last executing test programs: 10m27.905343271s ago: executing program 4 (id=17): bind$x25(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x55) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x22, 0x4, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 10m26.316900756s ago: executing program 4 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x68f, @remote, 0x13}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="14", 0x1}], 0x1}}], 0x1, 0x24000045) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2, 0xe, 0x5}, 0x10) 10m25.531160163s ago: executing program 4 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 10m24.985765707s ago: executing program 4 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) 10m22.06632716s ago: executing program 4 (id=29): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) getpid() 10m17.355006374s ago: executing program 4 (id=34): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd25, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffc00}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0xfffffffb}]}}]}, 0x5c}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x34, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0xf}, @mdlm_detail={0x4, 0x24, 0x13, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 10m17.235436118s ago: executing program 2 (id=35): sendmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 10m16.406004379s ago: executing program 2 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f00000000c0), 0x2a, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000800000000"], 0xb8}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, 0x0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) 10m14.791706376s ago: executing program 2 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0103000000000000000000000000140000001100010010000000000000000000000a"], 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x4140) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x3f, 0x890, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4008800) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10048095, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000211}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) splice(r0, 0x0, r5, 0x0, 0xc, 0x0) write(r3, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a310000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) 10m14.337715218s ago: executing program 2 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$', @ANYRES16=r4, @ANYBLOB="6d932bbd7000000000000100000008"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000894) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x6, r0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) 10m11.261535102s ago: executing program 2 (id=40): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 10m7.964993247s ago: executing program 2 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x14, 0xa, 0x6, 0x801, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(r6, 0x0, 0x0) 10m0.042315947s ago: executing program 32 (id=34): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd25, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffc00}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0xfffffffb}]}}]}, 0x5c}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x34, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0xf}, @mdlm_detail={0x4, 0x24, 0x13, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 9m51.656700178s ago: executing program 33 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x14, 0xa, 0x6, 0x801, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(r6, 0x0, 0x0) 9m31.127658567s ago: executing program 1 (id=109): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) 9m30.057234389s ago: executing program 1 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000100)={{r0}, 0x5, &(0x7f0000000040)=[0x1, 0x40, 0x10000, 0x5, 0xe62], 0x9e0, 0xd}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r7, &(0x7f0000000000)='.\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r9, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x9}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xc0, 0x0, 0x8}]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x3a) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x68, r10, 0x101, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x9080) 9m25.605950346s ago: executing program 1 (id=118): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) 9m24.20905575s ago: executing program 1 (id=122): r0 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000) 9m24.042911379s ago: executing program 1 (id=124): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f00000001c0), 0x4) 9m22.803164963s ago: executing program 1 (id=128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000180001000000200000000000021400000000000a0000000005001b0002000000"], 0x24}}, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000002240)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000"], 0xd0}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 9m7.551110358s ago: executing program 34 (id=128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000180001000000200000000000021400000000000a0000000005001b0002000000"], 0x24}}, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000002240)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000"], 0xd0}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 3m54.297321341s ago: executing program 3 (id=615): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 3m51.035192851s ago: executing program 3 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3m49.769329073s ago: executing program 3 (id=621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) sendfile(r2, r2, 0x0, 0x20000023896) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x38}}, 0x20000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008891, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x1000000000) 3m48.084477201s ago: executing program 3 (id=622): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x4000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 3m46.481354463s ago: executing program 3 (id=623): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x301, 0x200, 0x4, 0x6}, 'syz0\x00', 0x4c}) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m44.565384362s ago: executing program 3 (id=626): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) socket(0x8, 0x1, 0x7) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000000380)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 3m28.539829882s ago: executing program 35 (id=626): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) socket(0x8, 0x1, 0x7) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000000380)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 12.442480556s ago: executing program 6 (id=1048): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 11.181444657s ago: executing program 0 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) socket$inet(0x2, 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000000380), 0xa66f1f68c3106312, 0x0) 11.027297636s ago: executing program 0 (id=1054): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000340)=""/243, 0xf3, 0x12000, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) 