051937][ T8472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.052814][ T8472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.090433][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.157496][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.190060][ T3567] bond0 (unregistering): Released all slaves [ 870.610047][ T9587] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.656009][ T6189] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 870.716522][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.716633][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.898477][ T6189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.898514][ T6189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.898555][ T6189] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 870.898571][ T6189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.902884][ T6189] usb 2-1: config 0 descriptor?? [ 870.975807][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.976041][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.127477][ T3567] hsr_slave_0: left promiscuous mode [ 871.197476][ T3567] hsr_slave_1: left promiscuous mode [ 871.199383][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.237870][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.375598][ T3567] hsr_slave_0: left promiscuous mode [ 871.396817][ T3567] hsr_slave_1: left promiscuous mode [ 871.398877][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.441781][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.458802][ T9] hid_parser_main: 10 callbacks suppressed [ 871.458833][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 871.504486][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 871.979526][ T6189] usbhid 2-1:0.0: can't add hid device: -71 [ 871.979614][ T6189] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 872.000478][ T6189] usb 2-1: USB disconnect, device number 28 [ 872.105823][ T8472] Bluetooth: hci2: command tx timeout [ 872.576543][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 872.783586][ T8675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 872.801533][ T8675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 872.802967][ T8675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 872.804449][ T8675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 872.807181][ T8675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.852069][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 872.915611][ T9278] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 873.078273][ T9278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 873.078302][ T9278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 873.078330][ T9278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 873.078345][ T9278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 873.080775][ T9278] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.080802][ T9278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.080814][ T9278] usb 2-1: Product: syz [ 873.080822][ T9278] usb 2-1: Manufacturer: syz [ 873.080830][ T9278] usb 2-1: SerialNumber: syz [ 873.106562][ T9910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.111368][ T9278] cdc_mbim 2-1:1.0: skipping garbage [ 873.342113][ T9910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.342317][ T9910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.948379][ T9910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.948528][ T9910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.948910][ T9278] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 873.966663][ T9278] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 873.991915][ T9278] wwan wwan0: port wwan0mbim0 attached [ 874.185634][ T8472] Bluetooth: hci2: command tx timeout [ 874.616571][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 874.880680][ T8675] Bluetooth: hci1: command tx timeout [ 874.927002][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 876.265649][ T8472] Bluetooth: hci2: command tx timeout [ 876.905816][ T8472] Bluetooth: hci1: command tx timeout [ 878.114304][ T9278] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 92:a7:72:2a:28:78 [ 878.136605][ T9278] usb 2-1: USB disconnect, device number 29 [ 878.142124][ T9278] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 878.353358][ T8472] Bluetooth: hci2: command tx timeout [ 878.620582][ T9278] wwan wwan0: port wwan0mbim0 disconnected [ 879.007507][ T8472] Bluetooth: hci1: command tx timeout [ 879.026818][ T9278] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 879.211446][ T9278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.211482][ T9278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.211522][ T9278] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 879.211547][ T9278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.253948][ T9278] usb 2-1: config 0 descriptor?? [ 879.515994][ T9680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.684462][ T9899] chnl_net:caif_netlink_parms(): no params data found [ 879.765816][ T9772] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 879.900592][ T8679] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 879.942576][ T8679] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 880.203833][ T9772] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 880.584781][ T9772] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 880.732761][ T9772] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 880.822351][ T9278] usbhid 2-1:0.0: can't add hid device: -71 [ 880.822487][ T9278] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 880.843048][ T9278] usb 2-1: USB disconnect, device number 30 [ 880.882166][ T9680] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.051415][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 881.065835][ T8472] Bluetooth: hci1: command tx timeout [ 881.159828][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.160066][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.160302][ T9899] bridge_slave_0: entered allmulticast mode [ 881.162377][ T9899] bridge_slave_0: entered promiscuous mode [ 881.169717][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.169873][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.195816][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.195969][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.196193][ T9899] bridge_slave_1: entered allmulticast mode [ 881.198807][ T9899] bridge_slave_1: entered promiscuous mode [ 881.548768][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.549001][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.659949][ T9976] input: syz0 as /devices/virtual/input/input5 [ 881.804874][ T9899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.849665][ T9899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.737984][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.738218][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.738466][ T9911] bridge_slave_0: entered allmulticast mode [ 882.741448][ T9911] bridge_slave_0: entered promiscuous mode [ 882.788870][ T9899] team0: Port device team_slave_0 added [ 882.837421][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.837594][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.837790][ T9911] bridge_slave_1: entered allmulticast mode [ 882.840751][ T9911] bridge_slave_1: entered promiscuous mode [ 882.876960][ T9899] team0: Port device team_slave_1 added [ 883.891594][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.894933][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.894953][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.894980][ T9899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.134745][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.152974][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.152988][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.153005][ T9899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.994260][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 885.811992][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.812072][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.868931][ T9911] team0: Port device team_slave_0 added [ 885.914759][ T9911] team0: Port device team_slave_1 added [ 886.502729][ T9899] hsr_slave_0: entered promiscuous mode [ 886.504347][ T9899] hsr_slave_1: entered promiscuous mode [ 886.517496][ T9899] debugfs: 'hsr0' already exists in 'hsr' [ 886.517525][ T9899] Cannot create hsr debugfs directory [ 886.522059][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.522077][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.522106][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.537029][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.537047][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.537071][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.705821][ T8679] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 886.857709][ T8679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.857745][ T8679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.857786][ T8679] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 886.857810][ T8679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.918122][ T8679] usb 2-1: config 0 descriptor?? [ 887.256731][ T9911] hsr_slave_0: entered promiscuous mode [ 887.273410][ T9911] hsr_slave_1: entered promiscuous mode [ 887.274486][ T9911] debugfs: 'hsr0' already exists in 'hsr' [ 887.274511][ T9911] Cannot create hsr debugfs directory [ 887.362712][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 887.421508][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 888.035586][ T8679] usbhid 2-1:0.0: can't add hid device: -71 [ 888.035719][ T8679] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 888.064568][ T8679] usb 2-1: USB disconnect, device number 31 [ 888.289349][ T9772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.747518][ T9680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.198324][ T9772] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.411547][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.411790][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.691765][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.692009][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.432016][ T8675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.435298][ T8675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.452601][ T8675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.479984][ T8675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.484029][ T8675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.567473][ T3567] bridge_slave_1: left allmulticast mode [ 891.567508][ T3567] bridge_slave_1: left promiscuous mode [ 891.567805][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.639888][ T3567] bridge_slave_0: left allmulticast mode [ 891.639920][ T3567] bridge_slave_0: left promiscuous mode [ 891.640202][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.718196][ T3567] bridge_slave_1: left allmulticast mode [ 891.718219][ T3567] bridge_slave_1: left promiscuous mode [ 891.718395][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.777552][ T3567] bridge_slave_0: left allmulticast mode [ 891.777584][ T3567] bridge_slave_0: left promiscuous mode [ 891.777761][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.875647][ T5796] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 892.028130][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.028165][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.028195][ T5796] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 892.028210][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.032213][ T5796] usb 2-1: config 0 descriptor?? [ 892.470046][ T5874] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 892.493600][ T5874] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 892.974713][ T5796] usbhid 2-1:0.0: can't add hid device: -71 [ 892.974845][ T5796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 893.000108][ T5796] usb 2-1: USB disconnect, device number 32 [ 893.545659][ T8472] Bluetooth: hci0: command tx timeout [ 893.822056][T10083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 893.986359][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.107549][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.199302][ T3567] bond0 (unregistering): Released all slaves [ 894.956553][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.067724][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.138497][ T3567] bond0 (unregistering): Released all slaves [ 895.625664][ T8472] Bluetooth: hci0: command tx timeout [ 896.076044][ T3567] hsr_slave_0: left promiscuous mode [ 896.105753][ T3567] hsr_slave_1: left promiscuous mode [ 896.106589][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.147221][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.299618][ T3567] hsr_slave_0: left promiscuous mode [ 896.317534][ T3567] hsr_slave_1: left promiscuous mode [ 896.318346][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.367377][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.136115][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 897.276115][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 897.705764][ T8472] Bluetooth: hci0: command tx timeout [ 899.667033][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 899.785714][ T8472] Bluetooth: hci0: command tx timeout [ 899.806259][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 903.210825][ T9772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.235159][T10072] chnl_net:caif_netlink_parms(): no params data found [ 903.625880][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 903.798540][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.798565][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.798590][ T9] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 903.798603][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.802661][ T9] usb 2-1: config 0 descriptor?? [ 904.094540][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.094738][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.094922][T10072] bridge_slave_0: entered allmulticast mode [ 904.098869][T10072] bridge_slave_0: entered promiscuous mode [ 904.142471][T10072] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.142829][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.143052][T10072] bridge_slave_1: entered allmulticast mode [ 904.167645][T10072] bridge_slave_1: entered promiscuous mode [ 904.219462][ T6119] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 904.236031][ T6119] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 904.693980][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 904.694114][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 904.701362][ T9] usb 2-1: USB disconnect, device number 33 [ 904.792011][T10072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.823927][T10072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.973446][ T9899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 905.133403][ T9899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 905.240156][T10072] team0: Port device team_slave_0 added [ 905.297610][ T9899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 905.333804][T10072] team0: Port device team_slave_1 added [ 905.466928][ T9899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 905.534093][T10131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 905.691026][T10072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.691040][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.691056][T10072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.721710][T10072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.721728][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.721753][T10072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.926356][ T9911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 906.096131][ T9911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 906.309022][T10072] hsr_slave_0: entered promiscuous mode [ 906.310067][T10072] hsr_slave_1: entered promiscuous mode [ 906.310809][T10072] debugfs: 'hsr0' already exists in 'hsr' [ 906.310826][T10072] Cannot create hsr debugfs directory [ 906.311102][ T9772] veth0_vlan: entered promiscuous mode [ 906.463268][ T9911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 906.524950][ T9911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 907.008935][ T9772] veth1_vlan: entered promiscuous mode [ 908.005695][ T5942] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 908.161945][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.161976][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.162000][ T5942] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 908.162014][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.166304][ T5942] usb 2-1: config 0 descriptor?? [ 908.302114][ T9772] veth0_macvtap: entered promiscuous mode [ 908.350881][ T9772] veth1_macvtap: entered promiscuous mode [ 908.556420][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.564202][ T9899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.634810][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.683271][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.699626][ T5796] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 908.774988][ T5796] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 908.964373][ T153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.983696][ T153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.039425][ T153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.053640][ T9899] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.089058][ T153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.210581][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.211899][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.456444][ T3567] bridge_slave_1: left allmulticast mode [ 909.456479][ T3567] bridge_slave_1: left promiscuous mode [ 909.456820][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.564657][ T3567] bridge_slave_0: left allmulticast mode [ 909.564688][ T3567] bridge_slave_0: left promiscuous mode [ 909.564979][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.574208][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 909.574339][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 909.590296][ T5942] usb 2-1: USB disconnect, device number 34 [ 910.529986][ T8675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 910.595802][ T8675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 910.616061][ T8675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 910.623410][ T8675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 910.624447][ T8675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 911.746911][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.808111][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.848134][ T3567] bond0 (unregistering): Released all slaves [ 911.923452][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.829983][ T8472] Bluetooth: hci4: command tx timeout [ 913.356019][T10183] warning: `syz.1.730' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 913.388343][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.388506][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.725735][ T3567] hsr_slave_0: left promiscuous mode [ 913.771852][ T3567] hsr_slave_1: left promiscuous mode [ 913.784555][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.823954][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.905684][ T8675] Bluetooth: hci4: command tx timeout [ 914.941375][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 914.941395][ T37] audit: type=1326 audit(1768201569.614:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.941807][ T37] audit: type=1326 audit(1768201569.614:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.942142][ T37] audit: type=1326 audit(1768201569.614:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.942526][ T37] audit: type=1326 audit(1768201569.614:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.945777][ T37] audit: type=1326 audit(1768201569.614:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.946593][ T37] audit: type=1326 audit(1768201569.624:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70543e1667 code=0x7ffc0000 [ 914.947460][ T37] audit: type=1326 audit(1768201569.624:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.948301][ T37] audit: type=1326 audit(1768201569.624:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.948599][ T37] audit: type=1326 audit(1768201569.624:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 914.954001][ T37] audit: type=1326 audit(1768201569.624:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10189 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 915.296604][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 915.328953][ T5942] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 915.512692][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.512728][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.512769][ T5942] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 915.512792][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.522682][ T5942] usb 2-1: config 0 descriptor?? [ 915.616520][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 915.940464][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 915.957355][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 916.401152][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 916.401290][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 916.423497][ T5942] usb 2-1: USB disconnect, device number 35 [ 916.995760][ T8675] Bluetooth: hci4: command tx timeout [ 918.100251][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 918.268004][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.268038][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.268072][ T10] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 918.268086][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.271344][ T10] usb 2-1: config 0 descriptor?? [ 918.732697][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.732902][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.883663][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 918.951930][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 919.065629][ T8675] Bluetooth: hci4: command tx timeout [ 919.237829][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 919.237967][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 919.255030][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.255172][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.260149][ T10] usb 2-1: USB disconnect, device number 36 [ 920.495710][ T5942] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 920.497401][T10072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 920.534967][T10170] chnl_net:caif_netlink_parms(): no params data found [ 920.545903][T10072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 920.580666][T10072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 920.660283][ T5942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.660329][ T5942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.660356][ T5942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.660369][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.794568][T10072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 920.876870][ T5942] usb 2-1: usb_control_msg returned -32 [ 920.876923][ T5942] usbtmc 2-1:16.0: can't read capabilities [ 921.000055][ T9899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.194308][ T3567] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.261708][ T5942] usb 2-1: USB disconnect, device number 37 [ 921.609468][ T3567] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.881359][ T3567] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.919337][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.919555][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.919795][T10170] bridge_slave_0: entered allmulticast mode [ 921.929022][T10170] bridge_slave_0: entered promiscuous mode [ 921.948375][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.949296][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.949522][T10170] bridge_slave_1: entered allmulticast mode [ 921.952148][T10170] bridge_slave_1: entered promiscuous mode [ 922.194854][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.479341][ T3567] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.507137][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.519352][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.615694][ T5874] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 923.761968][T10170] team0: Port device team_slave_0 added [ 923.773534][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.773557][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.773581][ T5874] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 923.773594][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.792938][T10170] team0: Port device team_slave_1 added [ 923.826887][ T5874] usb 2-1: config 0 descriptor?? [ 924.013513][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.013534][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.013560][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.094143][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.094158][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.094225][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.358006][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 924.402178][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 