last executing test programs: 7m14.749172655s ago: executing program 4 (id=246): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_ATTR(r2, &(0x7f0000000480)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, {0x4, 0xff, 0x269a, 0x7, 0x9, 0x8, 0x2, 0x8, 0x6, 0x8000, 0x9, 0x0, 0x0, 0x9, 0xb}}}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) umount2(&(0x7f0000000500)='./file0\x00', 0x2) 7m13.095796546s ago: executing program 4 (id=255): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000454}, 0x0) 7m12.680340994s ago: executing program 4 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) getgroups(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) syz_io_uring_complete(0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close(0xffffffffffffffff) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4023210000002106a21b8934342d18596f70d10415d2734b73656e3475d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m9.724267991s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xe, 0x1c}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7m6.320421535s ago: executing program 4 (id=267): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000454}, 0x0) 7m5.79235052s ago: executing program 4 (id=269): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) mkdir(&(0x7f00000040c0)='./file0\x00', 0xdc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 6m50.522731029s ago: executing program 32 (id=269): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) mkdir(&(0x7f00000040c0)='./file0\x00', 0xdc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 6m24.652972725s ago: executing program 2 (id=368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$FUSE_LK(r5, &(0x7f00000000c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x9, 0x9, 0x2, 0xffffffffffffffff}}}, 0x28) 6m21.893881255s ago: executing program 2 (id=371): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x80, 0x7, 0xfffffc01, 0xe590, {{0xa, 0x4, 0x1, 0x34, 0x28, 0x64, 0x0, 0x5, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @lsrr={0x83, 0xb, 0x7f, [@private=0xa010101, @multicast1]}, @noop]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/124, 0x7c, 0x0, &(0x7f0000000580)=""/226, 0xe2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./cgroup/cgroup.procs\x00', 0x0, 0x0, r1}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb0000bbbb8adeeccb6f5908060001080006040002aaaaaaaaaa1de00000026eae43cbf6a6ac1414aa"], 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) 6m20.827314081s ago: executing program 2 (id=374): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 6m19.300057498s ago: executing program 2 (id=377): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x53}, 0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6m17.899627837s ago: executing program 2 (id=379): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 6m15.655747954s ago: executing program 2 (id=382): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x314, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x220, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xc0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x7c, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x7d, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xe0, 0x1, [@m_nat={0xdc, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}]}, {0x39, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6m0.518136279s ago: executing program 33 (id=382): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x314, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x220, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xc0, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x7c, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x7d, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xe0, 0x1, [@m_nat={0xdc, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}]}, {0x39, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m10.000156871s ago: executing program 1 (id=509): syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000454}, 0x0) 4m55.076144064s ago: executing program 1 (id=531): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m53.175126524s ago: executing program 1 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timerfd_create(0x7, 0x0) 4m45.502524917s ago: executing program 1 (id=547): openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a80, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d2", 0x9}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r6, @ANYBLOB="bbd6f2a923b59591bf9fde6fffc0062130847e6302a00f5804a1fc7ca8b2795c1e346a7f6b88bf1c57c38da970f75ad6d675d49473cc1d52d6085f923f9b1d1428a771789e10f7a2dc705218a023653fdd62d79b706546bd68e2f34551d6"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r7 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m45.331609017s ago: executing program 1 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') r1 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file5\x00', &(0x7f00000002c0), 0x802414, &(0x7f0000000200)=ANY=[]) renameat2(0xffffffffffffff9c, 0x0, r1, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="000000000200"/28], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r0, &(0x7f0000002240)=[{0x0}], 0x1, 0x29d3, 0x6) setrlimit(0x7, &(0x7f00000001c0)={0x3, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) 4m45.10232343s ago: executing program 1 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x2000000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendmsg(r5, &(0x7f0000000740)={&(0x7f0000000600)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)="981070e239f28d43a823f8f760921e9294fd8ddd76ad1c71755cb318d7f69c67e9c86d2d24392a8e0571708170514601bbb084192e9bd7d3e30e69da498ae1fa3e8381d2e0a9fbbfcfe5d21685094ce9b48bb267926e7a4d93f72f3e100badc9219d6bc6f0c2f59c4795ba9276526817b80b3b9cab9a034ac2954b47a5c73ca8e1eaeada06faa52c84e9cdb1597f49442744ef1bdc8389823edbf25094b384e1", 0xa0}, {0x0}], 0x2, &(0x7f0000000fc0)=[{0x78, 0x10a, 0x1, "880db976c618ada27d1e2089d2991c6f13a183aac048298059ffd6c8dff16caeaf6946b66a576b77409e6d666f68b0087c8055747a809e9c299a14202c6e84832bbeaecd435427342ca652ee20bd1b21b5385563cab4995c961ba0e778d1701f7d96d9c05207e1ad"}, {0x58, 0x118, 0x4, "8a01a08e1e81ab029c6f97237d408ee7b70935c833770d13c238477c38882f12ce652145821d359dae79568eceb104c9e3e1d00762723f8e596405864f2a82fc4aeb561b"}, {0x100, 0x110, 0x80000001, "b34a15d90eb9ab7e0f6aa72bf9b8cd503b9f2560ffe1015e5849c862bc4a25773c06453cd5930739eb864a7679f2d9b43e85f32be61a8dbbf46ce3363b0202610f2fe5dac3b602c28d0f8b064aa96369fe3bfbac9c245e70511150594c09a51d6fd869744f5df790790270e806ee93bd44ba9e859a85c6040548de2e99719eb76c52be63e32ad442f3a09e20688b5d2d7203ef6193863a5812a057437c0997dd7114616a8fda1c1367e9e1e09a64499a0df036d90b41b2d5953044d97951441745a055f95af2e971355a6191c3c9cbb93cd71f7157d310fb37ff6f4c929f739e459f50825d9b3f4a634d7baac41e"}, {0x20, 0x101, 0x86, "4be9870a6ac1981b2f7e8270"}, {0x40, 0x1, 0x6, "647a62c37c8bd8cb08e103c39a0c5950fafbe74fe058e0d827373a34106cb36b2ea65eb0b4163274a05beefa7f"}], 0x230}, 0x8811) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_emit_ethernet(0x3b6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1, 0x6, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27) 4m29.169911024s ago: executing program 34 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x2000000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendmsg(r5, &(0x7f0000000740)={&(0x7f0000000600)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)="981070e239f28d43a823f8f760921e9294fd8ddd76ad1c71755cb318d7f69c67e9c86d2d24392a8e0571708170514601bbb084192e9bd7d3e30e69da498ae1fa3e8381d2e0a9fbbfcfe5d21685094ce9b48bb267926e7a4d93f72f3e100badc9219d6bc6f0c2f59c4795ba9276526817b80b3b9cab9a034ac2954b47a5c73ca8e1eaeada06faa52c84e9cdb1597f49442744ef1bdc8389823edbf25094b384e1", 0xa0}, {0x0}], 0x2, &(0x7f0000000fc0)=[{0x78, 0x10a, 0x1, "880db976c618ada27d1e2089d2991c6f13a183aac048298059ffd6c8dff16caeaf6946b66a576b77409e6d666f68b0087c8055747a809e9c299a14202c6e84832bbeaecd435427342ca652ee20bd1b21b5385563cab4995c961ba0e778d1701f7d96d9c05207e1ad"}, {0x58, 0x118, 0x4, "8a01a08e1e81ab029c6f97237d408ee7b70935c833770d13c238477c38882f12ce652145821d359dae79568eceb104c9e3e1d00762723f8e596405864f2a82fc4aeb561b"}, {0x100, 0x110, 0x80000001, "b34a15d90eb9ab7e0f6aa72bf9b8cd503b9f2560ffe1015e5849c862bc4a25773c06453cd5930739eb864a7679f2d9b43e85f32be61a8dbbf46ce3363b0202610f2fe5dac3b602c28d0f8b064aa96369fe3bfbac9c245e70511150594c09a51d6fd869744f5df790790270e806ee93bd44ba9e859a85c6040548de2e99719eb76c52be63e32ad442f3a09e20688b5d2d7203ef6193863a5812a057437c0997dd7114616a8fda1c1367e9e1e09a64499a0df036d90b41b2d5953044d97951441745a055f95af2e971355a6191c3c9cbb93cd71f7157d310fb37ff6f4c929f739e459f50825d9b3f4a634d7baac41e"}, {0x20, 0x101, 0x86, "4be9870a6ac1981b2f7e8270"}, {0x40, 0x1, 0x6, "647a62c37c8bd8cb08e103c39a0c5950fafbe74fe058e0d827373a34106cb36b2ea65eb0b4163274a05beefa7f"}], 0x230}, 0x8811) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_emit_ethernet(0x3b6, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbee29d86e5ddc86dd6000004003803afffe80000000000000000000000000000186009078000000000000000000000000010aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf895222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc000000000000000000000000000000000000000025cc88f0d30b19003cec933fa63ee219912ebdd3be40be511c46c8b3d17c660cc38ca93669816364d704d710bdfe67ea0db73000a2488ac3c48e40bcc42be78d73ec13e6262488c48c6478f1f1fd5fc1374a7f6ca88c4470684f7f8968b397f057ea8e7f82376db23f3cec0d07d3e4cf73c19b14db3f066939ed6891f130d773277464871353acf2300a8dbf2f92326b0f5952aa4a1d3f2794cc57cd597bbc6ba3c40960517d47d98c429647ec202a5a121d27c693261419b378541c1858419cde45c93cf8478355abda940789e99cfcd6228c0277e1661bd360446be7"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1, 0x6, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27) 3m23.33989976s ago: executing program 3 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) 3m20.788032822s ago: executing program 3 (id=686): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000454}, 0x0) 3m18.430071593s ago: executing program 3 (id=690): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 3m16.467393766s ago: executing program 3 (id=694): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 3m15.233867545s ago: executing program 3 (id=695): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3m14.236301283s ago: executing program 3 (id=697): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000454}, 0x0) 2m58.310617418s ago: executing program 35 (id=697): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000454}, 0x0) 10.602907121s ago: executing program 0 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x6, 0x1, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1003, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008881}, 0x8084) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) rt_sigaction(0x1e, 0x0, 0x0, 0x8, &(0x7f0000000200)) 4.3323898s ago: executing program 0 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r5 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2, r5}) 4.051786035s ago: executing program 0 (id=890): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010009bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800010013000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0x20, 0x80, 0x29}, {0x0, 0x3, 0x7, 0x8, 0x10000, 0x60000000, 0xe04d, 0x2}, {0x200000000, 0x1, 0x8, 0x4}, 0x3ff, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d5, 0x33}, 0xd, @in=@local, 0x3505, 0x0, 0x1, 0xff, 0x2, 0x8, 0x10001}}, 0xe8) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008891, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x1000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x6, 0x4, 0x12}, 0x50) close(r8) 2.579140914s ago: executing program 0 (id=891): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x20000000, 0xffff, 0xb, 0x2, 0x3, 0xfffffffd}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.413685381s ago: executing program 0 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) timerfd_create(0x7, 0x0) 0s ago: executing program 0 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): process `syz.0.141'. [ 161.535188][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 161.604093][ T6455] fuse: Bad value for 'fd' [ 165.015454][ T5933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.287426][ T6483] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 170.574332][ T6506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.867688][ T5865] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 178.169887][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.169940][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.173375][ T5865] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 178.173402][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.173420][ T5865] usb 3-1: Product: syz [ 178.173432][ T5865] usb 3-1: Manufacturer: syz [ 178.173445][ T5865] usb 3-1: SerialNumber: syz [ 178.235275][ T5865] usb 3-1: config 0 descriptor?? [ 178.520835][ T5865] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 178.744034][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.249314][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.366542][ T5865] usb 3-1: USB disconnect, device number 4 [ 179.750431][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.908595][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.012817][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.163469][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.209314][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.477502][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.080354][ T6593] lo speed is unknown, defaulting to 1000 [ 181.374705][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.544343][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.760989][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.797731][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.015854][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.091424][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.643889][ T6662] siw: device registration error -23 [ 194.321636][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.201973][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 197.980022][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.980056][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.980100][ T5891] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 197.980122][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.985383][ T5891] usb 3-1: config 0 descriptor?? [ 198.637884][ T5891] usb 3-1: can't set config #0, error -71 [ 