9.350251346s ago: executing program 6 (id=1056): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r4}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x549c, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f00000003c0)=[0x6000, 0x8], 0x2) 9.314180817s ago: executing program 0 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000001c0)=0x7, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={r3, &(0x7f0000001580), &(0x7f0000001640)=@udp6=r4, 0x2}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x5) dup3(0xffffffffffffffff, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@remote, r7}, 0x14) prctl$PR_GET_IO_FLUSHER(0x42) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000100)) 7.979295087s ago: executing program 0 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 7.836740659s ago: executing program 6 (id=1060): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) socketpair(0x1, 0x3, 0x2, &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 6.339312975s ago: executing program 6 (id=1061): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r2, 0x7, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x402, 0x7fff800000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x822b01) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.097087597s ago: executing program 5 (id=1062): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.089606045s ago: executing program 5 (id=1063): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40010) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfc, 0x2, 0x0, @empty, @broadcast, {[@end, @noop]}}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x2400, 0xfffffffe}}}}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0xfffffffe}}}}}}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.083212123s ago: executing program 0 (id=1064): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 3.99693479s ago: executing program 6 (id=1065): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000340)=""/243, 0xf3, 0x12000, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) 3.839676087s ago: executing program 5 (id=1066): write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) 3.502174033s ago: executing program 0 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000001c0)=0x7, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={r3, &(0x7f0000001580), &(0x7f0000001640)=@udp6=r4, 0x2}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x5) dup3(0xffffffffffffffff, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@remote, r7}, 0x14) prctl$PR_GET_IO_FLUSHER(0x42) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) getitimer(0x2, &(0x7f0000000100)) 2.555634337s ago: executing program 6 (id=1068): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r4}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x549c, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f00000003c0)=[0x6000, 0x8], 0x2) 1.721074786s ago: executing program 5 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.219662184s ago: executing program 5 (id=1070): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) socketpair(0x1, 0x3, 0x2, &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 0s ago: executing program 5 (id=1071): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x10}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @multicast1}, &(0x7f0000000040)=0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T1918] bridge_slave_1: left promiscuous mode [ 238.761754][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.869191][ T1918] bridge_slave_0: left allmulticast mode [ 238.869214][ T1918] bridge_slave_0: left promiscuous mode [ 238.869398][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.973214][ T1918] bridge_slave_1: left allmulticast mode [ 238.973237][ T1918] bridge_slave_1: left promiscuous mode [ 238.973415][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.249628][ T1918] bridge_slave_0: left allmulticast mode [ 239.249657][ T1918] bridge_slave_0: left promiscuous mode [ 239.249914][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.403575][ T6705] input: syz0 as /devices/virtual/input/input7 [ 240.227626][ T5991] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 240.367652][ T5991] usb 4-1: device descriptor read/64, error -71 [ 240.607616][ T5991] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 240.737618][ T5991] usb 4-1: device descriptor read/64, error -71 [ 240.852476][ T5991] usb usb4-port1: attempt power cycle [ 242.088375][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.137734][ T5991] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 242.158557][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.200382][ T1918] bond0 (unregistering): Released all slaves [ 243.264414][ T5991] usb 4-1: device descriptor read/8, error -71 [ 244.370598][ T6717] Zero length message leads to an empty skb [ 244.648469][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.821800][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.020266][ T1918] bond0 (unregistering): Released all slaves [ 247.435872][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.888401][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.826596][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.449479][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.492505][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.513577][ T1918] bond0 (unregistering): Released all slaves [ 249.678506][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.817733][ T5878] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 249.949991][ T5878] usb 4-1: device descriptor read/64, error -71 [ 250.102362][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.396108][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.100139][ T5878] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 251.330830][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.517603][ T5878] usb 4-1: device descriptor read/64, error -71 [ 251.569981][ T6516] hsr_slave_0: entered promiscuous mode [ 251.571352][ T6516] hsr_slave_1: entered promiscuous mode [ 251.572385][ T6516] debugfs: 'hsr0' already exists in 'hsr' [ 251.572411][ T6516] Cannot create hsr debugfs directory [ 251.573013][ T6597] chnl_net:caif_netlink_parms(): no params data found [ 251.631405][ T5878] usb usb4-port1: attempt power cycle [ 252.577756][ T5878] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 252.971647][ T6755] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 253.752101][ T6756] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.772289][ T6756] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 254.068319][ T6757] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 254.300336][ T5878] usb 4-1: device descriptor read/8, error -71 [ 254.928837][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.739637][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.163625][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.362691][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.391102][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.458210][ T5991] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 259.347525][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.507709][ T5991] usb 4-1: device descriptor read/64, error -71 [ 259.675285][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.675399][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.675632][ T6597] bridge_slave_0: entered allmulticast mode [ 259.678345][ T6597] bridge_slave_0: entered promiscuous mode [ 259.703772][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.703936][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.704204][ T6597] bridge_slave_1: entered allmulticast mode [ 259.708355][ T6597] bridge_slave_1: entered promiscuous mode [ 259.757339][ T5991] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 259.917634][ T5991] usb 4-1: device descriptor read/64, error -71 [ 260.028033][ T5991] usb usb4-port1: attempt power cycle [ 260.387911][ T5991] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 260.412567][ T5991] usb 4-1: device descriptor read/8, error -71 [ 260.448815][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.605567][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.647582][ T5991] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 260.668905][ T5991] usb 4-1: device descriptor read/8, error -71 [ 260.788582][ T5991] usb usb4-port1: unable to enumerate USB device [ 261.253041][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.253118][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.279364][ T6814] input: syz0 as /devices/virtual/input/input8 [ 261.514980][ T6597] team0: Port device team_slave_0 added [ 261.607986][ T1918] hsr_slave_0: left promiscuous mode [ 261.648048][ T1918] hsr_slave_1: left promiscuous mode [ 261.648855][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.715187][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.096713][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.127503][ T1918] hsr_slave_0: left promiscuous mode [ 262.182284][ T1918] hsr_slave_1: left promiscuous mode [ 262.183298][ T1918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.183326][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.416388][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.435513][ T1918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.435544][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.727930][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.759520][ T1918] hsr_slave_0: left promiscuous mode [ 263.777694][ T1918] hsr_slave_1: left promiscuous mode [ 263.778757][ T1918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.778783][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.819100][ T1918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.819130][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.989764][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.215361][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.306448][ T1918] veth1_macvtap: left promiscuous mode [ 264.306568][ T1918] veth0_macvtap: left promiscuous mode [ 264.306831][ T1918] veth1_vlan: left promiscuous mode [ 264.307015][ T1918] veth0_vlan: left promiscuous mode [ 264.659100][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.229342][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.245731][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.254690][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.256050][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.277905][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.435235][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.456474][ T1918] veth1_macvtap: left promiscuous mode [ 265.456584][ T1918] veth0_macvtap: left promiscuous mode [ 265.456857][ T1918] veth1_vlan: left promiscuous mode [ 265.457044][ T1918] veth0_vlan: left promiscuous mode [ 266.937084][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.219527][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.317927][ T5119] Bluetooth: hci1: command tx timeout [ 267.488533][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.669516][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.095875][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.430358][ T5119] Bluetooth: hci1: command tx timeout [ 269.631402][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.286761][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.773658][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 271.228412][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 271.480242][ T5119] Bluetooth: hci1: command tx timeout [ 271.513844][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.230370][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.305950][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.308791][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.309988][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.311236][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.312369][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.359802][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.473690][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.491423][ T6894] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.879977][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.084044][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.595215][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.799287][ T5119] Bluetooth: hci1: command tx timeout [ 274.555109][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.623602][ T5119] Bluetooth: hci6: command tx timeout [ 275.002697][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.296968][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.359767][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.597326][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.576953][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.462044][ T5119] Bluetooth: hci6: command tx timeout [ 278.640631][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.825193][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.436115][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.491652][ T6947] input: syz0 as /devices/virtual/input/input9 [ 280.517840][ T61] Bluetooth: hci6: command tx timeout [ 280.702741][ T5119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.713535][ T5119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.717033][ T5119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.720700][ T5119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.721764][ T5119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.065459][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.423636][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.740763][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.230844][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.577536][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.612948][ T5119] Bluetooth: hci6: command tx timeout [ 282.772099][ T5119] Bluetooth: hci7: command tx timeout [ 283.459912][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.499731][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.462280][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.540865][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.802438][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.847560][ T5119] Bluetooth: hci7: command tx timeout [ 285.572908][ T6984] input: syz0 