924.793857][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 924.793992][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 924.799782][ T5874] usb 2-1: USB disconnect, device number 38 [ 924.868378][ T9899] veth0_vlan: entered promiscuous mode [ 924.881893][T10170] hsr_slave_0: entered promiscuous mode [ 924.882781][T10170] hsr_slave_1: entered promiscuous mode [ 924.883746][T10170] debugfs: 'hsr0' already exists in 'hsr' [ 924.883764][T10170] Cannot create hsr debugfs directory [ 925.019657][ T3567] bridge_slave_1: left allmulticast mode [ 925.019688][ T3567] bridge_slave_1: left promiscuous mode [ 925.019972][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.097714][ T3567] bridge_slave_0: left allmulticast mode [ 925.097737][ T3567] bridge_slave_0: left promiscuous mode [ 925.097911][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.236236][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.296180][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.339165][ T3567] bond0 (unregistering): Released all slaves [ 929.622465][ T9899] veth1_vlan: entered promiscuous mode [ 929.795736][ T3567] hsr_slave_0: left promiscuous mode [ 929.795744][ T5942] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 929.855725][ T3567] hsr_slave_1: left promiscuous mode [ 929.856464][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.856482][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.892141][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.892173][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.971281][ T3567] veth1_macvtap: left promiscuous mode [ 929.971367][ T3567] veth0_macvtap: left promiscuous mode [ 929.971618][ T3567] veth1_vlan: left promiscuous mode [ 929.971776][ T3567] veth0_vlan: left promiscuous mode [ 929.973827][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.973857][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.973882][ T5942] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 929.973895][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.038516][ T5942] usb 2-1: config 0 descriptor?? [ 930.500568][ T5796] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 930.540414][ T5796] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 931.061245][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 931.061383][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 931.085807][ T5942] usb 2-1: USB disconnect, device number 39 [ 931.763093][ T8472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 931.775327][ T8472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 931.836349][ T8472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 931.838497][ T8472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 931.839293][ T8472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 932.888573][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 933.147133][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 933.848491][ T8675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 933.851556][ T8675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 933.853859][ T8675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 933.855086][ T8675] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 933.865864][ T8675] Bluetooth: hci5: command tx timeout [ 933.889802][ T8675] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 935.805340][ T9911] veth0_vlan: entered promiscuous mode [ 935.945760][ T8675] Bluetooth: hci5: command tx timeout [ 936.025764][ T8675] Bluetooth: hci6: command tx timeout [ 936.468446][T10072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.771332][ T8675] Bluetooth: hci5: command tx timeout [ 938.771473][ T8675] Bluetooth: hci6: command tx timeout [ 939.575638][ T5942] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 939.615326][T10072] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.727429][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.727466][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.727499][ T5942] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 939.727512][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.731605][ T5942] usb 2-1: config 0 descriptor?? [ 939.800528][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.800741][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.859538][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.859692][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.192780][ T5874] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 940.227803][ T5874] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 940.629284][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 940.629416][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 940.640503][ T5942] usb 2-1: USB disconnect, device number 40 [ 940.845598][ T8472] Bluetooth: hci6: command tx timeout [ 940.845636][ T8472] Bluetooth: hci5: command tx timeout [ 941.296415][T10298] chnl_net:caif_netlink_parms(): no params data found [ 941.334192][T10293] chnl_net:caif_netlink_parms(): no params data found [ 943.306218][ T8472] Bluetooth: hci6: command tx timeout [ 944.304656][T10170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 944.315697][ T5942] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 944.479318][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.479354][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.479396][ T5942] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 944.479420][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.484398][T10170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 944.535296][ T5942] usb 2-1: config 0 descriptor?? [ 944.707021][T10170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 944.759488][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.759720][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.759970][T10298] bridge_slave_0: entered allmulticast mode [ 944.762473][T10298] bridge_slave_0: entered promiscuous mode [ 944.776161][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.776305][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.776528][T10293] bridge_slave_0: entered allmulticast mode [ 944.789877][T10293] bridge_slave_0: entered promiscuous mode [ 944.793960][T10170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 944.840252][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.840411][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.840625][T10298] bridge_slave_1: entered allmulticast mode [ 944.843593][T10298] bridge_slave_1: entered promiscuous mode [ 944.847080][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.847243][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.847428][T10293] bridge_slave_1: entered allmulticast mode [ 944.850158][T10293] bridge_slave_1: entered promiscuous mode [ 944.977951][ T8679] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 944.995555][ T8679] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 945.430726][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 945.430810][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 945.450717][ T5942] usb 2-1: USB disconnect, device number 41 [ 945.592970][T10298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.601725][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.648092][T10298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.650418][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.047459][T10298] team0: Port device team_slave_0 added [ 946.064904][T10293] team0: Port device team_slave_0 added [ 946.092975][T10298] team0: Port device team_slave_1 added [ 946.154306][T10293] team0: Port device team_slave_1 added [ 946.607335][T10378] binder: 10375:10378 ioctl 400c620e 0 returned -14 [ 947.486264][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.486345][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 947.917970][T10298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.917990][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.918018][T10298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.172884][T10298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.172900][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.172916][T10298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.174052][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.174063][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.174078][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.277282][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.277302][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.277330][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.289562][T10072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.883412][ T37] audit: type=1326 audit(1768201603.554:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.883483][ T37] audit: type=1326 audit(1768201603.554:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.883571][ T37] audit: type=1326 audit(1768201603.554:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.883748][ T37] audit: type=1326 audit(1768201603.554:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.883979][ T37] audit: type=1326 audit(1768201603.554:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.884159][ T37] audit: type=1326 audit(1768201603.554:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.884316][ T37] audit: type=1326 audit(1768201603.554:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.885062][ T37] audit: type=1326 audit(1768201603.554:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.885193][ T37] audit: type=1326 audit(1768201603.554:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 948.885357][ T37] audit: type=1326 audit(1768201603.554:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 949.771960][T10400] binder: 10397:10400 ioctl 400c620e 0 returned -14 [ 950.811731][T10298] hsr_slave_0: entered promiscuous mode [ 950.813298][T10298] hsr_slave_1: entered promiscuous mode [ 950.814434][T10298] debugfs: 'hsr0' already exists in 'hsr' [ 950.814461][T10298] Cannot create hsr debugfs directory [ 950.827460][T10293] hsr_slave_0: entered promiscuous mode [ 950.828845][T10293] hsr_slave_1: entered promiscuous mode [ 950.829788][T10293] debugfs: 'hsr0' already exists in 'hsr' [ 950.829810][T10293] Cannot create hsr debugfs directory [ 952.483272][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.501925][ T3567] bridge_slave_1: left allmulticast mode [ 952.501956][ T3567] bridge_slave_1: left promiscuous mode [ 952.502140][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.577500][ T3567] bridge_slave_0: left allmulticast mode [ 952.577522][ T3567] bridge_slave_0: left promiscuous mode [ 952.577710][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.642866][ T3567] bridge_slave_1: left allmulticast mode [ 952.642900][ T3567] bridge_slave_1: left promiscuous mode [ 952.643184][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.727514][ T3567] bridge_slave_0: left allmulticast mode [ 952.727546][ T3567] bridge_slave_0: left promiscuous mode [ 952.727812][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.812370][ T8675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.823346][ T8675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.837670][ T8675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.840241][ T8675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.841306][ T8675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.435334][T10427] binder: 10424:10427 ioctl 400c620e 0 returned -14 [ 954.909123][ T8472] Bluetooth: hci0: command tx timeout [ 956.944787][T10439] Device name not specified. [ 956.944787][T10439] [ 957.601060][ T8472] Bluetooth: hci0: command tx timeout [ 959.226712][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.296646][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.348763][ T3567] bond0 (unregistering): Released all slaves [ 959.676186][ T8472] Bluetooth: hci0: command tx timeout [ 960.747823][T10452] binder: 10449:10452 ioctl 400c620e 0 returned -14 [ 961.705995][ T8472] Bluetooth: hci0: command tx timeout [ 965.177672][T10472] binder: 10469:10472 ioctl 400c620e 0 returned -14 [ 967.077474][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.176564][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.231504][ T3567] bond0 (unregistering): Released all slaves [ 967.552217][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.637753][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.637861][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.997415][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.997611][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.295948][ T3567] hsr_slave_0: left promiscuous mode [ 968.315996][ T3567] hsr_slave_1: left promiscuous mode [ 968.317091][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.339905][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.456456][ T3567] hsr_slave_0: left promiscuous mode [ 968.495777][ T3567] hsr_slave_1: left promiscuous mode [ 968.496839][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.528355][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.769608][ T3567] veth0_vlan: left promiscuous mode [ 968.808087][ T3567] veth1_vlan: left promiscuous mode [ 968.808321][ T3567] veth0_vlan: left promiscuous mode [ 972.257658][ T8675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 972.604611][ T8675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 972.860753][ T8675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 973.003548][ T8675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 973.033396][ T8675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 973.976900][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 974.236418][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 974.716143][T10567] binder: 10564:10567 ioctl 400c620e 0 returned -14 [ 975.679287][ T8472] Bluetooth: hci1: command tx timeout [ 975.847172][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 975.847197][ T37] audit: type=1326 audit(1768201630.494:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847250][ T37] audit: type=1326 audit(1768201630.494:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847296][ T37] audit: type=1326 audit(1768201630.494:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847344][ T37] audit: type=1326 audit(1768201630.494:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847390][ T37] audit: type=1326 audit(1768201630.494:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847435][ T37] audit: type=1326 audit(1768201630.494:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847482][ T37] audit: type=1326 audit(1768201630.494:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847527][ T37] audit: type=1326 audit(1768201630.494:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847586][ T37] audit: type=1326 audit(1768201630.494:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 975.847633][ T37] audit: type=1326 audit(1768201630.494:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10568 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 977.274490][ T9] hid-generic 0005:00FF:5508.000E: unknown main item tag 0x0 [ 977.334070][ T9] hid-generic 0005:00FF:5508.000E: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 977.461659][T10577] fido_id[10577]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 977.735943][ T8472] Bluetooth: hci1: command tx timeout [ 979.816758][ T8472] Bluetooth: hci1: command tx timeout [ 981.469451][T10595] binder: 10592:10595 ioctl 400c620e 0 returned -14 [ 982.318929][ T8675] Bluetooth: hci1: command tx timeout [ 982.654620][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 982.654858][ T37] audit: type=1326 audit(1768201637.324:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.654920][ T37] audit: type=1326 audit(1768201637.324:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.655030][ T37] audit: type=1326 audit(1768201637.324:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.655171][ T37] audit: type=1326 audit(1768201637.324:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.655920][ T37] audit: type=1326 audit(1768201637.324:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.780203][ T37] audit: type=1326 audit(1768201637.444:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.780244][ T37] audit: type=1326 audit(1768201637.444:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 982.780275][ T37] audit: type=1326 audit(1768201637.444:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 983.021736][ T37] audit: type=1326 audit(1768201637.694:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 983.021973][ T37] audit: type=1326 audit(1768201637.694:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10596 comm="syz.1.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 983.717820][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 983.996151][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 984.047361][ T5942] hid-generic 0005:00FF:5508.000F: unknown main item tag 0x0 [ 984.051514][ T5942] hid-generic 0005:00FF:5508.000F: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 984.231008][T10606] fido_id[10606]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 986.998422][T10621] binder: 10618:10621 ioctl 400c620e 0 returned -14 [ 988.152789][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 988.152809][ T37] audit: type=1326 audit(1768201642.804:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.152859][ T37] audit: type=1326 audit(1768201642.804:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.152900][ T37] audit: type=1326 audit(1768201642.804:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.152945][ T37] audit: type=1326 audit(1768201642.804:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.152986][ T37] audit: type=1326 audit(1768201642.804:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.153029][ T37] audit: type=1326 audit(1768201642.804:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.153070][ T37] audit: type=1326 audit(1768201642.804:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.153110][ T37] audit: type=1326 audit(1768201642.804:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.153153][ T37] audit: type=1326 audit(1768201642.804:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 988.153204][ T37] audit: type=1326 audit(1768201642.804:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10622 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 989.649067][ T5942] hid-generic 0005:00FF:5508.0010: unknown main item tag 0x0 [ 989.655157][ T5942] hid-generic 0005:00FF:5508.0010: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 989.799312][T10630] fido_id[10630]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 992.869739][T10413] chnl_net:caif_netlink_parms(): no params data found [ 993.865337][T10685] binder: 10680:10685 ioctl 400c620e 0 returned -14 [ 995.112437][ T8472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.125312][ T8472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.178368][ T8472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.180269][ T8472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.181044][ T8472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 995.636580][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.636839][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.637095][T10413] bridge_slave_0: entered allmulticast mode [ 995.640171][T10413] bridge_slave_0: entered promiscuous mode [ 995.695921][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.696085][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.696338][T10413] bridge_slave_1: entered allmulticast mode [ 995.698614][T10413] bridge_slave_1: entered promiscuous mode [ 995.707944][T10554] chnl_net:caif_netlink_parms(): no params data found [ 996.080853][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 996.080873][ T37] audit: type=1326 audit(1768201650.754:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.081251][ T37] audit: type=1326 audit(1768201650.754:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.081562][ T37] audit: type=1326 audit(1768201650.754:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.082065][ T37] audit: type=1326 audit(1768201650.754:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.233019][T10413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.351665][ T37] audit: type=1326 audit(1768201650.754:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.351728][ T37] audit: type=1326 audit(1768201650.754:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.351780][ T37] audit: type=1326 audit(1768201650.754:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.351822][ T37] audit: type=1326 audit(1768201650.754:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.351863][ T37] audit: type=1326 audit(1768201650.754:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 996.351905][ T37] audit: type=1326 audit(1768201650.754:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 997.400349][ T8675] Bluetooth: hci2: command tx timeout [ 997.609352][ T8472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.625139][ T8472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.633940][ T8472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.652821][ T8472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.653845][ T8472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.721147][T10413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.745949][ T10] hid-generic 0005:00FF:5508.0011: unknown main item tag 0x0 [ 997.754416][ T10] hid-generic 0005:00FF:5508.0011: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 997.922327][T10723] fido_id[10723]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 998.371443][T10413] team0: Port device team_slave_0 added [ 998.505047][T10413] team0: Port device team_slave_1 added [ 999.530839][ T8472] Bluetooth: hci2: command tx timeout [ 999.565775][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.566908][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.567154][T10554] bridge_slave_0: entered allmulticast mode [ 999.569804][T10554] bridge_slave_0: entered promiscuous mode [ 999.709885][ T8472] Bluetooth: hci4: command tx timeout [ 999.747809][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.748152][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.748398][T10554] bridge_slave_1: entered allmulticast mode [ 999.751139][T10554] bridge_slave_1: entered promiscuous mode [ 999.788601][T10413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.788614][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.788630][T10413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.877219][T10413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.877233][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.877249][T10413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.453994][T10740] binder: 10737:10740 ioctl 400c620e 0 returned -14 [ 1001.470603][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.516056][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1001.516076][ T37] audit: type=1326 audit(1768201656.194:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.516343][ T37] audit: type=1326 audit(1768201656.194:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.516488][ T37] audit: type=1326 audit(1768201656.194:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.517338][ T37] audit: type=1326 audit(1768201656.194:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.517496][ T37] audit: type=1326 audit(1768201656.194:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.517648][ T37] audit: type=1326 audit(1768201656.194:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.517872][ T37] audit: type=1326 audit(1768201656.194:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.518039][ T37] audit: type=1326 audit(1768201656.194:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.518182][ T37] audit: type=1326 audit(1768201656.194:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.518411][ T37] audit: type=1326 audit(1768201656.194:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70543df749 code=0x7ffc0000 [ 1001.545619][ T8472] Bluetooth: hci2: command tx timeout [ 1001.785847][ T8472] Bluetooth: hci4: command tx timeout [ 1003.020953][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.636313][ T8472] Bluetooth: hci2: command tx timeout [ 1003.732064][T10413] hsr_slave_0: entered promiscuous mode [ 1003.733047][T10413] hsr_slave_1: entered promiscuous mode [ 1003.733715][T10413] debugfs: 'hsr0' already exists in 'hsr' [ 1003.733733][T10413] Cannot create hsr debugfs directory [ 1003.747962][T10554] team0: Port device team_slave_0 added [ 1003.768589][T10554] team0: Port device team_slave_1 added [ 1003.865951][ T8472] Bluetooth: hci4: command tx timeout [ 1004.830526][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.830542][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.830558][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.958487][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.958502][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.958518][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.479603][T10765] binder: 10761:10765 ioctl 400c620e 0 returned -14 [ 1006.387016][ T8472] Bluetooth: hci4: command tx timeout [ 1006.658946][T10554] hsr_slave_0: entered promiscuous mode [ 1006.660408][T10554] hsr_slave_1: entered promiscuous mode [ 1006.663443][T10554] debugfs: 'hsr0' already exists in 'hsr' [ 1006.663471][T10554] Cannot create hsr debugfs directory [ 1007.277982][T10689] chnl_net:caif_netlink_parms(): no params data found [ 