199.514717][ T5891] usb 3-1: USB disconnect, device number 5 [ 199.776780][ T6720] siw: device registration error -23 [ 200.291913][ T5891] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 200.493024][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.493058][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.493095][ T5891] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 200.493118][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.554788][ T5891] usb 3-1: config 0 descriptor?? [ 200.979726][ T5891] isku 0003:1E7D:319C.0004: unknown main item tag 0x2 [ 200.979817][ T5891] isku 0003:1E7D:319C.0004: unbalanced collection at end of report description [ 200.984258][ T5891] isku 0003:1E7D:319C.0004: parse failed [ 200.984325][ T5891] isku 0003:1E7D:319C.0004: probe with driver isku failed with error -22 [ 201.707028][ T5891] usb 3-1: USB disconnect, device number 6 [ 205.498122][ T6768] lo speed is unknown, defaulting to 1000 [ 206.685160][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 206.685295][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 206.691506][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 207.170537][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 207.170587][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 207.467668][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.470257][ T925] lo speed is unknown, defaulting to 1000 [ 207.827803][ T925] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 207.981918][ T925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.981951][ T925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.981988][ T925] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 207.982010][ T925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.038421][ T925] usb 5-1: config 0 descriptor?? [ 208.542539][ T925] isku 0003:1E7D:319C.0005: unknown main item tag 0x2 [ 208.542628][ T925] isku 0003:1E7D:319C.0005: unbalanced collection at end of report description [ 208.543420][ T925] isku 0003:1E7D:319C.0005: parse failed [ 208.543495][ T925] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22 [ 208.883636][ T6794] hub 9-0:1.0: USB hub found [ 208.884937][ T6794] hub 9-0:1.0: 1 port detected [ 209.929859][ T925] usb 5-1: USB disconnect, device number 5 [ 211.828542][ T6827] tipc: Started in network mode [ 211.828573][ T6827] tipc: Node identity 62d532b33661, cluster identity 4711 [ 211.829335][ T6827] tipc: Enabled bearer , priority 0 [ 211.834900][ T6827] syzkaller0: entered promiscuous mode [ 211.834926][ T6827] syzkaller0: entered allmulticast mode [ 212.018492][ T6827] tipc: Resetting bearer [ 212.299570][ T6835] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.323421][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.325681][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.887700][ T5865] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 212.994474][ T1237] tipc: Node number set to 1421095603 [ 213.042773][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.042833][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.046149][ T5865] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 213.046178][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.046197][ T5865] usb 3-1: Product: syz [ 213.046211][ T5865] usb 3-1: Manufacturer: syz [ 213.046225][ T5865] usb 3-1: SerialNumber: syz [ 213.047676][ T5933] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 213.113562][ T5865] usb 3-1: config 0 descriptor?? [ 213.226707][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.226740][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.226786][ T5933] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 213.226808][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.233797][ T5933] usb 5-1: config 0 descriptor?? [ 213.560167][ T5865] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 213.619015][ T5865] usb 3-1: USB disconnect, device number 7 [ 213.690124][ T5933] isku 0003:1E7D:319C.0006: unknown main item tag 0x2 [ 213.690211][ T5933] isku 0003:1E7D:319C.0006: unbalanced collection at end of report description [ 213.690964][ T5933] isku 0003:1E7D:319C.0006: parse failed [ 213.691039][ T5933] isku 0003:1E7D:319C.0006: probe with driver isku failed with error -22 [ 213.970996][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.114316][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.218477][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.684752][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.718445][ T1237] usb 5-1: USB disconnect, device number 6 [ 214.889073][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.211783][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.495195][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.525789][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.649347][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.749153][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.958381][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.220277][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.410108][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.529824][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.375737][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.494430][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.367742][ T5890] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 222.371659][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.371691][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.371729][ T5890] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 222.371751][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.447513][ T5890] usb 4-1: config 0 descriptor?? [ 222.881978][ T5890] isku 0003:1E7D:319C.0007: unknown main item tag 0x2 [ 222.882068][ T5890] isku 0003:1E7D:319C.0007: unbalanced collection at end of report description [ 222.885623][ T5890] isku 0003:1E7D:319C.0007: parse failed [ 222.885708][ T5890] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -22 [ 223.606266][ T5890] usb 4-1: USB disconnect, device number 4 [ 225.380037][ T6916] ======================================================= [ 225.380037][ T6916] WARNING: The mand mount option has been deprecated and [ 225.380037][ T6916] and is ignored by this kernel. Remove the mand [ 225.380037][ T6916] option from the mount to silence this warning. [ 225.380037][ T6916] ======================================================= [ 227.229016][ T6916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.241930][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.246186][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.288855][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.293201][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.294433][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.662889][ T7004] tipc: Enabling of bearer rejected, already enabled [ 235.754165][ T6997] lo speed is unknown, defaulting to 1000 [ 237.430191][ T5818] Bluetooth: hci5: command tx timeout [ 238.217650][ T5865] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 238.371473][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.371506][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.371544][ T5865] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 238.371566][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.439296][ T7030] tipc: Enabling of bearer rejected, failed to enable media [ 238.439766][ T5865] usb 1-1: config 0 descriptor?? [ 238.906571][ T5865] isku 0003:1E7D:319C.0008: unknown main item tag 0x2 [ 238.906661][ T5865] isku 0003:1E7D:319C.0008: unbalanced collection at end of report description [ 238.928156][ T5865] isku 0003:1E7D:319C.0008: parse failed [ 238.928228][ T5865] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -22 [ 239.218072][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 239.506449][ T5818] Bluetooth: hci5: command tx timeout [ 240.225781][ T5933] usb 1-1: USB disconnect, device number 2 [ 241.305164][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.336251][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.379528][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.785468][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.794612][ T5818] Bluetooth: hci5: command tx timeout [ 242.595150][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.163307][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.607631][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.652081][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.829113][ T5818] Bluetooth: hci5: command tx timeout [ 244.251091][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.826589][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.008817][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.531633][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.077978][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.252577][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.599328][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.607846][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.608102][ T6997] bridge_slave_0: entered allmulticast mode [ 248.520218][ T6997] bridge_slave_0: entered promiscuous mode [ 248.539447][ T7117] tipc: Enabling of bearer rejected, already enabled [ 248.541828][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.541930][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.542128][ T6997] bridge_slave_1: entered allmulticast mode [ 248.593088][ T6997] bridge_slave_1: entered promiscuous mode [ 249.991271][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.011230][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.294063][ T6997] team0: Port device team_slave_0 added [ 250.297798][ T44] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 250.315242][ T6997] team0: Port device team_slave_1 added [ 250.453571][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.453603][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.453640][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 250.453661][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.499432][ T44] usb 4-1: config 0 descriptor?? [ 250.645132][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.645148][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.645172][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.702690][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.702707][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.702728][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.920076][ T44] isku 0003:1E7D:319C.0009: unknown main item tag 0x2 [ 250.920161][ T44] isku 0003:1E7D:319C.0009: unbalanced collection at end of report description [ 250.920955][ T44] isku 0003:1E7D:319C.0009: parse failed [ 250.921023][ T44] isku 0003:1E7D:319C.0009: probe with driver isku failed with error -22 [ 251.361583][ T6997] hsr_slave_0: entered promiscuous mode [ 251.364204][ T6997] hsr_slave_1: entered promiscuous mode [ 251.366429][ T6997] debugfs: 'hsr0' already exists in 'hsr' [ 251.366463][ T6997] Cannot create hsr debugfs directory [ 251.396887][ T69] bridge_slave_1: left allmulticast mode [ 251.463529][ T69] bridge_slave_1: left promiscuous mode [ 251.479422][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.551120][ T69] bridge_slave_0: left allmulticast mode [ 251.551140][ T69] bridge_slave_0: left promiscuous mode [ 251.551307][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.691807][ T5891] usb 4-1: USB disconnect, device number 5 [ 255.894161][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.354674][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.418978][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.642827][ T69] bond0 (unregistering): Released all slaves [ 262.605075][ T7189] lo speed is unknown, defaulting to 1000 [ 262.629308][ T7199] slcan: can't register candev [ 262.630359][ T7199] Falling back ldisc for ptm0. [ 265.498773][ T5890] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 265.650287][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.650321][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.650358][ T5890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 265.650380][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.697165][ T5890] usb 1-1: config 0 descriptor?? [ 267.231408][ T5890] isku 0003:1E7D:319C.000A: unknown main item tag 0x2 [ 267.231495][ T5890] isku 0003:1E7D:319C.000A: unbalanced collection at end of report description [ 267.243674][ T5890] isku 0003:1E7D:319C.000A: parse failed [ 267.243749][ T5890] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -22 [ 269.159606][ T5890] usb 1-1: USB disconnect, device number 3 [ 269.340422][ T69] hsr_slave_0: left promiscuous mode [ 269.567800][ T69] hsr_slave_1: left promiscuous mode [ 269.568764][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.613366][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.614568][ T1237] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 274.771333][ T1237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.771365][ T1237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.771400][ T1237] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 274.771421][ T1237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.780299][ T1237] usb 1-1: config 0 descriptor?? [ 275.217947][ T1237] isku 0003:1E7D:319C.000B: unknown main item tag 0x2 [ 275.218042][ T1237] isku 0003:1E7D:319C.000B: unbalanced collection at end of report description [ 275.220921][ T1237] isku 0003:1E7D:319C.000B: parse failed [ 275.220997][ T1237] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -22 [ 276.894678][ T1237] usb 1-1: USB disconnect, device number 4 [ 281.860232][ T69] team0 (unregistering): Port device team_slave_1 removed [ 285.010709][ T69] team0 (unregistering): Port device team_slave_0 removed [ 286.461485][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.480291][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.481574][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.509971][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.510685][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.143371][ T7372] loop6: detected capacity change from 0 to 524288000 [ 288.617894][ T5818] Bluetooth: hci1: command tx timeout [ 290.697718][ T5818] Bluetooth: hci1: command tx timeout [ 291.777732][ T7408] loop6: detected capacity change from 0 to 524288000 [ 293.469454][ T5818] Bluetooth: hci1: command tx timeout [ 293.744950][ T7365] lo speed is unknown, defaulting to 1000 [ 295.500506][ T5818] Bluetooth: hci1: command tx timeout [ 298.251710][ T7451] loop6: detected capacity change from 0 to 524288000 [ 298.277993][ T7365] chnl_net:caif_netlink_parms(): no params data found [ 298.551016][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.554369][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.555382][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.556521][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.557115][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.617833][ T5818] Bluetooth: hci3: command tx timeout [ 302.700797][ T5818] Bluetooth: hci3: command tx timeout [ 305.697694][ T5818] Bluetooth: hci3: command tx timeout [ 306.378448][ T7468] lo speed is unknown, defaulting to 1000 [ 306.922419][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.922537][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.922714][ T7365] bridge_slave_0: entered allmulticast mode [ 306.929243][ T7365] bridge_slave_0: entered promiscuous mode [ 306.991357][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.991495][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.991713][ T7365] bridge_slave_1: entered allmulticast mode [ 306.994351][ T7365] bridge_slave_1: entered promiscuous mode [ 307.389876][ T7535] siw: device registration error -23 [ 309.268348][ T5818] Bluetooth: hci3: command tx timeout [ 310.976055][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.972869][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.115890][ T7365] team0: Port device team_slave_0 added [ 315.130476][ T7365] team0: Port device team_slave_1 added [ 315.919238][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.919255][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.919279][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.987867][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.987883][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.987907][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.192304][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.372878][ T7365] hsr_slave_0: entered promiscuous mode [ 319.381606][ T7365] hsr_slave_1: entered promiscuous mode [ 319.384157][ T7365] debugfs: 'hsr0' already exists in 'hsr' [ 319.384184][ T7365] Cannot create hsr debugfs directory [ 319.384909][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 321.622667][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.622802][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.622980][ T7468] bridge_slave_0: entered allmulticast mode [ 321.625669][ T7468] bridge_slave_0: entered promiscuous mode [ 321.939660][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.939791][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.939972][ T7468] bridge_slave_1: entered allmulticast mode [ 321.943951][ T7468] bridge_slave_1: entered promiscuous mode [ 322.208529][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 322.609827][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.609883][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.612824][ T31] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 322.612850][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.612869][ T31] usb 4-1: Product: syz [ 322.612882][ T31] usb 4-1: Manufacturer: syz [ 322.612896][ T31] usb 4-1: SerialNumber: syz [ 322.621103][ T31] usb 4-1: config 0 descriptor?? [ 323.723795][ T31] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 323.748132][ T31] usb 4-1: USB disconnect, device number 6 [ 324.058066][ T7665] siw: device registration error -23 [ 324.961833][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.101219][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.142907][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.521053][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.689925][ T7468] team0: Port device team_slave_0 added [ 326.008241][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.121027][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.963613][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.018190][ T7468] team0: Port device team_slave_1 added [ 328.035653][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.230024][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.531073][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.603066][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.157683][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.157706][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.157726][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.161824][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.161838][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.161861][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.313166][ T7365] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.632577][ T7365] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.167330][ T7365] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.779886][ T7468] hsr_slave_0: entered promiscuous mode [ 332.788969][ T7468] hsr_slave_1: entered promiscuous mode [ 332.789927][ T7468] debugfs: 'hsr0' already exists in 'hsr' [ 332.789950][ T7468] Cannot create hsr debugfs directory [ 332.835163][ T7365] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.931484][ T69] bridge_slave_1: left allmulticast mode [ 333.931724][ T69] bridge_slave_1: left promiscuous mode [ 333.959096][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.037199][ T69] bridge_slave_0: left allmulticast mode [ 336.038217][ T69] bridge_slave_0: left promiscuous mode [ 336.069337][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.279867][ T69] bridge_slave_1: left allmulticast mode [ 338.279889][ T69] bridge_slave_1: left promiscuous mode [ 338.280035][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.633990][ T69] bridge_slave_0: left allmulticast mode [ 338.634020][ T69] bridge_slave_0: left promiscuous mode [ 338.634297][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.711080][ T69] tipc: Resetting bearer [ 339.248405][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.785407][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.656352][ T69] bond0 (unregistering): Released all slaves [ 345.532331][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.538263][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.539873][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.541004][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.541783][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.148677][ T69] tipc: Disabling bearer [ 346.589078][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 346.589096][ T37] audit: type=1804 audit(2000000001.139:27): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.525" name="/newroot/119/file0" dev="tmpfs" ino=642 res=1 errno=0 [ 347.607185][ T5818] Bluetooth: hci5: command tx timeout [ 348.385006][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.458339][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.501112][ T69] bond0 (unregistering): Released all slaves [ 349.658935][ T5818] Bluetooth: hci5: command tx timeout [ 350.021202][ T7815] syzkaller0: entered promiscuous mode [ 350.021229][ T7815] syzkaller0: entered allmulticast mode [ 350.177772][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 350.408763][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.408799][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.410779][ T9] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 350.410805][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.410824][ T9] usb 4-1: Product: syz [ 350.410838][ T9] usb 4-1: Manufacturer: syz [ 350.410851][ T9] usb 4-1: SerialNumber: syz [ 350.414418][ T9] usb 4-1: config 0 descriptor?? [ 350.444171][ T69] tipc: Left network mode [ 350.650941][ T9] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 350.672403][ T9] usb 4-1: USB disconnect, device number 7 [ 350.874150][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.709805][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.737661][ T5818] Bluetooth: hci5: command tx timeout [ 352.215600][ T7804] lo speed is unknown, defaulting to 1000 [ 353.130675][ T7870] siw: device registration error -23 [ 353.991664][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.000291][ T5818] Bluetooth: hci5: command tx timeout [ 354.832463][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.252441][ T69] hsr_slave_0: left promiscuous mode [ 355.332251][ T69] hsr_slave_1: left promiscuous mode [ 355.333376][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.378542][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.607782][ T5933] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 355.770139][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.770225][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.773541][ T5933] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 355.773567][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.773586][ T5933] usb 4-1: Product: syz [ 355.773599][ T5933] usb 4-1: Manufacturer: syz [ 355.773612][ T5933] usb 4-1: SerialNumber: syz [ 356.876724][ T69] hsr_slave_0: left promiscuous mode [ 357.702469][ T69] hsr_slave_1: left promiscuous mode [ 358.611904][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.612066][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.614160][ T5933] usb 4-1: config 0 descriptor?? [ 358.614695][ T5933] usb 4-1: can't set config #0, error -71 [ 358.661231][ T5933] usb 4-1: USB disconnect, device number 8 [ 358.730106][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.730133][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.073170][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.093009][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.094152][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.095292][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.096037][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.122253][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.229321][ T69] veth1_macvtap: left promiscuous mode [ 359.229524][ T69] veth0_macvtap: left promiscuous mode [ 359.230776][ T69] veth1_vlan: left promiscuous mode [ 359.231090][ T69] veth0_vlan: left promiscuous mode [ 359.768540][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.024075][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.037936][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.078289][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.155895][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.738423][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.104664][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.177736][ T5119] Bluetooth: hci1: command tx timeout [ 361.257727][ T44] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 361.329102][ T69] team0 (unregistering): Port device team_slave_1 removed [ 361.429790][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.429850][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.433812][ T44] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 361.433829][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.433857][ T44] usb 4-1: Product: syz [ 361.433870][ T44] usb 4-1: Manufacturer: syz [ 361.433882][ T44] usb 4-1: SerialNumber: syz [ 361.441575][ T44] usb 4-1: config 0 descriptor?? [ 361.518414][ T69] team0 (unregistering): Port device team_slave_0 removed [ 361.660250][ T44] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 361.669029][ T44] usb 4-1: USB disconnect, device number 9 [ 362.626473][ T7949] siw: device registration error -23 [ 363.284051][ T5119] Bluetooth: hci1: command tx timeout [ 363.661820][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.113306][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.555833][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.722102][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.465598][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.541171][ T5119] Bluetooth: hci1: command tx timeout [ 365.721711][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.058364][ T7974] loop6: detected capacity change from 0 to 524288000 [ 367.745275][ T5119] Bluetooth: hci1: command tx timeout [ 370.000081][ T8006] loop6: detected capacity change from 0 to 524288000 [ 370.301858][ T37] audit: type=1804 audit(2000000002.499:28): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.576" name="/newroot/141/file0" dev="tmpfs" ino=754 res=1 errno=0 [ 370.638313][ T69] team0 (unregistering): Port device team_slave_1 removed [ 371.856920][ T8021] siw: device registration error -23 [ 372.508277][ T69] team0 (unregistering): Port device team_slave_0 removed [ 375.963102][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.973390][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.976683][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.983554][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.984275][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.242140][ T8042] loop6: detected capacity change from 0 to 524288000 [ 377.416286][ T8054] siw: device registration error -23 [ 378.067716][ T5119] Bluetooth: hci6: command tx timeout [ 379.058406][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.193686][ T5119] Bluetooth: hci6: command tx timeout [ 380.589528][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 380.780235][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.780276][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.782928][ T9] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 380.782944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.782954][ T9] usb 4-1: Product: syz [ 380.782961][ T9] usb 4-1: Manufacturer: syz [ 380.782968][ T9] usb 4-1: SerialNumber: syz [ 380.787208][ T9] usb 4-1: config 0 descriptor?? [ 380.921606][ T8034] lo speed is unknown, defaulting to 1000 [ 381.316362][ T9] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 381.371980][ T7904] lo speed is unknown, defaulting to 1000 [ 381.461507][ T9] usb 4-1: USB disconnect, device number 10 [ 382.211077][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.220726][ T5119] Bluetooth: hci6: command tx timeout [ 382.592944][ T8079] loop6: detected capacity change from 0 to 524288000 [ 382.660985][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 383.343705][ T37] audit: type=1804 audit(2000000003.909:29): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.597" name="/newroot/160/file0" dev="tmpfs" ino=870 res=1 errno=0 [ 383.377696][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 383.538536][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.538567][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.538603][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 383.538624][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.544321][ T9] usb 1-1: config 0 