as /devices/virtual/input/input10 [ 286.338723][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 287.180080][ T5119] Bluetooth: hci7: command tx timeout [ 287.848684][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 289.080855][ T7010] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 289.237714][ T5119] Bluetooth: hci7: command tx timeout [ 293.558925][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 293.778473][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 296.075068][ T6597] team0: Port device team_slave_1 added [ 296.154841][ T7010] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 299.275958][ T7047] binder: 7043:7047 ioctl c0306201 0 returned -14 [ 302.754318][ T7084] input: syz0 as /devices/virtual/input/input11 [ 303.360639][ T6948] chnl_net:caif_netlink_parms(): no params data found [ 303.379617][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 304.262843][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 307.568595][ T7124] input: syz0 as /devices/virtual/input/input12 [ 308.152527][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.152666][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.152926][ T6948] bridge_slave_0: entered allmulticast mode [ 308.203888][ T6948] bridge_slave_0: entered promiscuous mode [ 308.236929][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.237073][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.237303][ T6845] bridge_slave_0: entered allmulticast mode [ 308.271198][ T6845] bridge_slave_0: entered promiscuous mode [ 308.274559][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.274736][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.274946][ T6948] bridge_slave_1: entered allmulticast mode [ 308.306745][ T6948] bridge_slave_1: entered promiscuous mode [ 308.836070][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.836242][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.837276][ T6845] bridge_slave_1: entered allmulticast mode [ 309.184284][ T6845] bridge_slave_1: entered promiscuous mode [ 313.222073][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.684816][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.690231][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.695669][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.695826][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.696109][ T6890] bridge_slave_0: entered allmulticast mode [ 314.704669][ T6890] bridge_slave_0: entered promiscuous mode [ 315.420460][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.989936][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.990078][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.990296][ T6890] bridge_slave_1: entered allmulticast mode [ 316.999291][ T6890] bridge_slave_1: entered promiscuous mode [ 319.318334][ T6948] team0: Port device team_slave_0 added [ 319.639804][ T6845] team0: Port device team_slave_0 added [ 321.664005][ T6948] team0: Port device team_slave_1 added [ 321.710434][ T6845] team0: Port device team_slave_1 added [ 321.716206][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.054190][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.336467][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.336522][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.898654][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.898674][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.898704][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.912595][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.912617][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.912648][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.921945][ T1918] IPVS: stop unused estimator thread 0... [ 324.150764][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.150900][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.150930][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.153570][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.153587][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.153614][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.338022][ T6890] team0: Port device team_slave_0 added [ 324.381474][ T6890] team0: Port device team_slave_1 added [ 326.312586][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.328830][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.330463][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.332139][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.333472][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.981443][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.981462][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.981488][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.054051][ T7240] input: syz0 as /devices/virtual/input/input13 [ 328.555268][ T7246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.677544][ T5119] Bluetooth: hci0: command tx timeout [ 328.684002][ T6948] hsr_slave_0: entered promiscuous mode [ 328.699462][ T6948] hsr_slave_1: entered promiscuous mode [ 328.712092][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.712109][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.712135][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.757602][ T5119] Bluetooth: hci0: command tx timeout [ 332.651039][ T6890] hsr_slave_0: entered promiscuous mode [ 332.652596][ T6890] hsr_slave_1: entered promiscuous mode [ 332.653616][ T6890] debugfs: 'hsr0' already exists in 'hsr' [ 332.653642][ T6890] Cannot create hsr debugfs directory [ 332.837640][ T5119] Bluetooth: hci0: command tx timeout [ 333.249494][ T7276] input: syz0 as /devices/virtual/input/input14 [ 333.715835][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.744099][ T2170] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 333.759663][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.761606][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.763010][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.763874][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.897654][ T2170] usb 4-1: Using ep0 maxpacket: 32 [ 333.902512][ T2170] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.904452][ T2170] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 333.937006][ T2170] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 333.937048][ T2170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.937069][ T2170] usb 4-1: Product: syz [ 333.937084][ T2170] usb 4-1: Manufacturer: syz [ 333.937099][ T2170] usb 4-1: SerialNumber: syz [ 334.556276][ T2170] usb 4-1: Not enough endpoints found in device, aborting! [ 334.788168][ T5893] usb 4-1: USB disconnect, device number 25 [ 334.917683][ T61] Bluetooth: hci0: command tx timeout [ 335.574686][ T6948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.787846][ T6948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.868582][ T6948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.907654][ T61] Bluetooth: hci1: command tx timeout [ 336.166053][ T1918] bridge_slave_1: left allmulticast mode [ 336.166084][ T1918] bridge_slave_1: left promiscuous mode [ 336.166348][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.150008][ T1918] bridge_slave_0: left allmulticast mode [ 337.150038][ T1918] bridge_slave_0: left promiscuous mode [ 