1008.093765][T10716] chnl_net:caif_netlink_parms(): no params data found [ 1008.605792][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.605873][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.312958][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.314914][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.315179][T10689] bridge_slave_0: entered allmulticast mode [ 1009.318698][T10689] bridge_slave_0: entered promiscuous mode [ 1009.352889][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.353039][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.353283][T10689] bridge_slave_1: entered allmulticast mode [ 1009.355148][T10689] bridge_slave_1: entered promiscuous mode [ 1009.943338][T10797] binder: 10794:10797 ioctl 400c620e 0 returned -14 [ 1011.303554][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.491512][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.493398][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.493611][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.493762][T10716] bridge_slave_0: entered allmulticast mode [ 1012.498787][T10716] bridge_slave_0: entered promiscuous mode [ 1012.786493][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.786659][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.786845][T10716] bridge_slave_1: entered allmulticast mode [ 1012.788679][T10716] bridge_slave_1: entered promiscuous mode [ 1012.988333][T10689] team0: Port device team_slave_0 added [ 1013.059909][T10689] team0: Port device team_slave_1 added [ 1013.078694][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.252238][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.397075][ T3567] bridge_slave_1: left allmulticast mode [ 1013.397107][ T3567] bridge_slave_1: left promiscuous mode [ 1013.397396][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.467451][ T3567] bridge_slave_0: left allmulticast mode [ 1013.467485][ T3567] bridge_slave_0: left promiscuous mode [ 1013.467775][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.578691][ T3567] bridge_slave_1: left allmulticast mode [ 1013.578717][ T3567] bridge_slave_1: left promiscuous mode [ 1013.578881][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.666611][ T3567] bridge_slave_0: left allmulticast mode [ 1013.666635][ T3567] bridge_slave_0: left promiscuous mode [ 1013.666812][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.790939][ T3567] bridge_slave_1: left allmulticast mode [ 1013.790973][ T3567] bridge_slave_1: left promiscuous mode [ 1013.791263][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.876954][ T3567] bridge_slave_0: left allmulticast mode [ 1013.876977][ T3567] bridge_slave_0: left promiscuous mode [ 1013.877153][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.316388][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.616873][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.623882][ T8675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1014.630720][ T8675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1014.632038][ T8675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1014.641893][ T8675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1014.642784][ T8675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1014.816579][ T3567] bond0 (unregistering): Released all slaves [ 1015.685164][T10825] binder: 10822:10825 ioctl 400c620e 0 returned -14 [ 1016.846756][T10827] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.858'. [ 1016.905940][ T8472] Bluetooth: hci0: command tx timeout [ 1017.152507][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1017.309231][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.309260][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.310501][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1017.310522][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1017.310534][ T9] usb 2-1: SerialNumber: syz [ 1017.610787][ T9] usb 2-1: 0:2 : does not exist [ 1017.610903][ T9] usb 2-1: unit 5 not found! [ 1017.667055][ T9] usb 2-1: USB disconnect, device number 42 [ 1017.750751][T10830] udevd[10830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.996683][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.066410][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.133576][ T3567] bond0 (unregistering): Released all slaves [ 1018.999625][ T8472] Bluetooth: hci0: command tx timeout [ 1020.958038][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.016817][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.038107][ T3567] bond0 (unregistering): Released all slaves [ 1021.065965][ T8472] Bluetooth: hci0: command tx timeout [ 1021.423910][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.423925][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.423941][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.068338][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.068358][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.068386][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.126425][T10716] team0: Port device team_slave_0 added [ 1022.239345][T10716] team0: Port device team_slave_1 added [ 1022.569934][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.569954][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.569982][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.845788][ T3567] hsr_slave_0: left promiscuous mode [ 1022.865694][ T3567] hsr_slave_1: left promiscuous mode [ 1022.866486][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.916888][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.055833][ T3567] hsr_slave_0: left promiscuous mode [ 1023.095928][ T3567] hsr_slave_1: left promiscuous mode [ 1023.096730][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.145637][ T8472] Bluetooth: hci0: command tx timeout [ 1023.146736][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.625636][ T3567] hsr_slave_0: left promiscuous mode [ 1023.645679][ T3567] hsr_slave_1: left promiscuous mode [ 1023.646840][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.696576][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.613106][T10864] input: syz0 as /devices/virtual/input/input6 [ 1025.836402][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1026.016587][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1028.246328][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1028.410846][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1031.406263][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1031.676660][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1033.796752][ T8675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1033.800445][ T8675] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1033.812813][ T8675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1033.814662][ T8675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1033.815929][ T8675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1034.252630][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.252647][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.252662][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.273288][T10689] hsr_slave_0: entered promiscuous mode [ 1034.274257][T10689] hsr_slave_1: entered promiscuous mode [ 1034.275106][T10689] debugfs: 'hsr0' already exists in 'hsr' [ 1034.275132][T10689] Cannot create hsr debugfs directory [ 1035.726386][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 1035.945688][ T8675] Bluetooth: hci5: command tx timeout [ 1036.038521][T10716] hsr_slave_0: entered promiscuous mode [ 1036.041411][T10716] hsr_slave_1: entered promiscuous mode [ 1036.042719][T10716] debugfs: 'hsr0' already exists in 'hsr' [ 1036.045280][T10716] Cannot create hsr debugfs directory [ 1037.997327][T10818] chnl_net:caif_netlink_parms(): no params data found [ 1038.025616][ T8675] Bluetooth: hci5: command tx timeout [ 1038.423283][T10689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1039.649127][T10689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1039.729543][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 1039.799748][T10689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1039.984381][T10689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1040.069250][T10887] chnl_net:caif_netlink_parms(): no params data found [ 1040.105577][ T8675] Bluetooth: hci5: command tx timeout [ 1040.786166][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.786312][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.786506][T10818] bridge_slave_0: entered allmulticast mode [ 1040.788159][T10818] bridge_slave_0: entered promiscuous mode [ 1041.756594][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.756741][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.757107][T10818] bridge_slave_1: entered allmulticast mode [ 1041.813430][T10818] bridge_slave_1: entered promiscuous mode [ 1042.152647][ T8675] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 1042.187075][ T8675] Bluetooth: hci5: command tx timeout [ 1043.213387][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.335142][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.344072][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.344281][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.344526][T10887] bridge_slave_0: entered allmulticast mode [ 1043.351763][T10887] bridge_slave_0: entered promiscuous mode [ 1043.474112][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.474431][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.474572][T10887] bridge_slave_1: entered allmulticast mode [ 1043.507952][T10887] bridge_slave_1: entered promiscuous mode [ 1043.839890][T10972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1043.863247][T10818] team0: Port device team_slave_0 added [ 1044.083283][T10818] team0: Port device team_slave_1 added [ 1044.086993][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.087303][ T3567] bridge_slave_1: left allmulticast mode [ 1044.087325][ T3567] bridge_slave_1: left promiscuous mode [ 1044.087600][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.177457][ T3567] bridge_slave_0: left allmulticast mode [ 1044.177491][ T3567] bridge_slave_0: left promiscuous mode [ 1044.177826][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.261431][ T3567] bridge_slave_1: left allmulticast mode [ 1044.261464][ T3567] bridge_slave_1: left promiscuous mode [ 1044.261715][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.537435][ T3567] bridge_slave_0: left allmulticast mode [ 1044.537459][ T3567] bridge_slave_0: left promiscuous mode [ 1044.537628][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.771017][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.904'. [ 1045.508402][ T3567] bridge_slave_1: left allmulticast mode [ 1045.508425][ T3567] bridge_slave_1: left promiscuous mode [ 1045.508613][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.576843][ T3567] bridge_slave_0: left allmulticast mode [ 1045.576867][ T3567] bridge_slave_0: left promiscuous mode [ 1045.577050][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.866289][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.956384][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.018577][ T3567] bond0 (unregistering): Released all slaves [ 1046.216299][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.276248][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.339120][ T3567] bond0 (unregistering): Released all slaves [ 1046.538766][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.616460][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.658188][ T3567] bond0 (unregistering): Released all slaves [ 1046.840042][T10987] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.905'. [ 1046.912156][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.432933][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.432946][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.432962][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.641599][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.641614][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.641631][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.688342][T10887] team0: Port device team_slave_0 added [ 1047.732558][T10887] team0: Port device team_slave_1 added [ 1048.318875][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 1049.165960][ T3567] hsr_slave_0: left promiscuous mode [ 1049.185833][ T3567] hsr_slave_1: left promiscuous mode [ 1049.186619][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.216741][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.337353][ T3567] hsr_slave_0: left promiscuous mode [ 1049.355840][ T3567] hsr_slave_1: left promiscuous mode [ 1049.356587][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.396193][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.496809][ T3567] hsr_slave_0: left promiscuous mode [ 1049.515746][ T3567] hsr_slave_1: left promiscuous mode [ 1049.516478][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.566889][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.156139][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1050.296504][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1051.356377][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1051.476170][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1052.548789][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1052.687373][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1053.295945][T10716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1053.568874][T10887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.568889][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.568905][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.570487][T10716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1053.854680][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.854700][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.854729][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.901838][T10716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1053.947196][T10818] hsr_slave_0: entered promiscuous mode [ 1053.948139][T10818] hsr_slave_1: entered promiscuous mode [ 1053.948766][T10818] debugfs: 'hsr0' already exists in 'hsr' [ 1053.948785][T10818] Cannot create hsr debugfs directory [ 1053.962872][T10716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1054.686744][T10887] hsr_slave_0: entered promiscuous mode [ 1054.687627][T10887] hsr_slave_1: entered promiscuous mode [ 1054.688261][T10887] debugfs: 'hsr0' already exists in 'hsr' [ 1054.688280][T10887] Cannot create hsr debugfs directory [ 1055.254367][ T8472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1055.275261][ T8472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1055.326005][ T8472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1055.330590][ T8472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1055.331654][ T8472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1056.170281][T10818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1056.506191][T10818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1056.647939][T10818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1056.682103][T10818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1057.341015][T10887] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1057.465691][ T8675] Bluetooth: hci1: command tx timeout [ 1057.701478][T10887] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1057.755688][T10887] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1057.813962][T10887] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1057.882353][ T8472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1057.889481][ T8472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1057.903750][ T8472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1057.924392][ T8472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1057.930952][ T8472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1057.933468][T11021] chnl_net:caif_netlink_parms(): no params data found [ 1058.168676][T11058] netlink: 'syz.1.921': attribute type 10 has an invalid length. [ 1058.415783][T11058] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1059.545621][ T8675] Bluetooth: hci1: command tx timeout [ 1059.552301][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.552438][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.552645][T11021] bridge_slave_0: entered allmulticast mode [ 1059.561880][T11021] bridge_slave_0: entered promiscuous mode [ 1059.858634][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.858778][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.859013][T11021] bridge_slave_1: entered allmulticast mode [ 1059.860776][T11021] bridge_slave_1: entered promiscuous mode [ 1060.031625][ T8675] Bluetooth: hci2: command tx timeout [ 1060.261960][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.310379][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.516088][T11021] team0: Port device team_slave_0 added [ 1060.533232][T11021] team0: Port device team_slave_1 added [ 1060.745064][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.745082][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.745110][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.764190][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.764209][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.764233][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.626188][ T8675] Bluetooth: hci1: command tx timeout [ 1061.878458][T11021] hsr_slave_0: entered promiscuous mode [ 1061.879368][T11021] hsr_slave_1: entered promiscuous mode [ 1061.880014][T11021] debugfs: 'hsr0' already exists in 'hsr' [ 1061.880036][T11021] Cannot create hsr debugfs directory [ 1061.964577][T10818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.105832][ T8675] Bluetooth: hci2: command tx timeout [ 1062.844293][T11047] chnl_net:caif_netlink_parms(): no params data found [ 1063.263308][T10818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.705785][ T8675] Bluetooth: hci1: command tx timeout [ 1063.913187][T11111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.981424][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.981567][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.185543][ T8675] Bluetooth: hci2: command tx timeout [ 1064.326347][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.326858][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.327040][T11047] bridge_slave_0: entered allmulticast mode [ 1064.328687][T11047] bridge_slave_0: entered promiscuous mode [ 1064.334640][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.388520][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.388600][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.388756][T11047] bridge_slave_1: entered allmulticast mode [ 1064.390464][T11047] bridge_slave_1: entered promiscuous mode [ 1064.498890][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.499031][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.579160][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.629576][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.947001][T11047] team0: Port device team_slave_0 added [ 1064.995180][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.024003][T11047] team0: Port device team_slave_1 added [ 1065.205292][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.205313][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.240305][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.244072][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.244301][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.278962][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.278976][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.278991][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.448387][ T3567] bridge_slave_1: left allmulticast mode [ 1065.448420][ T3567] bridge_slave_1: left promiscuous mode [ 1065.448731][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.518412][ T3567] bridge_slave_0: left allmulticast mode [ 1065.518436][ T3567] bridge_slave_0: left promiscuous mode [ 1065.518623][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.609077][ T3567] bridge_slave_1: left allmulticast mode [ 1065.609100][ T3567] bridge_slave_1: left promiscuous mode [ 1065.609266][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.666993][ T3567] bridge_slave_0: left allmulticast mode [ 1065.667017][ T3567] bridge_slave_0: left promiscuous mode [ 1065.667239][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.286570][ T8675] Bluetooth: hci2: command tx timeout [ 1066.917113][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.036437][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.130188][ T3567] bond0 (unregistering): Released all slaves [ 1067.718011][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.776353][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.839738][ T3567] bond0 (unregistering): Released all slaves [ 1067.900328][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.900443][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.424802][T11047] hsr_slave_0: entered promiscuous mode [ 1068.428711][T11047] hsr_slave_1: entered promiscuous mode [ 1068.429713][T11047] debugfs: 'hsr0' already exists in 'hsr' [ 1068.429738][T11047] Cannot create hsr debugfs directory [ 1068.805784][ T3567] hsr_slave_0: left promiscuous mode [ 1068.825899][ T3567] hsr_slave_1: left promiscuous mode [ 1068.826639][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.867717][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.006099][ T3567] hsr_slave_0: left promiscuous mode [ 1069.045710][ T3567] hsr_slave_1: left promiscuous mode [ 1069.047323][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.070576][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.836567][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1069.986626][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1070.038325][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1071.416387][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 1071.561710][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 1073.163465][T11021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1073.578307][T10818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.578603][T11021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1073.693073][T11021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1073.789765][T11021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1074.893462][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.582378][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.041223][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.275633][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.275970][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.301701][T11047] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1076.392179][ T8472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.420802][ T8472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.423806][ T8472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.425155][ T8472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.445824][ T8472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.651852][T11047] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1076.676724][T11047] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1076.713390][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.713534][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.731749][T11047] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1077.151021][T10887] veth0_vlan: entered promiscuous mode [ 1077.413796][T10887] veth1_vlan: entered promiscuous mode [ 1077.886263][T11206] chnl_net:caif_netlink_parms(): no params data found [ 1077.919824][T10887] veth0_macvtap: entered promiscuous mode [ 1078.079746][T10887] veth1_macvtap: entered promiscuous mode [ 1078.083380][ T1455] bridge_slave_1: left allmulticast mode [ 1078.083410][ T1455] bridge_slave_1: left promiscuous mode [ 1078.083681][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.148513][ T1455] bridge_slave_0: left allmulticast mode [ 1078.148536][ T1455] bridge_slave_0: left promiscuous mode [ 1078.148710][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.505666][ T8675] Bluetooth: hci0: command tx timeout [ 1079.749881][ T8675] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1080.369672][ T1455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.588528][ T8675] Bluetooth: hci0: command tx timeout [ 1080.607479][ T1455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.630601][ T1455] bond0 (unregistering): Released all slaves [ 1081.364211][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.365882][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.366114][T11206] bridge_slave_0: entered allmulticast mode [ 1081.368663][T11206] bridge_slave_0: entered promiscuous mode [ 1081.525596][ T1455] hsr_slave_0: left promiscuous mode [ 1081.546418][ T1455] hsr_slave_1: left promiscuous mode [ 1081.547586][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.596567][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.665638][ T8675] Bluetooth: hci0: command tx timeout [ 1082.926282][ T1455] team0 (unregistering): Port device team_slave_1 removed [ 1083.166128][ T1455] team0 (unregistering): Port device team_slave_0 removed [ 1084.756026][ T8675] Bluetooth: hci0: command tx timeout [ 1084.838261][ T8675] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1085.504957][ T5874] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1085.683430][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.683468][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.683488][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1085.683515][ T5874] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1085.683528][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.743955][ T5874] usb 2-1: config 0 descriptor?? [ 1087.290755][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.291909][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.293370][T11206] bridge_slave_1: entered allmulticast mode [ 1087.320812][T11206] bridge_slave_1: entered promiscuous mode [ 1087.593902][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.775396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1087.799723][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.870594][T11206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.927220][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.002320][T11206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.136531][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.024279][T11206] team0: Port device team_slave_0 added [ 1089.029441][ T3461] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.066909][ T3461] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.074245][T11206] team0: Port device team_slave_1 added [ 1089.104657][ T3461] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.301765][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 1089.301914][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1089.322973][ T5874] usb 2-1: USB disconnect, device number 43 [ 1089.346585][ T3461] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.349969][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.658996][T11206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.659016][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.659044][T11206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.923794][T11206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.923807][T11206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.923823][T11206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.167682][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.169290][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.324212][ T1392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.324480][ T1392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.581921][T11206] hsr_slave_0: entered promiscuous mode [ 1090.583374][T11206] hsr_slave_1: entered promiscuous mode [ 1090.587623][T11206] debugfs: 'hsr0' already exists in 'hsr' [ 1090.587674][T11206] Cannot create hsr debugfs directory [ 1090.974708][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.974732][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.345716][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.345740][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.435677][T11021] veth0_vlan: entered promiscuous mode [ 1091.541709][T11021] veth1_vlan: entered promiscuous mode [ 1093.306903][T11021] veth0_macvtap: entered promiscuous mode [ 1093.357208][T11021] veth1_macvtap: entered promiscuous mode [ 1093.642714][T11314] overlayfs: failed to resolve './file0': -2 [ 1094.972714][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.158537][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.369525][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.597515][ T3469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.604284][ T3469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.604735][ T3469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.604779][ T3469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.386871][T10810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.386888][T10810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.807539][T10810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.807562][T10810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.005520][T11206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1097.072815][T11206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1097.131166][T11206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1097.194257][T11206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1097.672338][T11047] veth0_vlan: entered promiscuous mode [ 1097.742406][T11047] veth1_vlan: entered promiscuous mode [ 1097.978584][T11047] veth0_macvtap: entered promiscuous mode [ 1098.011413][T11047] veth1_macvtap: entered promiscuous mode [ 1098.056571][ T5942] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1098.114984][T11047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.143932][T11047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.301932][T11206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.327898][ T1392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.335717][ T1392] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.382119][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.382148][ T5942] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1098.389573][ T5942] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1098.389609][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1098.389627][ T5942] usb 6-1: SerialNumber: syz [ 1098.402588][ T3469] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.235676][ T3469] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.314097][ T5942] usb 6-1: 0:2 : does not exist [ 1099.469259][T11206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.531405][ T5942] usb 6-1: USB disconnect, device number 2 [ 1099.609070][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.609310][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.718188][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.718428][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.761237][T11270] udevd[11270]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.791512][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.791544][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.964610][T11366] Can't find ip_set type hash:net,po [ 1102.228173][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.228196][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.664476][T11399] kernel profiling enabled (shift: 17) [ 1107.690059][T11399] trusted_key: encrypted_key: keylen parameter is missing [ 1108.215701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1108.464990][T11206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.360472][ T5796] hid-generic FFFF:0008:0003.0012: item fetching failed at offset 0/1 [ 1115.361293][ T5796] hid-generic FFFF:0008:0003.0012: probe with driver hid-generic failed with error -22 [ 1115.508284][T11442] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.997'. [ 1115.655417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.665434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.667368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.675378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.685374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.695377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.705376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1115.715372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1117.296237][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1117.296260][ T37] audit: type=1326 audit(1768201770.824:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11445 comm="syz.8.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce752f749 code=0x0 [ 1117.938256][T11206] veth0_vlan: entered promiscuous mode [ 1117.985125][T11206] veth1_vlan: entered promiscuous mode [ 1118.137452][T11206] veth0_macvtap: entered promiscuous mode [ 1118.162638][T11206] veth1_macvtap: entered promiscuous mode [ 1118.230044][T11206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.501079][T11206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.861828][ T1270] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.861931][ T1270] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.861970][ T1270] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.862007][ T1270] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.922713][T11471] netlink: 'syz.7.1005': attribute type 3 has an invalid length. [ 1120.235586][ T5942] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1120.400003][ T5942] usb 8-1: Using ep0 maxpacket: 8 [ 1120.456657][ T5942] usb 8-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1120.456690][ T5942] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1120.456720][ T5942] usb 8-1: Product: syz [ 1120.456734][ T5942] usb 8-1: Manufacturer: syz [ 1120.456749][ T5942] usb 8-1: SerialNumber: syz [ 1120.515114][ T5942] usb 8-1: config 0 descriptor?? [ 1121.065803][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.065827][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.382308][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.382332][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.565200][ T5977] hid-generic FFFF:0008:0003.0013: item fetching failed at offset 0/1 [ 1121.597341][ T5977] hid-generic FFFF:0008:0003.0013: probe with driver hid-generic failed with error -22 [ 1121.729718][ T5942] usb 8-1: USB disconnect, device number 2 [ 1121.823015][T11487] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1010'. [ 1122.369914][T11270] udevd[11270]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.437283][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1122.630154][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1122.630190][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.630211][ T10] usb 9-1: Product: syz [ 1122.630226][ T10] usb 9-1: Manufacturer: syz [ 1122.630240][ T10] usb 9-1: SerialNumber: syz [ 1123.305712][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1123.305785][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1125.080287][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1125.431900][T11532] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1021'. [ 1125.708572][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1125.709127][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1125.709187][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1125.770648][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1125.911634][ T10] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1126.048262][ T10] usb 9-1: USB disconnect, device number 2 [ 1126.386744][ T8472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1126.393975][ T8472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1126.408915][ T8472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1126.412947][ T8472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1127.006757][ T8472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.318163][ T8472] Bluetooth: hci4: command tx timeout [ 1130.211872][T11566] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.1031'. [ 1131.395627][ T8472] Bluetooth: hci4: command tx timeout [ 1131.507055][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1132.625160][ T8472] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1132.629449][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1132.629487][ T8472] Tainted: [L]=SOFTLOCKUP [ 1132.629494][ [ 1132.629494][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.629507][ T8472] Workqueue: hci5 hci_rx_work [ 1132.629532][ T8472] Call Trace: [ 1132.629539][ T8472] [ 1132.629547][ T8472] dump_stack_lvl+0xe8/0x150 [ 1132.629580][ T8472] sysfs_create_dir_ns+0x259/0x280 [ 1132.629608][ T8472] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1132.629637][ T8472] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1132.629669][ T8472] ? rt_spin_unlock+0x161/0x200 [ 1132.629698][ T8472] kobject_add_internal+0x6b1/0xcd0 [ 1132.629732][ T8472] kobject_add+0x155/0x220 [ 1132.629761][ T8472] ? __pfx_kobject_add+0x10/0x10 [ 1132.629793][ T8472] ? get_device_parent+0x370/0x3a0 [ 1132.629824][ T8472] device_add+0x408/0xb80 [ 1132.629851][ T8472] hci_conn_add_sysfs+0xd5/0x210 [ 1132.629886][ T8472] le_conn_complete_evt+0xf1d/0x1420 [ 1132.629923][ T8472] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1132.629949][ T8472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.629969][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.629991][ T8472] ? skb_pull_data+0xfb/0x200 [ 1132.630026][ T8472] hci_le_conn_complete_evt+0x187/0x480 [ 1132.630061][ T8472] hci_event_packet+0x78f/0x1260 [ 1132.630092][ T8472] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1132.630120][ T8472] ? __pfx_hci_event_packet+0x10/0x10 [ 1132.630139][ T8472] ? rt_spin_unlock+0x150/0x200 [ 1132.630176][ T8472] ? hci_send_to_monitor+0xe2/0x590 [ 1132.630208][ T8472] hci_rx_work+0x3ee/0x1060 [ 1132.630239][ T8472] ? process_scheduled_works+0x9ef/0x1770 [ 1132.630265][ T8472] process_scheduled_works+0xad1/0x1770 [ 1132.630320][ T8472] ? __pfx_process_scheduled_works+0x10/0x10 [ 1132.630338][ T8472] ? do_raw_spin_lock+0x121/0x290 [ 1132.630488][ T8472] worker_thread+0x8a0/0xda0 [ 1132.630544][ T8472] kthread+0x711/0x8a0 [ 1132.630579][ T8472] ? __pfx_worker_thread+0x10/0x10 [ 1132.630604][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.630629][ T8472] ? rt_spin_unlock+0x150/0x200 [ 1132.630661][ T8472] ? rt_spin_unlock+0x161/0x200 [ 1132.630684][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.630714][ T8472] ret_from_fork+0x510/0xa50 [ 1132.630739][ T8472] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.630759][ T8472] ? __switch_to+0xc9e/0x1480 [ 1132.630795][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.630824][ T8472] ret_from_fork_asm+0x1a/0x30 [ 1132.630875][ T8472] [ 1132.631163][ T8472] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1132.631211][ T8472] Bluetooth: hci5: failed to register connection device [ 1132.668688][ T8472] ================================================================== [ 1132.668710][ T8472] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd6/0x170 [ 1132.668756][ T8472] Read of size 8 at addr ffff88803109f200 by task kworker/u9:0/8472 [ 1132.668774][ T8472] [ 1132.668789][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1132.668819][ T8472] Tainted: [L]=SOFTLOCKUP [ 1132.668826][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.668841][ T8472] Workqueue: hci5 hci_rx_work [ 1132.668864][ T8472] Call Trace: [ 1132.668873][ T8472] [ 1132.668883][ T8472] dump_stack_lvl+0xe8/0x150 [ 1132.668914][ T8472] print_report+0xca/0x240 [ 1132.668938][ T8472] ? l2cap_sock_ready_cb+0xd6/0x170 [ 1132.668969][ T8472] kasan_report+0x118/0x150 [ 1132.669004][ T8472] ? l2cap_sock_ready_cb+0xd6/0x170 [ 1132.669040][ T8472] l2cap_sock_ready_cb+0xd6/0x170 [ 1132.669073][ T8472] l2cap_le_start+0xb0d/0x13b0 [ 1132.669104][ T8472] ? __pfx_l2cap_le_start+0x10/0x10 [ 1132.669139][ T8472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.669162][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.669183][ T8472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1132.669205][ T8472] ? mutex_lock_nested+0x154/0x1d0 [ 1132.669231][ T8472] ? l2cap_connect_cfm+0x661/0x10e0 [ 1132.669262][ T8472] l2cap_connect_cfm+0x6aa/0x10e0 [ 1132.669295][ T8472] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1132.669323][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.669343][ T8472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1132.669365][ T8472] ? mutex_lock_nested+0x154/0x1d0 [ 1132.669390][ T8472] ? hci_connect_cfm+0x2c/0x140 [ 1132.669414][ T8472] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1132.669443][ T8472] hci_connect_cfm+0x95/0x140 [ 1132.669468][ T8472] le_conn_complete_evt+0xf65/0x1420 [ 1132.669500][ T8472] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1132.669527][ T8472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.669544][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.669561][ T8472] ? skb_pull_data+0xfb/0x200 [ 1132.669592][ T8472] hci_le_conn_complete_evt+0x187/0x480 [ 1132.669622][ T8472] hci_event_packet+0x78f/0x1260 [ 1132.669653][ T8472] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1132.669678][ T8472] ? __pfx_hci_event_packet+0x10/0x10 [ 1132.669698][ T8472] ? rt_spin_unlock+0x150/0x200 [ 1132.669731][ T8472] ? hci_send_to_monitor+0xe2/0x590 [ 1132.669761][ T8472] hci_rx_work+0x3ee/0x1060 [ 1132.669785][ T8472] ? process_scheduled_works+0x9ef/0x1770 [ 1132.669809][ T8472] process_scheduled_works+0xad1/0x1770 [ 1132.669842][ T8472] ? __pfx_process_scheduled_works+0x10/0x10 [ 1132.669862][ T8472] ? do_raw_spin_lock+0x121/0x290 [ 1132.669894][ T8472] worker_thread+0x8a0/0xda0 [ 1132.669928][ T8472] kthread+0x711/0x8a0 [ 1132.669957][ T8472] ? __pfx_worker_thread+0x10/0x10 [ 1132.669979][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.670004][ T8472] ? rt_spin_unlock+0x150/0x200 [ 1132.670034][ T8472] ? rt_spin_unlock+0x161/0x200 [ 1132.670061][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.670089][ T8472] ret_from_fork+0x510/0xa50 [ 1132.670113][ T8472] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.670134][ T8472] ? __switch_to+0xc9e/0x1480 [ 1132.670166][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.670195][ T8472] ret_from_fork_asm+0x1a/0x30 [ 1132.670235][ T8472] [ 1132.670243][ T8472] [ 1132.670248][ T8472] Allocated by task 11582: [ 1132.670258][ T8472] kasan_save_track+0x3e/0x80 [ 1132.670285][ T8472] __kasan_kmalloc+0x93/0xb0 [ 1132.670320][ T8472] __kmalloc_noprof+0x23e/0x7e0 [ 1132.670354][ T8472] sk_prot_alloc+0xe7/0x220 [ 1132.670386][ T8472] sk_alloc+0x3a/0x390 [ 1132.670403][ T8472] bt_sock_alloc+0x3b/0x310 [ 1132.670421][ T8472] l2cap_sock_create+0x147/0x330 [ 1132.670443][ T8472] bt_sock_create+0x163/0x240 [ 1132.670461][ T8472] __sock_create+0x4b3/0x9d0 [ 1132.670476][ T8472] __sys_socket+0xd7/0x1b0 [ 1132.670491][ T8472] __x64_sys_socket+0x7a/0x90 [ 1132.670506][ T8472] do_syscall_64+0xec/0xf80 [ 1132.670525][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.670545][ T8472] [ 1132.670550][ T8472] Freed by task 11582: [ 1132.670559][ T8472] kasan_save_track+0x3e/0x80 [ 1132.670584][ T8472] kasan_save_free_info+0x46/0x50 [ 1132.670606][ T8472] __kasan_slab_free+0x5c/0x80 [ 1132.670701][ T8472] kfree+0x1bd/0x900 [ 1132.670725][ T8472] __sk_destruct+0x626/0x880 [ 1132.670749][ T8472] l2cap_sock_release+0x1c1/0x270 [ 1132.670775][ T8472] sock_close+0xc3/0x240 [ 1132.670803][ T8472] __fput+0x45b/0xa80 [ 1132.670824][ T8472] task_work_run+0x1d4/0x260 [ 1132.670851][ T8472] exit_to_user_mode_loop+0xef/0x4e0 [ 1132.670879][ T8472] do_syscall_64+0x2c1/0xf80 [ 1132.670898][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.670917][ T8472] [ 1132.670922][ T8472] The buggy address belongs to the object at ffff88803109f000 [ 1132.670922][ T8472] which belongs to the cache kmalloc-2k of size 2048 [ 1132.670940][ T8472] The buggy address is located 512 bytes inside of [ 1132.670940][ T8472] freed 2048-byte region [ffff88803109f000, ffff88803109f800) [ 1132.670963][ T8472] [ 1132.670968][ T8472] The buggy address belongs to the physical page: [ 1132.670979][ T8472] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31098 [ 1132.670999][ T8472] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1132.671016][ T8472] flags: 0x80000000000040(head|node=0|zone=1) [ 1132.671033][ T8472] page_type: f5(slab) [ 1132.671053][ T8472] raw: 0080000000000040 ffff88813ff27000 ffffea0000f3ec00 dead000000000002 [ 1132.671071][ T8472] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1132.671091][ T8472] head: 0080000000000040 ffff88813ff27000 ffffea0000f3ec00 dead000000000002 [ 1132.671109][ T8472] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1132.671127][ T8472] head: 0080000000000003 ffffea0000c42601 00000000ffffffff 00000000ffffffff [ 1132.671144][ T8472] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1132.671155][ T8472] page dumped because: kasan: bad access detected [ 1132.671165][ T8472] page_owner tracks the page as allocated [ 1132.671173][ T8472] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 44, tgid 44 (kworker/u8:3), ts 919572640031, free_ts 919329918532 [ 1132.671210][ T8472] post_alloc_hook+0x234/0x290 [ 1132.671238][ T8472] get_page_from_freelist+0x28c0/0x2960 [ 1132.671256][ T8472] __alloc_frozen_pages_noprof+0x181/0x370 [ 1132.671274][ T8472] alloc_pages_mpol+0xd1/0x380 [ 1132.671288][ T8472] allocate_slab+0x86/0x3b0 [ 1132.671307][ T8472] ___slab_alloc+0xb10/0x13e0 [ 1132.671325][ T8472] __slab_alloc+0xc6/0x1f0 [ 1132.671343][ T8472] __kmalloc_node_track_caller_noprof+0x2bf/0x810 [ 1132.671373][ T8472] kmalloc_reserve+0x136/0x290 [ 1132.671392][ T8472] __alloc_skb+0x204/0x3a0 [ 1132.671412][ T8472] inet6_ifinfo_notify+0x70/0x120 [ 1132.671436][ T8472] addrconf_notify+0xca0/0x1050 [ 1132.671465][ T8472] notifier_call_chain+0x19d/0x3a0 [ 1132.671490][ T8472] netif_state_change+0x26f/0x380 [ 1132.671509][ T8472] linkwatch_do_dev+0x117/0x170 [ 1132.671536][ T8472] __linkwatch_run_queue+0x56d/0x7e0 [ 1132.671563][ T8472] page last free pid 9911 tgid 9911 stack trace: [ 1132.671575][ T8472] __free_frozen_pages+0xfe1/0x1170 [ 1132.671603][ T8472] __slab_free+0x2e6/0x330 [ 1132.671682][ T8472] qlist_free_all+0x97/0x100 [ 1132.671718][ T8472] kasan_quarantine_reduce+0x148/0x160 [ 1132.671741][ T8472] __kasan_slab_alloc+0x22/0x80 [ 1132.671770][ T8472] kmem_cache_alloc_node_noprof+0x23c/0x6f0 [ 1132.671808][ T8472] __alloc_skb+0x1dc/0x3a0 [ 1132.671829][ T8472] netlink_sendmsg+0x5c6/0xb30 [ 1132.671856][ T8472] __sock_sendmsg+0x21c/0x270 [ 1132.671885][ T8472] __sys_sendto+0x3c7/0x520 [ 1132.671907][ T8472] __x64_sys_sendto+0xde/0x100 [ 1132.671928][ T8472] do_syscall_64+0xec/0xf80 [ 1132.671946][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.671966][ T8472] [ 1132.671972][ T8472] Memory state around the buggy address: [ 1132.671984][ T8472] ffff88803109f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1132.671999][ T8472] ffff88803109f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1132.672013][ T8472] >ffff88803109f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1132.672023][ T8472] ^ [ 1132.672034][ T8472] ffff88803109f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1132.672047][ T8472] ffff88803109f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1132.672058][ T8472] ================================================================== [ 1132.677576][ T8472] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1132.677601][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1132.677632][ T8472] Tainted: [L]=SOFTLOCKUP [ 1132.677640][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.677656][ T8472] Workqueue: hci5 hci_rx_work [ 1132.677683][ T8472] Call Trace: [ 1132.677691][ T8472] [ 1132.677699][ T8472] vpanic+0x1e0/0x670 [ 1132.677733][ T8472] panic+0xb9/0xc0 [ 1132.677761][ T8472] ? __pfx_panic+0x10/0x10 [ 1132.677792][ T8472] ? preempt_schedule_common+0x83/0xd0 [ 1132.677816][ T8472] ? l2cap_sock_ready_cb+0xd6/0x170 [ 1132.677849][ T8472] check_panic_on_warn+0x89/0xb0 [ 1132.677880][ T8472] ? l2cap_sock_ready_cb+0xd6/0x170 [ 1132.677922][ T8472] end_report+0x6f/0x140 [ 1132.677955][ T8472] kasan_report+0x129/0x150 [ 1132.677988][ T8472] ? l2cap_sock_ready_cb+0xd6/0x170 [ 1132.678024][ T8472] l2cap_sock_ready_cb+0xd6/0x170 [ 1132.678058][ T8472] l2cap_le_start+0xb0d/0x13b0 [ 1132.678088][ T8472] ? __pfx_l2cap_le_start+0x10/0x10 [ 1132.678116][ T8472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.678139][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.678160][ T8472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1132.678181][ T8472] ? mutex_lock_nested+0x154/0x1d0 [ 1132.678208][ T8472] ? l2cap_connect_cfm+0x661/0x10e0 [ 1132.678238][ T8472] l2cap_connect_cfm+0x6aa/0x10e0 [ 1132.678272][ T8472] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1132.678299][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.678320][ T8472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1132.678342][ T8472] ? mutex_lock_nested+0x154/0x1d0 [ 1132.678368][ T8472] ? hci_connect_cfm+0x2c/0x140 [ 1132.678392][ T8472] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1132.678421][ T8472] hci_connect_cfm+0x95/0x140 [ 1132.678454][ T8472] le_conn_complete_evt+0xf65/0x1420 [ 1132.678486][ T8472] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1132.678513][ T8472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.678535][ T8472] ? lockdep_hardirqs_on+0x7b/0x110 [ 1132.678562][ T8472] ? skb_pull_data+0xfb/0x200 [ 1132.678595][ T8472] hci_le_conn_complete_evt+0x187/0x480 [ 1132.678623][ T8472] hci_event_packet+0x78f/0x1260 [ 1132.678645][ T8472] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1132.678670][ T8472] ? __pfx_hci_event_packet+0x10/0x10 [ 1132.678689][ T8472] ? rt_spin_unlock+0x150/0x200 [ 1132.678722][ T8472] ? hci_send_to_monitor+0xe2/0x590 [ 1132.678751][ T8472] hci_rx_work+0x3ee/0x1060 [ 1132.678775][ T8472] ? process_scheduled_works+0x9ef/0x1770 [ 1132.678800][ T8472] process_scheduled_works+0xad1/0x1770 [ 1132.678837][ T8472] ? __pfx_process_scheduled_works+0x10/0x10 [ 1132.678859][ T8472] ? do_raw_spin_lock+0x121/0x290 [ 1132.678890][ T8472] worker_thread+0x8a0/0xda0 [ 1132.678927][ T8472] kthread+0x711/0x8a0 [ 1132.678957][ T8472] ? __pfx_worker_thread+0x10/0x10 [ 1132.679040][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.679100][ T8472] ? rt_spin_unlock+0x150/0x200 [ 1132.679151][ T8472] ? rt_spin_unlock+0x161/0x200 [ 1132.679218][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.679277][ T8472] ret_from_fork+0x510/0xa50 [ 1132.679322][ T8472] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.679366][ T8472] ? __switch_to+0xc9e/0x1480 [ 1132.679438][ T8472] ? __pfx_kthread+0x10/0x10 [ 1132.679497][ T8472] ret_from_fork_asm+0x1a/0x30 [ 1132.679637][ T8472] [ 1132.680305][ T8472] Kernel Offset: disabled