descriptor?? [ 384.075883][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.101709][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.776691][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.856894][ T5119] Bluetooth: hci6: command tx timeout [ 384.906210][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 384.906338][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 384.913864][ T9] usb 1-1: USB disconnect, device number 5 [ 384.988163][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.988368][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.988576][ T7804] bridge_slave_0: entered allmulticast mode [ 384.992776][ T7804] bridge_slave_0: entered promiscuous mode [ 385.064637][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.064793][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.064999][ T7804] bridge_slave_1: entered allmulticast mode [ 385.069991][ T7804] bridge_slave_1: entered promiscuous mode [ 385.189276][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.329553][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.862076][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.196867][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.197841][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 386.213753][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.564131][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 387.001801][ T7804] team0: Port device team_slave_0 added [ 387.027699][ T5890] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 387.033331][ T7804] team0: Port device team_slave_1 added [ 387.263471][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.263525][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.280637][ T5890] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 387.280665][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.280684][ T5890] usb 1-1: Product: syz [ 387.280697][ T5890] usb 1-1: Manufacturer: syz [ 387.280710][ T5890] usb 1-1: SerialNumber: syz [ 387.299267][ T5890] usb 1-1: config 0 descriptor?? [ 387.526866][ T5890] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 387.530964][ T5890] usb 1-1: USB disconnect, device number 6 [ 387.933079][ T8132] input: syz0 as /devices/virtual/input/input5 [ 399.162292][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.162306][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.162326][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.409823][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.409839][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.409863][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.541290][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.541508][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.541695][ T8034] bridge_slave_0: entered allmulticast mode [ 399.544509][ T8034] bridge_slave_0: entered promiscuous mode [ 399.752919][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.061936][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.062062][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.062253][ T8034] bridge_slave_1: entered allmulticast mode [ 401.885560][ T8034] bridge_slave_1: entered promiscuous mode [ 401.909320][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.909451][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.910345][ T7904] bridge_slave_0: entered allmulticast mode [ 401.942988][ T7904] bridge_slave_0: entered promiscuous mode [ 403.372242][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.389182][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.389355][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.389604][ T7904] bridge_slave_1: entered allmulticast mode [ 403.392729][ T7904] bridge_slave_1: entered promiscuous mode [ 406.604651][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.614965][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.618274][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.620811][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.622360][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.635456][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.177268][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.233406][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.275657][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.563448][ T8222] loop6: detected capacity change from 0 to 524288000 [ 408.699186][ T5119] Bluetooth: hci0: command tx timeout [ 410.035016][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.842453][ T5119] Bluetooth: hci0: command tx timeout [ 411.610875][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.078558][ T8034] team0: Port device team_slave_0 added [ 412.115502][ T7904] team0: Port device team_slave_0 added [ 412.131386][ T8034] team0: Port device team_slave_1 added [ 412.152528][ T7904] team0: Port device team_slave_1 added [ 412.712759][ T8206] lo speed is unknown, defaulting to 1000 [ 412.813362][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.813378][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.813401][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.857727][ T5119] Bluetooth: hci0: command tx timeout [ 412.915731][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.915748][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.915771][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.923454][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.923469][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.923491][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.935468][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.935483][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.935505][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.675048][ T8034] hsr_slave_0: entered promiscuous mode [ 414.679005][ T8034] hsr_slave_1: entered promiscuous mode [ 414.998214][ T5119] Bluetooth: hci0: command tx timeout [ 415.964603][ T7904] hsr_slave_0: entered promiscuous mode [ 415.966990][ T7904] hsr_slave_1: entered promiscuous mode [ 415.978175][ T7904] debugfs: 'hsr0' already exists in 'hsr' [ 415.978203][ T7904] Cannot create hsr debugfs directory [ 416.628692][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.632531][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.637243][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.666361][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.667035][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.697712][ T5818] Bluetooth: hci3: command tx timeout [ 420.191468][ T8279] lo speed is unknown, defaulting to 1000 [ 420.778823][ T5818] Bluetooth: hci3: command tx timeout [ 421.839368][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 423.053420][ T5818] Bluetooth: hci3: command tx timeout [ 423.156384][ T69] bridge_slave_1: left allmulticast mode [ 423.156412][ T69] bridge_slave_1: left promiscuous mode [ 423.156666][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.239574][ T69] bridge_slave_0: left allmulticast mode [ 424.239601][ T69] bridge_slave_0: left promiscuous mode [ 424.239850][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.292463][ T69] bridge_slave_1: left allmulticast mode [ 424.292493][ T69] bridge_slave_1: left promiscuous mode [ 424.292730][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.381160][ T69] bridge_slave_0: left allmulticast mode [ 424.381190][ T69] bridge_slave_0: left promiscuous mode [ 424.381468][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.442165][ T69] bridge_slave_1: left allmulticast mode [ 424.442194][ T69] bridge_slave_1: left promiscuous mode [ 424.442434][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.509407][ T69] bridge_slave_0: left allmulticast mode [ 424.509435][ T69] bridge_slave_0: left promiscuous mode [ 424.509685][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.088483][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.097675][ T5818] Bluetooth: hci3: command tx timeout [ 426.237432][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.463449][ T69] bond0 (unregistering): Released all slaves [ 429.728456][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.788348][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.810037][ T69] bond0 (unregistering): Released all slaves [ 430.008382][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.088685][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.159694][ T69] bond0 (unregistering): Released all slaves [ 430.571111][ T8034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.597324][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.597477][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.597776][ T8206] bridge_slave_0: entered allmulticast mode [ 431.600456][ T8206] bridge_slave_0: entered promiscuous mode [ 431.655234][ T8034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.706421][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.706555][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.706773][ T8206] bridge_slave_1: entered allmulticast mode [ 431.730434][ T8206] bridge_slave_1: entered promiscuous mode [ 431.750827][ T8034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.942109][ T8366] input: syz0 as /devices/virtual/input/input6 [ 434.932480][ T8034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.784065][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.805949][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.819781][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.821758][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.822464][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.614360][ T8034] kthread_run failed with err -4 [ 437.658526][ T5890] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 437.696843][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.758903][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.707068][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.707123][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.737692][ T5890] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 438.737718][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.737735][ T5890] usb 1-1: Product: syz [ 438.737747][ T5890] usb 1-1: Manufacturer: syz [ 438.737760][ T5890] usb 1-1: SerialNumber: syz [ 438.782780][ T5890] usb 1-1: config 0 descriptor?? [ 438.857776][ T5818] Bluetooth: hci1: command tx timeout [ 439.218158][ T5890] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 440.063657][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.114839][ T5890] usb 1-1: USB disconnect, device number 7 [ 440.340246][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.494648][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.940317][ T5818] Bluetooth: hci1: command tx timeout [ 441.133275][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.465229][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.067602][ T5818] Bluetooth: hci1: command tx timeout [ 444.083863][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.108422][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.362975][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.059853][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.571250][ T8428] binder_alloc: 8425: binder_alloc_buf, no vma [ 445.873983][ T8206] team0: Port device team_slave_0 added [ 446.228263][ T5818] Bluetooth: hci1: command tx timeout [ 446.244649][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 446.280332][ T8206] team0: Port device team_slave_1 added [ 449.482124][ T8383] lo speed is unknown, defaulting to 1000 [ 450.467061][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.467076][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.467100][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.578796][ T69] hsr_slave_0: left promiscuous mode [ 451.597707][ T69] hsr_slave_1: left promiscuous mode [ 451.601020][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.839781][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.977799][ T69] hsr_slave_0: left promiscuous mode [ 451.997770][ T69] hsr_slave_1: left promiscuous mode [ 451.998439][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.998462][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.053196][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.053218][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.189096][ T69] hsr_slave_0: left promiscuous mode [ 452.313298][ T69] hsr_slave_1: left promiscuous mode [ 452.314277][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.489267][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.437931][ T69] veth1_macvtap: left promiscuous mode [ 453.438030][ T69] veth0_macvtap: left promiscuous mode [ 453.439905][ T69] veth1_vlan: left promiscuous mode [ 453.440084][ T69] veth0_vlan: left promiscuous mode [ 457.771328][ T69] team0 (unregistering): Port device team_slave_1 removed [ 458.241620][ T69] team0 (unregistering): Port device team_slave_0 removed [ 463.519825][ T69] team0 (unregistering): Port device team_slave_1 removed [ 463.739426][ T69] team0 (unregistering): Port device team_slave_0 removed [ 465.633290][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.647010][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.648506][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.677367][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.686638][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 466.628377][ T69] team0 (unregistering): Port device team_slave_1 removed [ 466.682806][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.685996][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.687012][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 466.690296][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 466.691398][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.818244][ T69] team0 (unregistering): Port device team_slave_0 removed [ 467.370458][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.370469][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.370483][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.380744][ T9] lo speed is unknown, defaulting to 1000 [ 467.380772][ T9] infiniband syz2: ib_query_port failed (-19) [ 467.750309][ T5119] Bluetooth: hci5: command tx timeout [ 468.698154][ T5119] Bluetooth: hci6: command tx timeout [ 470.643726][ T5119] Bluetooth: hci5: command tx timeout [ 470.825715][ T5119] Bluetooth: hci6: command tx timeout [ 471.562522][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.562668][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.562905][ T8279] bridge_slave_0: entered allmulticast mode [ 471.565543][ T8279] bridge_slave_0: entered promiscuous mode [ 