337.150328][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.297159][ T1918] bridge_slave_1: left allmulticast mode [ 337.297191][ T1918] bridge_slave_1: left promiscuous mode [ 337.310755][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.399676][ T1918] bridge_slave_0: left allmulticast mode [ 337.399709][ T1918] bridge_slave_0: left promiscuous mode [ 337.399970][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.527335][ T1918] bridge_slave_1: left allmulticast mode [ 337.527368][ T1918] bridge_slave_1: left promiscuous mode [ 337.528316][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.698175][ T1918] bridge_slave_0: left allmulticast mode [ 337.698199][ T1918] bridge_slave_0: left promiscuous mode [ 337.698385][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.821807][ T1918] bridge_slave_1: left allmulticast mode [ 337.821840][ T1918] bridge_slave_1: left promiscuous mode [ 337.822111][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.903945][ T1918] bridge_slave_0: left allmulticast mode [ 337.903978][ T1918] bridge_slave_0: left promiscuous mode [ 337.904227][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.957572][ T61] Bluetooth: hci1: command tx timeout [ 338.047625][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 338.190593][ T10] usb 4-1: device descriptor read/64, error -71 [ 338.613336][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.698345][ T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 339.537614][ T10] usb 4-1: device descriptor read/64, error -71 [ 339.647967][ T10] usb usb4-port1: attempt power cycle [ 339.705527][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.864419][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.977065][ T1918] bond0 (unregistering): Released all slaves [ 339.997571][ T10] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 340.021452][ T10] usb 4-1: device descriptor read/8, error -71 [ 340.037929][ T61] Bluetooth: hci1: command tx timeout [ 340.146531][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.372728][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.427641][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 340.680325][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.700895][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.704315][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.715630][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.718800][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.218920][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.127637][ T5119] Bluetooth: hci1: command tx timeout [ 342.313381][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.386181][ T1918] bond0 (unregistering): Released all slaves [ 342.903227][ T5119] Bluetooth: hci2: command tx timeout [ 345.143488][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.230092][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.326127][ T10] usb 4-1: device descriptor read/8, error -71 [ 345.393199][ T1918] bond0 (unregistering): Released all slaves [ 345.427957][ T10] usb usb4-port1: unable to enumerate USB device [ 345.671732][ T5119] Bluetooth: hci2: command tx timeout [ 347.643807][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.718453][ T5119] Bluetooth: hci2: command tx timeout [ 347.960084][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.200699][ T1918] bond0 (unregistering): Released all slaves [ 348.238802][ T6948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.444594][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 349.797786][ T5119] Bluetooth: hci2: command tx timeout [ 350.631888][ T5991] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 350.787604][ T5991] usb 1-1: device descriptor read/64, error -71 [ 351.037624][ T5991] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 351.687837][ T5991] usb 1-1: device descriptor read/64, error -71 [ 351.946948][ T5991] usb usb1-port1: attempt power cycle [ 351.993550][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.993694][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.993932][ T7227] bridge_slave_0: entered allmulticast mode [ 351.996018][ T7227] bridge_slave_0: entered promiscuous mode [ 353.043074][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 353.182744][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.182887][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.183224][ T7227] bridge_slave_1: entered allmulticast mode [ 353.228189][ T7227] bridge_slave_1: entered promiscuous mode [ 353.297549][ T5991] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 355.126077][ T7405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.478135][ T1918] hsr_slave_0: left promiscuous mode [ 355.497915][ T1918] hsr_slave_1: left promiscuous mode [ 355.501436][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.561693][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.718213][ T5991] usb 1-1: device descriptor read/8, error -71 [ 355.749900][ T1918] hsr_slave_0: left promiscuous mode [ 355.797784][ T1918] hsr_slave_1: left promiscuous mode [ 355.798856][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.053950][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.187679][ T1918] hsr_slave_0: left promiscuous mode [ 356.227661][ T1918] hsr_slave_1: left promiscuous mode [ 356.228869][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.251170][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.252208][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 357.438444][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 358.901034][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 359.648193][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 360.839731][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 361.008355][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 362.108263][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 362.349531][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 362.875406][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.982099][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.014509][ T7439] fuse: Unknown parameter 'group_id00000000000000000000' [ 364.142222][ T7227] team0: Port device team_slave_0 added [ 364.517059][ T7227] team0: Port device team_slave_1 added [ 364.553831][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.554049][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.554292][ T7280] bridge_slave_0: entered allmulticast mode [ 364.614526][ T7280] bridge_slave_0: entered promiscuous mode [ 364.947649][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.947791][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.948057][ T7280] bridge_slave_1: entered allmulticast mode [ 364.951096][ T7280] bridge_slave_1: entered promiscuous mode [ 366.092549][ T7476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.185242][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.185261][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.185291][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.451749][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.451767][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.451795][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.518765][ T7482] fuse: Unknown