471.622955][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.623079][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.623309][ T8279] bridge_slave_1: entered allmulticast mode [ 471.625036][ T8279] bridge_slave_1: entered promiscuous mode [ 472.296752][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.320666][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.698427][ T5119] Bluetooth: hci5: command tx timeout [ 472.723208][ T8279] team0: Port device team_slave_0 added [ 472.766929][ T8279] team0: Port device team_slave_1 added [ 472.858549][ T5119] Bluetooth: hci6: command tx timeout [ 474.178675][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.178691][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.178715][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.294227][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.294244][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.294268][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.470480][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 474.777802][ T5119] Bluetooth: hci5: command tx timeout [ 474.827872][ T8279] hsr_slave_0: entered promiscuous mode [ 474.845747][ T8279] hsr_slave_1: entered promiscuous mode [ 474.846800][ T8279] debugfs: 'hsr0' already exists in 'hsr' [ 474.846824][ T8279] Cannot create hsr debugfs directory [ 474.895952][ T8383] chnl_net:caif_netlink_parms(): no params data found [ 474.966207][ T5119] Bluetooth: hci6: command tx timeout [ 475.369331][ T8518] chnl_net:caif_netlink_parms(): no params data found [ 475.715614][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 477.968467][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.968597][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.968866][ T8383] bridge_slave_0: entered allmulticast mode [ 478.009593][ T8383] bridge_slave_0: entered promiscuous mode [ 478.099267][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.099436][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.099693][ T8383] bridge_slave_1: entered allmulticast mode [ 478.103510][ T8383] bridge_slave_1: entered promiscuous mode [ 478.248295][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.251058][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.252855][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.254250][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.255115][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.108426][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.108597][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.108796][ T8518] bridge_slave_0: entered allmulticast mode [ 479.118983][ T8518] bridge_slave_0: entered promiscuous mode [ 479.138485][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.152292][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.152431][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.152675][ T8522] bridge_slave_0: entered allmulticast mode [ 479.155814][ T8522] bridge_slave_0: entered promiscuous mode [ 479.227433][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.230586][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.230856][ T8518] bridge_slave_1: entered allmulticast mode [ 479.233962][ T8518] bridge_slave_1: entered promiscuous mode [ 479.238921][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.239334][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.239453][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.239634][ T8522] bridge_slave_1: entered allmulticast mode [ 479.248030][ T8522] bridge_slave_1: entered promiscuous mode [ 480.854603][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.881283][ T8383] team0: Port device team_slave_0 added [ 480.902604][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.910966][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.913232][ T8383] team0: Port device team_slave_1 added [ 480.918795][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.037678][ T5119] Bluetooth: hci0: command tx timeout [ 483.097883][ T5119] Bluetooth: hci0: command tx timeout [ 483.542683][ T8518] team0: Port device team_slave_0 added [ 483.545710][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.545724][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.545748][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.689730][ T8522] team0: Port device team_slave_0 added [ 483.697358][ T8518] team0: Port device team_slave_1 added [ 483.699652][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.699665][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.699688][ T8383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.822162][ T8522] team0: Port device team_slave_1 added [ 485.179229][ T5119] Bluetooth: hci0: command tx timeout [ 486.380081][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.380098][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.380121][ T8518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.558838][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.558854][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.558877][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.612957][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.612979][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.613003][ T8518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.779627][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.779642][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.779663][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.958738][ T8383] hsr_slave_0: entered promiscuous mode [ 486.960046][ T8383] hsr_slave_1: entered promiscuous mode [ 486.960980][ T8383] debugfs: 'hsr0' already exists in 'hsr' [ 486.961003][ T8383] Cannot create hsr debugfs directory [ 487.146311][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.346753][ T5119] Bluetooth: hci0: command tx timeout [ 489.692529][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.754664][ T8518] hsr_slave_0: entered promiscuous mode [ 489.755547][ T8518] hsr_slave_1: entered promiscuous mode [ 489.756121][ T8518] debugfs: 'hsr0' already exists in 'hsr' [ 489.756137][ T8518] Cannot create hsr debugfs directory [ 489.829564][ T8671] pim6reg1: entered promiscuous mode [ 489.829590][ T8671] pim6reg1: entered allmulticast mode [ 489.853652][ T8522] hsr_slave_0: entered promiscuous mode [ 489.854483][ T8522] hsr_slave_1: entered promiscuous mode [ 489.855049][ T8522] debugfs: 'hsr0' already exists in 'hsr' [ 489.855063][ T8522] Cannot create hsr debugfs directory [ 490.263802][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.755662][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.150773][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 494.388663][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.388835][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.389021][ T8612] bridge_slave_0: entered allmulticast mode [ 494.390536][ T8612] bridge_slave_0: entered promiscuous mode [ 494.394176][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.394331][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.394462][ T8612] bridge_slave_1: entered allmulticast mode [ 494.395917][ T8612] bridge_slave_1: entered promiscuous mode [ 495.706312][ T8717] binder: 8716:8717 ioctl c0306201 200000000240 returned -14 [ 495.786141][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.801881][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.003044][ T69] bridge_slave_1: left allmulticast mode [ 496.003072][ T69] bridge_slave_1: left promiscuous mode [ 496.003321][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.079188][ T69] bridge_slave_0: left allmulticast mode [ 496.079219][ T69] bridge_slave_0: left promiscuous mode [ 496.079925][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.163257][ T69] bridge_slave_1: left allmulticast mode [ 496.163285][ T69] bridge_slave_1: left promiscuous mode [ 496.163542][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.230642][ T69] bridge_slave_0: left allmulticast mode [ 496.230671][ T69] bridge_slave_0: left promiscuous mode [ 496.230909][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.303894][ T69] bridge_slave_1: left allmulticast mode [ 496.303914][ T69] bridge_slave_1: left promiscuous mode [ 496.304059][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.390005][ T69] bridge_slave_0: left allmulticast mode [ 496.390034][ T69] bridge_slave_0: left promiscuous mode [ 496.390714][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.490266][ T69] bridge_slave_1: left allmulticast mode [ 496.490295][ T69] bridge_slave_1: left promiscuous mode [ 496.490545][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.548858][ T69] bridge_slave_0: left allmulticast mode [ 496.548878][ T69] bridge_slave_0: left promiscuous mode [ 496.549036][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.617086][ T69] bridge_slave_1: left allmulticast mode [ 496.617116][ T69] bridge_slave_1: left promiscuous mode [ 496.617373][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.689289][ T69] bridge_slave_0: left allmulticast mode [ 496.689319][ T69] bridge_slave_0: left promiscuous mode [ 496.689585][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.763314][ T69] bridge_slave_1: left allmulticast mode [ 496.763344][ T69] bridge_slave_1: left promiscuous mode [ 496.763605][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.089571][ T69] bridge_slave_0: left allmulticast mode [ 497.089600][ T69] bridge_slave_0: left promiscuous mode [ 497.089882][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.789174][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.792407][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.793575][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.795066][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.796193][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.387793][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 498.389080][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.468832][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.540740][ T69] bond0 (unregistering): Released all slaves [ 498.560494][ T9] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 498.560527][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 498.560553][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 498.560580][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 498.560621][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.560643][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.583787][ T8731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.583976][ T8731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.603190][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.609425][ T9] usb 1-1: invalid MIDI in EP 0 [ 498.816205][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.826670][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 498.836378][ T9] usb 1-1: USB disconnect, device number 8 [ 498.938941][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.002801][ T69] bond0 (unregistering): Released all slaves [ 499.898092][ T5119] Bluetooth: hci2: command tx timeout [ 500.698572][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.758923][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.790322][ T69] bond0 (unregistering): Released all slaves [ 500.958487][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.038503][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.120137][ T69] bond0 (unregistering): Released all slaves [ 501.350531][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.429855][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.489750][ T69] bond0 (unregistering): Released all slaves [ 501.505121][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.718473][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.798382][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.869855][ T69] bond0 (unregistering): Released all slaves [ 501.914242][ T8612] team0: Port device team_slave_0 added [ 501.993874][ T5119] Bluetooth: hci2: command tx timeout [ 502.208475][ T8612] team0: Port device team_slave_1 added [ 502.578327][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.578341][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.578361][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.588995][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.589010][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.589034][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.060986][ T5119] Bluetooth: hci2: command tx timeout [ 504.747409][ T8612] hsr_slave_0: entered promiscuous mode [ 504.749601][ T8612] hsr_slave_1: entered promiscuous mode [ 504.755825][ T8612] debugfs: 'hsr0' already exists in 'hsr' [ 504.755851][ T8612] Cannot create hsr debugfs directory [ 506.147819][ T5119] Bluetooth: hci2: command tx timeout [ 506.267722][ T69] hsr_slave_0: left promiscuous mode [ 506.312993][ T69] hsr_slave_1: left promiscuous mode [ 506.314770][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.338829][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.358768][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.398774][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.607931][ T69] hsr_slave_0: left promiscuous mode [ 506.658391][ T69] hsr_slave_1: left promiscuous mode [ 506.659401][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.659424][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.708971][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.708998][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.867950][ T69] hsr_slave_0: left promiscuous mode [ 506.887923][ T69] hsr_slave_1: left promiscuous mode [ 506.888652][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.938720][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.997769][ T69] hsr_slave_0: left promiscuous mode [ 507.037803][ T69] hsr_slave_1: left promiscuous mode [ 507.038550][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.060936][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.108447][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.148605][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.254073][ T69] veth1_macvtap: left promiscuous mode [ 507.254183][ T69] veth0_macvtap: left promiscuous mode [ 507.254385][ T69] veth1_vlan: left promiscuous mode [ 507.254493][ T69] veth0_vlan: left promiscuous mode [ 507.928366][ T69] team0 (unregistering): Port device team_slave_1 removed [ 508.060190][ T69] team0 (unregistering): Port device team_slave_0 removed [ 508.658559][ T69] team0 (unregistering): Port device team_slave_1 removed [ 508.778234][ T69] team0 (unregistering): Port device team_slave_0 removed [ 510.859388][ T69] team0 (unregistering): Port device team_slave_1 removed [ 511.038482][ T69] team0 (unregistering): Port device team_slave_0 removed [ 513.858935][ T69] team0 (unregistering): Port device team_slave_1 removed [ 513.989223][ T69] team0 (unregistering): Port device team_slave_0 removed [ 514.608427][ T69] team0 (unregistering): Port device team_slave_1 removed [ 514.728436][ T69] team0 (unregistering): Port device team_slave_0 removed [ 515.309231][ T69] team0 (unregistering): Port device team_slave_1 removed [ 515.438406][ T69] team0 (unregistering): Port device team_slave_0 removed [ 516.662117][ T8522] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 517.442604][ T8522] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 517.561170][ T8522] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 517.606032][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 517.784124][ T8522] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 517.920400][ T8791] netlink: 96 bytes leftover after parsing attributes in process `syz.0.757'. [ 518.073815][ T8801] kernel profiling enabled (shift: 8) [ 518.318469][ T8813] overlayfs: missing 'lowerdir' [ 518.542159][ T8518] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 518.594551][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.594739][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.594942][ T8727] bridge_slave_0: entered allmulticast mode [ 518.620207][ T8727] bridge_slave_0: entered promiscuous mode [ 518.667727][ T8518] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 518.705221][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.705355][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.705595][ T8727] bridge_slave_1: entered allmulticast mode [ 518.719734][ T8727] bridge_slave_1: entered promiscuous mode [ 518.728783][ T8518] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 519.240855][ T8518] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 519.528076][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.537095][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.633570][ T8727] team0: Port device team_slave_0 added [ 521.673428][ T8727] team0: Port device team_slave_1 added [ 521.677006][ T8612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.713073][ T8612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.981329][ T8612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 523.100998][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 524.160894][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.160904][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.160917][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.162165][ T8612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 524.307488][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.307505][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.307529][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.419342][ T8727] hsr_slave_0: entered promiscuous mode [ 526.420816][ T8727] hsr_slave_1: entered promiscuous mode [ 527.043994][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.085718][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.115883][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.119249][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 527.120065][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.633026][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 527.654566][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 527.666974][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 527.675976][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 527.678992][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.177791][ T5818] Bluetooth: hci1: command tx timeout [ 529.820339][ T5818] Bluetooth: hci3: command tx timeout [ 531.274681][ T5818] Bluetooth: hci1: command tx timeout [ 531.900388][ T5818] Bluetooth: hci3: command tx timeout [ 531.907143][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.983607][ T8876] chnl_net:caif_netlink_parms(): no params data found [ 533.367182][ T5818] Bluetooth: hci1: command tx timeout [ 533.561735][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.894363][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.920398][ T7756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.798572][ T5818] Bluetooth: hci3: command tx timeout [ 535.047792][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.047933][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.048169][ T8876] bridge_slave_0: entered allmulticast mode [ 535.050872][ T8876] bridge_slave_0: entered promiscuous mode [ 535.116523][ T8887] chnl_net:caif_netlink_parms(): no params data found [ 535.133481][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.133657][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.133859][ T8876] bridge_slave_1: entered allmulticast mode [ 535.136503][ T8876] bridge_slave_1: entered promiscuous mode [ 535.173113][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.173908][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.418478][ T5818] Bluetooth: hci1: command tx timeout [ 535.490550][ T8727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 535.634004][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.634936][ T8727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 535.691041][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.691116][ T8727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 535.878872][ T8727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 536.216466][ T8876] team0: Port device team_slave_0 added [ 536.332059][ T8876] team0: Port device team_slave_1 added [ 536.374014][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.374240][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.374420][ T8887] bridge_slave_0: entered allmulticast mode [ 536.376834][ T8887] bridge_slave_0: entered promiscuous mode [ 536.483139][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.483289][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.483496][ T8887] bridge_slave_1: entered allmulticast mode [ 536.486294][ T8887] bridge_slave_1: entered promiscuous mode [ 536.857971][ T5818] Bluetooth: hci3: command tx timeout [ 536.898815][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.898831][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.898853][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.154714][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.154730][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.154756][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.238977][ T8887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.829787][ T8887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.446833][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.474678][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.477196][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.496757][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.497926][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.429366][ T8887] team0: Port device team_slave_0 added [ 539.767533][ T8887] team0: Port device team_slave_1 added [ 539.780262][ T8876] hsr_slave_0: entered promiscuous mode [ 539.781593][ T8876] hsr_slave_1: entered promiscuous mode [ 539.782484][ T8876] debugfs: 'hsr0' already exists in 'hsr' [ 539.782506][ T8876] Cannot create hsr debugfs directory [ 542.974280][ T5818] Bluetooth: hci0: command tx timeout [ 543.314592][ T9021] netlink: 96 bytes leftover after parsing attributes in process `syz.0.791'. [ 544.740126][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.740137][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.740150][ T8887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.765994][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.766010][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.766036][ T8887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.018067][ T5818] Bluetooth: hci0: command tx timeout [ 545.120726][ T8887] hsr_slave_0: entered promiscuous mode [ 545.121554][ T8887] hsr_slave_1: entered promiscuous mode [ 545.122194][ T8887] debugfs: 'hsr0' already exists in 'hsr' [ 545.122216][ T8887] Cannot create hsr debugfs directory [ 546.922817][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.029336][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.029931][ T9000] chnl_net:caif_netlink_parms(): no params data found [ 547.116472][ T5818] Bluetooth: hci0: command tx timeout [ 548.600180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.600306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.653610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.653755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.822597][ T69] bridge_slave_1: left allmulticast mode [ 548.822618][ T69] bridge_slave_1: left promiscuous mode [ 548.822776][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.880451][ T69] bridge_slave_0: left allmulticast mode [ 548.880480][ T69] bridge_slave_0: left promiscuous mode [ 548.880733][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.950265][ T69] bridge_slave_1: left allmulticast mode [ 548.950285][ T69] bridge_slave_1: left promiscuous mode [ 548.950462][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.029735][ T69] bridge_slave_0: left allmulticast mode [ 549.029763][ T69] bridge_slave_0: left promiscuous mode [ 549.030007][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.100856][ T69] bridge_slave_1: left allmulticast mode [ 549.100877][ T69] bridge_slave_1: left promiscuous mode [ 549.101030][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.159258][ T69] bridge_slave_0: left allmulticast mode [ 549.159286][ T69] bridge_slave_0: left promiscuous mode [ 549.159532][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.178690][ T5818] Bluetooth: hci0: command tx timeout [ 549.524358][ T9055] loop7: detected capacity change from 0 to 7 [ 549.528478][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.528592][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.532260][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.532290][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.533969][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.534001][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.534241][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.534266][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.534747][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.534774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.535038][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.535062][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.535284][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.535308][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.535410][ T9055] ldm_validate_partition_table(): Disk read failed. [ 549.535599][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.535630][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.535855][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.535877][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.537504][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.537531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 549.538458][ T9055] Dev loop7: unable to read RDB block 0 [ 549.539869][ T9055] loop7: unable to read partition table [ 549.540095][ T9055] loop7: partition table beyond EOD, truncated [ 549.540136][ T9055] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 551.369781][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.428386][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.470559][ T69] bond0 (unregistering): Released all slaves [ 551.818512][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.878399][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.920598][ T69] bond0 (unregistering): Released all slaves [ 552.208273][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.268191][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.330855][ T69] bond0 (unregistering): Released all slaves [ 552.358379][ T9061] tipc: Started in network mode [ 552.358400][ T9061] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 552.359440][ T9061] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 552.361145][ T9061] tipc: Enabled bearer , priority 10 [ 552.833722][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.834290][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.834478][ T9000] bridge_slave_0: entered allmulticast mode [ 552.836168][ T9000] bridge_slave_0: entered promiscuous mode [ 552.890827][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.891315][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.893497][ T9000] bridge_slave_1: entered allmulticast mode [ 552.900454][ T9000] bridge_slave_1: entered promiscuous mode [ 553.297181][ T9000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.319619][ T9000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.420329][ T994] tipc: Node number set to 1 [ 553.647863][ T69] hsr_slave_0: left promiscuous mode [ 553.667773][ T69] hsr_slave_1: left promiscuous mode [ 553.668737][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.718876][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.057874][ T69] hsr_slave_0: left promiscuous mode [ 555.587691][ T69] hsr_slave_1: left promiscuous mode [ 555.634695][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.910602][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.087753][ T69] hsr_slave_0: left promiscuous mode [ 556.127955][ T69] hsr_slave_1: left promiscuous mode [ 556.129198][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.158381][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.718217][ T69] team0 (unregistering): Port device team_slave_1 removed [ 556.839180][ T69] team0 (unregistering): Port device team_slave_0 removed [ 557.461218][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.464194][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.467255][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.489467][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.490248][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.992077][ T69] team0 (unregistering): Port device team_slave_1 removed [ 558.098560][ T69] team0 (unregistering): Port device team_slave_0 removed [ 559.109590][ T69] team0 (unregistering): Port device team_slave_1 removed [ 559.248666][ T69] team0 (unregistering): Port device team_slave_0 removed [ 559.497831][ T5818] Bluetooth: hci5: command tx timeout [ 559.964120][ T9000] team0: Port device team_slave_0 added [ 560.005619][ T9000] team0: Port device team_slave_1 added [ 560.341073][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.341089][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.341114][ T9000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.618636][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.618647][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.618661][ T9000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.902243][ T9000] hsr_slave_0: entered promiscuous mode [ 560.903572][ T9000] hsr_slave_1: entered promiscuous mode [ 560.904489][ T9000] debugfs: 'hsr0' already exists in 'hsr' [ 560.904511][ T9000] Cannot create hsr debugfs directory [ 561.935066][ T5818] Bluetooth: hci5: command tx timeout [ 562.705543][ T8876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 562.944614][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.486294][ T8876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 565.211322][ T5818] Bluetooth: hci5: command tx timeout [ 565.275089][ T8876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 565.373870][ T8876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.991517][ T8887] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 566.095856][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 566.113926][ T8887] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 566.500416][ T8887] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 566.573916][ T8887] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.177781][ T9128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.259012][ T5818] Bluetooth: hci5: command tx timeout [ 568.519149][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.519357][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.519613][ T9080] bridge_slave_0: entered allmulticast mode [ 568.522822][ T9080] bridge_slave_0: entered promiscuous mode [ 568.531546][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.532468][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.532712][ T9080] bridge_slave_1: entered allmulticast mode [ 568.535827][ T9080] bridge_slave_1: entered promiscuous mode [ 569.150123][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 569.150321][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 569.196511][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.333445][ T9156] ip6gretap1: entered allmulticast mode [ 569.887531][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.114618][ T9080] team0: Port device team_slave_0 added [ 571.184537][ T9080] team0: Port device team_slave_1 added [ 571.467987][ T9166] sit0: entered allmulticast mode [ 571.478790][ T9167] input: syz0 as /devices/virtual/input/input10 [ 571.492383][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.492399][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.492423][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.593351][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.593376][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.593402][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.783205][ T9000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 571.973247][ T9000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 572.120080][ T9080] hsr_slave_0: entered promiscuous mode [ 572.121412][ T9080] hsr_slave_1: entered promiscuous mode [ 572.122294][ T9080] debugfs: 'hsr0' already exists in 'hsr' [ 572.122317][ T9080] Cannot create hsr debugfs directory [ 572.124089][ T9000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 572.188493][ T9000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.383986][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.816825][ T8876] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.876994][ T37] audit: type=1326 audit(2000000106.969:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.882102][ T37] audit: type=1326 audit(2000000106.969:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.883822][ T37] audit: type=1326 audit(2000000106.979:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.884833][ T37] audit: type=1326 audit(2000000106.979:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.884875][ T37] audit: type=1326 audit(2000000106.979:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.887333][ T37] audit: type=1326 audit(2000000106.979:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.887378][ T37] audit: type=1326 audit(2000000106.979:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.891491][ T37] audit: type=1326 audit(2000000106.979:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.893176][ T37] audit: type=1326 audit(2000000106.989:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.894994][ T37] audit: type=1326 audit(2000000106.989:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b857eec9 code=0x7ffc0000 [ 574.955067][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.959581][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.959772][ T7756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.029331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.029889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.186290][ T8887] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.258927][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.259135][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.341648][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.341789][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.386358][ T69] bridge_slave_1: left allmulticast mode [ 575.386376][ T69] bridge_slave_1: left promiscuous mode [ 575.386520][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.459150][ T69] bridge_slave_0: left allmulticast mode [ 575.459170][ T69] bridge_slave_0: left promiscuous mode [ 575.459318][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.530422][ T69] bridge_slave_1: left allmulticast mode [ 575.530442][ T69] bridge_slave_1: left promiscuous mode [ 575.530588][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.598752][ T69] bridge_slave_0: left allmulticast mode [ 575.598771][ T69] bridge_slave_0: left promiscuous mode [ 575.598933][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.398555][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.478562][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.521263][ T69] bond0 (unregistering): Released all slaves [ 581.158208][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.238367][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.281252][ T69] bond0 (unregistering): Released all slaves [ 581.522475][ T9221] lo: Caught tx_queue_len zero misconfig [ 581.676178][ T9222] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 581.918709][ T69] hsr_slave_0: left promiscuous mode [ 581.957874][ T69] hsr_slave_1: left promiscuous mode [ 581.958884][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.988774][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.047772][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 582.147752][ T69] hsr_slave_0: left promiscuous mode [ 582.187833][ T69] hsr_slave_1: left promiscuous mode [ 582.188769][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.206061][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.206104][ T44] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 582.206117][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.208943][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.253525][ T44] usb 1-1: config 0 descriptor?? [ 583.160190][ T69] team0 (unregistering): Port device team_slave_1 removed [ 583.320350][ T69] team0 (unregistering): Port device team_slave_0 removed [ 584.839544][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 584.839669][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 584.880120][ T44] usb 1-1: USB disconnect, device number 9 [ 587.208315][ T69] team0 (unregistering): Port device team_slave_1 removed [ 587.439142][ T69] team0 (unregistering): Port device team_slave_0 removed [ 587.690206][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.694884][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.696100][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.708098][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.715491][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.783752][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 587.792316][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 587.795887][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 587.801338][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 587.802449][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 589.610339][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.822622][ T5119] Bluetooth: hci6: command tx timeout [ 589.822632][ T5818] Bluetooth: hci2: command tx timeout [ 590.768486][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.248295][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.250991][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.365206][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.365372][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.493560][ T9080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.561663][ T9080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.610782][ T9080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 591.703520][ T9080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.810435][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 591.902924][ T5119] Bluetooth: hci6: command tx timeout [ 591.902955][ T5119] Bluetooth: hci2: command tx timeout [ 592.001850][ T9247] chnl_net:caif_netlink_parms(): no params data found [ 592.637134][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.637345][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.637865][ T9245] bridge_slave_0: entered allmulticast mode [ 592.640430][ T9245] bridge_slave_0: entered promiscuous mode [ 592.787242][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.788358][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.788609][ T9245] bridge_slave_1: entered allmulticast mode [ 592.791140][ T9245] bridge_slave_1: entered promiscuous mode [ 593.042871][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.043006][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.043191][ T9247] bridge_slave_0: entered allmulticast mode [ 593.046252][ T9247] bridge_slave_0: entered promiscuous mode [ 593.166369][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.166503][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.166732][ T9247] bridge_slave_1: entered allmulticast mode [ 593.170093][ T9247] bridge_slave_1: entered promiscuous mode [ 593.182152][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.296258][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.330192][ T5818] Bluetooth: hci2: command tx timeout [ 594.330229][ T5818] Bluetooth: hci6: command tx timeout [ 594.594998][ T9247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.813375][ T9247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.816213][ T9245] team0: Port device team_slave_0 added [ 594.921842][ T9245] team0: Port device team_slave_1 added [ 595.283489][ T9247] team0: Port device team_slave_0 added [ 595.811622][ T9247] team0: Port device team_slave_1 added [ 595.814634][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.814646][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.814660][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.945066][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.945082][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.945106][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.244351][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.245531][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.245545][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.245569][ T9247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.253631][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.253645][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.253669][ T9247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.387874][ T5119] Bluetooth: hci6: command tx timeout [ 596.387907][ T5119] Bluetooth: hci2: command tx timeout [ 596.884211][ T9245] hsr_slave_0: entered promiscuous mode [ 596.885815][ T9245] hsr_slave_1: entered promiscuous mode [ 597.161528][ T9247] hsr_slave_0: entered promiscuous mode [ 597.162351][ T9247] hsr_slave_1: entered promiscuous mode [ 597.163001][ T9247] debugfs: 'hsr0' already exists in 'hsr' [ 597.163015][ T9247] Cannot create hsr debugfs directory [ 598.649159][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.567473][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 599.573442][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 599.578437][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 599.581007][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 599.581769][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.249730][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.720765][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.720993][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.294342][ T9358] fuse: Bad value for 'fd' [ 601.657800][ T5818] Bluetooth: hci0: command tx timeout [ 602.091699][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.091911][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.499925][ T9152] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 602.657786][ T9152] usb 1-1: Using ep0 maxpacket: 16 [ 602.663349][ T9152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.663374][ T9152] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.679074][ T9152] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 602.679103][ T9152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.679121][ T9152] usb 1-1: Product: syz [ 602.679135][ T9152] usb 1-1: Manufacturer: syz [ 602.679147][ T9152] usb 1-1: SerialNumber: syz [ 602.690286][ T9152] usb 1-1: config 0 descriptor?? [ 602.830216][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 603.090990][ T69] bridge_slave_1: left allmulticast mode [ 603.091018][ T69] bridge_slave_1: left promiscuous mode [ 603.091242][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.158542][ T69] bridge_slave_0: left allmulticast mode [ 603.158563][ T69] bridge_slave_0: left promiscuous mode [ 603.158723][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.230161][ T69] bridge_slave_1: left allmulticast mode [ 603.230182][ T69] bridge_slave_1: left promiscuous mode [ 603.230339][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.318589][ T69] bridge_slave_0: left allmulticast mode [ 603.318610][ T69] bridge_slave_0: left promiscuous mode [ 603.318776][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.738437][ T5818] Bluetooth: hci0: command tx timeout [ 