parameter 'group_id00000000000000000000' [ 366.618559][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.814618][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.193515][ T7509] input: syz0 as /devices/virtual/input/input15 [ 369.336556][ T7280] team0: Port device team_slave_0 added [ 369.337984][ T7337] chnl_net:caif_netlink_parms(): no params data found [ 369.403339][ T7227] hsr_slave_0: entered promiscuous mode [ 369.405040][ T7227] hsr_slave_1: entered promiscuous mode [ 369.406164][ T7227] debugfs: 'hsr0' already exists in 'hsr' [ 369.406192][ T7227] Cannot create hsr debugfs directory [ 369.415100][ T7280] team0: Port device team_slave_1 added [ 370.359868][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.359887][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.359915][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.448750][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.448769][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.448797][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.720101][ T7513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.890410][ T7518] fuse: Unknown parameter 'group_id00000000000000000000' [ 371.994989][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.995963][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.013749][ T7337] bridge_slave_0: entered allmulticast mode [ 372.034127][ T7337] bridge_slave_0: entered promiscuous mode [ 372.082931][ T7280] hsr_slave_0: entered promiscuous mode [ 372.084592][ T7280] hsr_slave_1: entered promiscuous mode [ 372.085803][ T7280] debugfs: 'hsr0' already exists in 'hsr' [ 372.085829][ T7280] Cannot create hsr debugfs directory [ 372.111716][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.111893][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.112189][ T7337] bridge_slave_1: entered allmulticast mode [ 372.115307][ T7337] bridge_slave_1: entered promiscuous mode [ 373.026483][ T7337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.313521][ T7337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.847568][ T5891] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 373.988048][ T5891] usb 4-1: device descriptor read/64, error -71 [ 374.095265][ T7337] team0: Port device team_slave_0 added [ 374.234808][ T5891] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 374.367781][ T5891] usb 4-1: device descriptor read/64, error -71 [ 374.390449][ T7337] team0: Port device team_slave_1 added [ 374.478125][ T5891] usb usb4-port1: attempt power cycle [ 374.766953][ T7559] fuse: Bad value for 'user_id' [ 374.766973][ T7559] fuse: Bad value for 'user_id' [ 374.807079][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.807096][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.807118][ T7337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.818343][ T5891] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 374.881229][ T5891] usb 4-1: device descriptor read/8, error -71 [ 374.994835][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.994849][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.994868][ T7337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.001515][ T7562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.117604][ T5891] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 375.138358][ T5891] usb 4-1: device descriptor read/8, error -71 [ 375.252369][ T5891] usb usb4-port1: unable to enumerate USB device [ 375.775250][ T7337] hsr_slave_0: entered promiscuous mode [ 375.776733][ T7337] hsr_slave_1: entered promiscuous mode [ 375.790806][ T7337] debugfs: 'hsr0' already exists in 'hsr' [ 375.790841][ T7337] Cannot create hsr debugfs directory [ 378.156460][ T7280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 378.178337][ T7583] fuse: Bad value for 'user_id' [ 378.178358][ T7583] fuse: Bad value for 'user_id' [ 378.230653][ T7280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 378.302094][ T7280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 378.337150][ T7586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.396564][ T7280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 378.992417][ T7227] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 379.083965][ T7227] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 379.126015][ T1918] bridge_slave_1: left allmulticast mode [ 379.126045][ T1918] bridge_slave_1: left promiscuous mode [ 379.126286][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.260846][ T1918] bridge_slave_0: left allmulticast mode [ 379.260879][ T1918] bridge_slave_0: left promiscuous mode [ 379.261165][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.510096][ T1918] bridge_slave_1: left allmulticast mode [ 379.510120][ T1918] bridge_slave_1: left promiscuous mode [ 379.510290][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.685179][ T5892] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 379.727035][ T1918] bridge_slave_0: left allmulticast mode [ 379.727059][ T1918] bridge_slave_0: left promiscuous mode [ 379.727323][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.821208][ T1918] bridge_slave_1: left allmulticast mode [ 379.821231][ T1918] bridge_slave_1: left promiscuous mode [ 379.825353][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.847522][ T5892] usb 1-1: device descriptor read/64, error -71 [ 379.938426][ T1918] bridge_slave_0: left allmulticast mode [ 379.938451][ T1918] bridge_slave_0: left promiscuous mode [ 379.938641][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.097590][ T5892] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 380.237528][ T5892] usb 1-1: device descriptor read/64, error -71 [ 380.347958][ T5892] usb usb1-port1: attempt power cycle [ 380.615156][ T7627] input: syz0 as /devices/virtual/input/input16 [ 381.387606][ T5892] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 381.416073][ T5892] usb 1-1: device descriptor read/8, error -71 [ 381.647669][ T5892] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 381.679572][ T7629] fuse: Bad value for 'user_id' [ 381.679592][ T7629] fuse: Bad value for 'user_id' [ 381.710733][ T5892] usb 1-1: device descriptor read/8, error -71 [ 381.724514][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.817934][ T5892] usb usb1-port1: unable to enumerate USB device [ 381.869281][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.931668][ T1918] bond0 (unregistering): Released all slaves [ 382.270261][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.350841][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.457778][ T1918] bond0 (unregistering): Released all slaves [ 382.788434][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.886540][ T7639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.918490][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.000517][ T1918] bond0 (unregistering): Released all slaves [ 383.041001][ T7227] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.491805][ T7227] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.204287][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.204364][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.254537][ T1918] hsr_slave_0: left promiscuous mode [ 384.281951][ T7660] fuse: Bad value for 'fd' [ 384.288604][ T1918] hsr_slave_1: left promiscuous mode [ 384.289854][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.314404][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.398365][ T1918] hsr_slave_0: left promiscuous mode [ 384.540347][ T1918] hsr_slave_1: left promiscuous mode [ 384.541499][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.589319][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.632219][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.808480][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.957614][ T5892] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 385.087622][ T5892] usb 4-1: device descriptor read/64, error -71 [ 385.327672][ T5892] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 385.467653][ T5892] usb 4-1: device descriptor read/64, error -71 [ 385.513794][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.527972][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.531791][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.533358][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.534203][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.597188][ T5892] usb usb4-port1: attempt power cycle [ 385.987832][ T5892] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 386.023738][ T5892] usb 4-1: device descriptor read/8, error -71 [ 386.039523][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 386.238479][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 386.287703][ T5892] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 386.308301][ T5892] usb 4-1: device descriptor read/8, error -71 [ 386.418233][ T5892] usb usb4-port1: unable to enumerate USB device [ 386.445573][ T7679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.298814][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 387.465660][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 387.651715][ T61] Bluetooth: hci5: command tx timeout [ 388.191706][ T7690] fuse: Bad value for 'fd' [ 388.641974][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 388.765231][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 389.720519][ T61] Bluetooth: hci5: command tx timeout [ 389.795399][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.035149][ T7280] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.122741][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.123882][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.203408][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.203557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.251796][ T5891] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 390.417698][ T5891] usb 1-1: device descriptor read/64, error -71 [ 390.657609][ T5891] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 390.797655][ T5891] usb 1-1: device descriptor read/64, error -71 [ 391.109088][ T5891] usb usb1-port1: attempt power cycle [ 391.259532][ T7719] input: syz0 as /devices/virtual/input/input17 [ 391.489714][ T5891] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 391.798513][ T61] Bluetooth: hci5: command tx timeout [ 391.949118][ T5891] usb 1-1: device descriptor read/8, error -71 [ 392.211334][ T5891] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 392.404619][ T5891] usb 1-1: device descriptor read/8, error -71 [ 392.507822][ T5891] usb usb1-port1: unable to enumerate USB device [ 392.755261][ T7730] fuse: Bad value for 'fd' [ 393.017554][ T7337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 393.162058][ T7337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 393.253871][ T7337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 393.400268][ T7337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.641933][ T7676] chnl_net:caif_netlink_parms(): no params data found [ 393.878180][ T61] Bluetooth: hci5: command tx timeout [ 394.030898][ T7749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.215063][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.227103][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.241287][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.245203][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.246066][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.310645][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.310888][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.311336][ T7676] bridge_slave_0: entered allmulticast mode [ 395.318996][ T7676] bridge_slave_0: entered promiscuous mode [ 395.336295][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.336484][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.336748][ T7676] bridge_slave_1: entered allmulticast mode [ 395.376509][ T7676] bridge_slave_1: entered promiscuous mode [ 396.226924][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.367903][ T5119] Bluetooth: hci0: command tx timeout [ 396.488634][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.630710][ T7775] fuse: Bad value for 'fd' [ 396.913766][ T7676] team0: Port device team_slave_0 added [ 396.924024][ T7676] team0: Port device team_slave_1 added [ 397.217561][ T49] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 397.392442][ T49] usb 4-1: device descriptor read/64, error -71 [ 397.592367][ T7798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.627596][ T49] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 397.721132][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.721145][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.721164][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.777620][ T49] usb 4-1: device descriptor read/64, error -71 [ 397.814893][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.814912][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.814941][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.888408][ T49] usb usb4-port1: attempt power cycle [ 398.258097][ T49] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 398.284282][ T49] usb 4-1: device descriptor read/8, error -71 [ 398.448922][ T5119] Bluetooth: hci0: command tx timeout [ 398.517894][ T49] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 398.540147][ T49] usb 4-1: device descriptor read/8, error -71 [ 398.612828][ T7676] hsr_slave_0: entered promiscuous mode [ 398.614441][ T7676] hsr_slave_1: entered promiscuous mode [ 398.647940][ T49] usb usb4-port1: unable to enumerate USB device [ 400.007843][ T7755] chnl_net:caif_netlink_parms(): no params data found [ 400.517747][ T5119] Bluetooth: hci0: command tx timeout [ 400.946217][ T7822] fuse: Bad value for 'fd' [ 401.215304][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.236208][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.260205][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.265625][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.286108][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.193884][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.194052][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.194249][ T7755] bridge_slave_0: entered allmulticast mode [ 402.209637][ T7755] bridge_slave_0: entered promiscuous mode [ 402.264648][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.264815][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.265102][ T7755] bridge_slave_1: entered allmulticast mode [ 