604.868534][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.928489][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.954552][ T69] bond0 (unregistering): Released all slaves [ 605.292200][ T5891] usb 1-1: USB disconnect, device number 10 [ 605.818070][ T5818] Bluetooth: hci0: command tx timeout [ 606.418556][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.498549][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.528697][ T69] bond0 (unregistering): Released all slaves [ 607.212127][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.212272][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.212458][ T9339] bridge_slave_0: entered allmulticast mode [ 607.214226][ T9339] bridge_slave_0: entered promiscuous mode [ 607.244660][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.244825][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.245061][ T9339] bridge_slave_1: entered allmulticast mode [ 607.271238][ T9339] bridge_slave_1: entered promiscuous mode [ 607.527724][ T69] hsr_slave_0: left promiscuous mode [ 607.567690][ T69] hsr_slave_1: left promiscuous mode [ 607.568437][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.608351][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.807680][ T69] hsr_slave_0: left promiscuous mode [ 607.847734][ T69] hsr_slave_1: left promiscuous mode [ 607.848398][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.898110][ T5818] Bluetooth: hci0: command tx timeout [ 607.899514][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.138183][ T69] team0 (unregistering): Port device team_slave_1 removed [ 609.349479][ T69] team0 (unregistering): Port device team_slave_0 removed [ 613.428279][ T69] team0 (unregistering): Port device team_slave_1 removed [ 613.550038][ T69] team0 (unregistering): Port device team_slave_0 removed [ 615.636274][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.651444][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.936459][ T9339] team0: Port device team_slave_0 added [ 615.941560][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.954766][ T9339] team0: Port device team_slave_1 added [ 616.295500][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.295516][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.295539][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.341601][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.341617][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.341640][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.704891][ T9339] hsr_slave_0: entered promiscuous mode [ 617.706203][ T9339] hsr_slave_1: entered promiscuous mode [ 617.707184][ T9339] debugfs: 'hsr0' already exists in 'hsr' [ 617.707207][ T9339] Cannot create hsr debugfs directory [ 617.913373][ T9245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 618.056457][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 618.066582][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.073490][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 618.105043][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 618.115109][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.370040][ T9245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 618.500109][ T9245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 618.600474][ T9245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 618.973681][ T9437] tipc: Enabled bearer , priority 0 [ 619.014142][ T9438] syzkaller0: entered promiscuous mode [ 619.014170][ T9438] syzkaller0: entered allmulticast mode [ 619.041607][ T9247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 619.083829][ T9435] tipc: Resetting bearer [ 619.085651][ T9247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 619.148294][ T9433] tipc: Resetting bearer [ 619.278408][ T9433] tipc: Disabling bearer [ 619.418281][ T9247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 619.464302][ T9247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 620.460230][ T5818] Bluetooth: hci1: command tx timeout [ 622.541755][ T5119] Bluetooth: hci1: command tx timeout [ 624.311992][ T9480] syzkaller0: entered promiscuous mode [ 624.312017][ T9480] syzkaller0: entered allmulticast mode [ 624.382985][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.617714][ T5119] Bluetooth: hci1: command tx timeout [ 624.660501][ T9427] chnl_net:caif_netlink_parms(): no params data found [ 626.566797][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.567306][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.582740][ T9427] bridge_slave_0: entered allmulticast mode [ 626.585724][ T9427] bridge_slave_0: entered promiscuous mode [ 626.651058][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.651206][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.651392][ T9427] bridge_slave_1: entered allmulticast mode [ 626.654897][ T9427] bridge_slave_1: entered promiscuous mode [ 626.656864][ T9339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 626.710158][ T5119] Bluetooth: hci1: command tx timeout [ 626.798460][ T9339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.847487][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.969767][ T9339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 627.031113][ T9427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.031567][ T9339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 627.138719][ T9427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.442678][ T9427] team0: Port device team_slave_0 added [ 627.463077][ T9427] team0: Port device team_slave_1 added [ 627.619033][ T69] bridge_slave_1: left allmulticast mode [ 627.619063][ T69] bridge_slave_1: left promiscuous mode [ 627.619329][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.700282][ T69] bridge_slave_0: left allmulticast mode [ 627.700302][ T69] bridge_slave_0: left promiscuous mode [ 627.700450][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.761415][ T69] bridge_slave_1: left allmulticast mode [ 627.761436][ T69] bridge_slave_1: left promiscuous mode [ 627.761584][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.819373][ T69] bridge_slave_0: left allmulticast mode [ 627.819402][ T69] bridge_slave_0: left promiscuous mode [ 627.819625][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.429053][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.508758][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.554689][ T69] bond0 (unregistering): Released all slaves [ 632.028396][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.088658][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.121809][ T69] bond0 (unregistering): Released all slaves [ 632.293740][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.303332][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.303347][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.303372][ T9427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.654225][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.654242][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.654265][ T9427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.690319][ T9247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.695027][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.695261][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.896746][ T69] hsr_slave_0: left promiscuous mode [ 632.931632][ T69] hsr_slave_1: left promiscuous mode [ 632.933541][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.968282][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.157938][ T69] hsr_slave_0: left promiscuous mode [ 633.178002][ T69] hsr_slave_1: left promiscuous mode [ 633.179960][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.218762][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.528450][ T69] team0 (unregistering): Port device team_slave_1 removed [ 634.759038][ T69] team0 (unregistering): Port device team_slave_0 removed [ 637.578594][ T69] team0 (unregistering): Port device team_slave_1 removed [ 637.788191][ T69] team0 (unregistering): Port device team_slave_0 removed [ 639.881434][ T9559] syzkaller0: entered promiscuous mode [ 639.881460][ T9559] syzkaller0: entered allmulticast mode [ 639.992077][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.992286][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.351585][ T9427] hsr_slave_0: entered promiscuous mode [ 640.364733][ T9427] hsr_slave_1: entered promiscuous mode [ 640.366816][ T9427] debugfs: 'hsr0' already exists in 'hsr' [ 640.366841][ T9427] Cannot create hsr debugfs directory [ 640.572142][ T9247] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.975181][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.981155][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.063009][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.067384][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.206606][ T9610] capability: warning: `syz.0.891' uses deprecated v2 capabilities in a way that may be insecure [ 643.266095][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.524274][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.576896][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.739258][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.739399][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.777415][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.777858][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.385900][ T9247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.774087][ T9245] veth0_vlan: entered promiscuous mode [ 644.780125][ T9661] [ 644.780136][ T9661] ============================= [ 644.780143][ T9661] WARNING: suspicious RCU usage [ 644.780165][ T9661] syzkaller #0 Not tainted [ 644.780175][ T9661] ----------------------------- [ 644.780181][ T9661] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 644.780194][ T9661] [ 644.780194][ T9661] other info that might help us debug this: [ 644.780194][ T9661] [ 644.780201][ T9661] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 644.780201][ T9661] rcu_scheduler_active = 2, debug_locks = 1 [ 644.780214][ T9661] 1 lock held by syz.0.893/9661: [ 644.780225][ T9661] #0: ffffffff8d7aa6e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 644.780285][ T9661] [ 644.780285][ T9661] stack backtrace: [ 644.780303][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.0.893 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 644.780325][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.780343][ T9661] Call Trace: [ 644.780354][ T9661] [ 644.780363][ T9661] dump_stack_lvl+0x189/0x250 [ 644.780391][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.780418][ T9661] ? __pfx__printk+0x10/0x10 [ 644.780454][ T9661] lockdep_rcu_suspicious+0x140/0x1d0 [ 644.780488][ T9661] get_callchain_entry+0x2b6/0x3c0 [ 644.780515][ T9661] get_perf_callchain+0xb3/0x6f0 [ 644.780544][ T9661] ? __pfx_get_perf_callchain+0x10/0x10 [ 644.780568][ T9661] ? futex_unqueue+0x22/0x240 [ 644.780589][ T9661] ? futex_unqueue+0x22/0x240 [ 644.780608][ T9661] ? futex_unqueue+0x22/0x240 [ 644.780629][ T9661] ? futex_unqueue+0x211/0x240 [ 644.780651][ T9661] __bpf_get_stack+0x3fa/0xa60 [ 644.780681][ T9661] ? __pfx___bpf_get_stack+0x10/0x10 [ 644.780715][ T9661] bpf_get_stack+0x33/0x50 [ 644.780737][ T9661] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 644.780758][ T9661] bpf_get_stack_raw_tp+0x1a9/0x220 [ 644.780787][ T9661] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 644.780805][ T9661] bpf_prog_run_pin_on_cpu+0x143/0x470 [ 644.780833][ T9661] bpf_prog_test_run_syscall+0x312/0x4b0 [ 644.780856][ T9661] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 644.780876][ T9661] ? __fget_files+0x2a/0x420 [ 644.780906][ T9661] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 644.780928][ T9661] bpf_prog_test_run+0x2ca/0x340 [ 644.780958][ T9661] __sys_bpf+0x562/0x860 [ 644.780986][ T9661] ? __pfx___sys_bpf+0x10/0x10 [ 644.781031][ T9661] ? rcu_is_watching+0x15/0xb0 [ 644.781067][ T9661] __x64_sys_bpf+0x7c/0x90 [ 644.781091][ T9661] do_syscall_64+0xfa/0xfa0 [ 644.781110][ T9661] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.781130][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.781155][ T9661] ? clear_bhb_loop+0x60/0xb0 [ 644.781177][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.781195][ T9661] RIP: 0033:0x7ff8b857eec9 [ 644.781212][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.781234][ T9661] RSP: 002b:00007ff8b67e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 644.781252][ T9661] RAX: ffffffffffffffda RBX: 00007ff8b87d5fa0 RCX: 00007ff8b857eec9 [ 644.781267][ T9661] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 644.781279][ T9661] RBP: 00007ff8b8601f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.781291][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.781303][ T9661] R13: 00007ff8b87d6038 R14: 00007ff8b87d5fa0 R15: 00007ffd1ab8bec8 [ 644.781337][ T9661] [ 645.076103][ T9245] veth1_vlan: entered promiscuous mode [ 645.101433][ T9427] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 645.253501][ T9427] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.365278][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.441401][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.733330][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.996009][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.337878][ T43] bridge_slave_1: left allmulticast mode [ 648.337912][ T43] bridge_slave_1: left promiscuous mode [ 648.338184][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.419278][ T43] bridge_slave_0: left allmulticast mode [ 648.419305][ T43] bridge_slave_0: left promiscuous mode [ 648.419556][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.278982][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.358465][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.380136][ T43] bond0 (unregistering): Released all slaves [ 650.517909][ T43] tipc: Disabling bearer [ 650.518093][ T43] tipc: Left network mode [ 651.667686][ T43] hsr_slave_0: left promiscuous mode [ 651.710218][ T43] hsr_slave_1: left promiscuous mode [ 651.711110][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.711134][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.759979][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.760006][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.861925][ T43] veth1_macvtap: left promiscuous mode [ 651.862026][ T43] veth0_macvtap: left promiscuous mode [ 651.862263][ T43] veth1_vlan: left promiscuous mode [ 651.862424][ T43] veth0_vlan: left promiscuous mode [ 654.058770][ T43] team0 (unregistering): Port device team_slave_1 removed [ 654.278230][ T43] team0 (unregistering): Port device team_slave_0 removed