402.269997][ T7755] bridge_slave_1: entered promiscuous mode [ 402.597633][ T61] Bluetooth: hci0: command tx timeout [ 403.492398][ T61] Bluetooth: hci1: command tx timeout [ 403.617711][ T5891] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 403.747539][ T5891] usb 4-1: device descriptor read/64, error -71 [ 403.843330][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.987726][ T5891] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 404.024019][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.121576][ T5891] usb 4-1: device descriptor read/64, error -71 [ 404.232381][ T5891] usb usb4-port1: attempt power cycle [ 404.567761][ T5891] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 404.590432][ T5891] usb 4-1: device descriptor read/8, error -71 [ 404.619980][ T7755] team0: Port device team_slave_0 added [ 404.827635][ T5891] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 404.907914][ T5891] usb 4-1: device descriptor read/8, error -71 [ 405.020628][ T5891] usb usb4-port1: unable to enumerate USB device [ 405.085874][ T7755] team0: Port device team_slave_1 added [ 405.567688][ T61] Bluetooth: hci1: command tx timeout [ 406.013042][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.013061][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.013087][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.071841][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.071854][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.071874][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.390132][ T7857] fuse: Bad value for 'fd' [ 406.672529][ T1918] bridge_slave_1: left allmulticast mode [ 406.672554][ T1918] bridge_slave_1: left promiscuous mode [ 406.672745][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.748781][ T1918] bridge_slave_0: left allmulticast mode [ 406.748812][ T1918] bridge_slave_0: left promiscuous mode [ 406.749022][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.833271][ T1918] bridge_slave_1: left allmulticast mode [ 406.834478][ T1918] bridge_slave_1: left promiscuous mode [ 406.838243][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.987193][ T1918] bridge_slave_0: left allmulticast mode [ 406.987225][ T1918] bridge_slave_0: left promiscuous mode [ 406.990675][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.649500][ T61] Bluetooth: hci1: command tx timeout [ 409.718051][ T61] Bluetooth: hci1: command tx timeout [ 410.210485][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.227705][ T5892] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 410.268891][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.313528][ T1918] bond0 (unregistering): Released all slaves [ 410.387455][ T5892] usb 4-1: device descriptor read/64, error -71 [ 410.638096][ T5892] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 410.718218][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.778285][ T5892] usb 4-1: device descriptor read/64, error -71 [ 410.819890][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.887905][ T5892] usb usb4-port1: attempt power cycle [ 410.904443][ T1918] bond0 (unregistering): Released all slaves [ 410.979060][ T7755] hsr_slave_0: entered promiscuous mode [ 410.980553][ T7755] hsr_slave_1: entered promiscuous mode [ 410.981542][ T7755] debugfs: 'hsr0' already exists in 'hsr' [ 410.981567][ T7755] Cannot create hsr debugfs directory [ 411.238128][ T5892] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 411.260447][ T5892] usb 4-1: device descriptor read/8, error -71 [ 411.507536][ T5892] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 411.578193][ T5892] usb 4-1: device descriptor read/8, error -71 [ 411.689494][ T5892] usb usb4-port1: unable to enumerate USB device [ 412.109954][ T1918] hsr_slave_0: left promiscuous mode [ 412.133781][ T1918] hsr_slave_1: left promiscuous mode [ 412.134783][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.168623][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.327618][ T1918] hsr_slave_0: left promiscuous mode [ 412.357966][ T1918] hsr_slave_1: left promiscuous mode [ 412.360056][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.408711][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.278011][ T7895] fuse: Invalid rootmode [ 414.263590][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 414.718096][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 419.514445][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 419.758182][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 419.867577][ T5660] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 419.997738][ T5660] usb 1-1: device descriptor read/64, error -71 [ 420.237546][ T5660] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 420.367798][ T5660] usb 1-1: device descriptor read/64, error -71 [ 420.486539][ T5660] usb usb1-port1: attempt power cycle [ 420.740887][ T7824] chnl_net:caif_netlink_parms(): no params data found [ 420.782695][ T7932] fuse: Invalid rootmode [ 420.839752][ T7676] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 420.847846][ T5660] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 420.872892][ T5660] usb 1-1: device descriptor read/8, error -71 [ 420.933251][ T7676] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 421.107718][ T5660] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 421.189488][ T5660] usb 1-1: device descriptor read/8, error -71 [ 421.258247][ T7676] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.318585][ T7676] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.355639][ T5660] usb usb1-port1: unable to enumerate USB device [ 422.019060][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.024364][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.035418][ T7824] bridge_slave_0: entered allmulticast mode [ 422.076036][ T7824] bridge_slave_0: entered promiscuous mode [ 422.102409][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.102555][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.102803][ T7824] bridge_slave_1: entered allmulticast mode [ 422.105731][ T7824] bridge_slave_1: entered promiscuous mode [ 423.819978][ T7824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.843892][ T7824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.646261][ T7824] team0: Port device team_slave_0 added [ 424.751464][ T7824] team0: Port device team_slave_1 added [ 425.209885][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.209899][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.209927][ T7824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.263314][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.263334][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.263363][ T7824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.575734][ T7982] fuse: Invalid rootmode [ 425.804974][ T7824] hsr_slave_0: entered promiscuous mode [ 425.816282][ T7824] hsr_slave_1: entered promiscuous mode [ 425.824725][ T7824] debugfs: 'hsr0' already exists in 'hsr' [ 425.824754][ T7824] Cannot create hsr debugfs directory [ 426.256072][ T7755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.477712][ T5893] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 426.579324][ T7755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.617589][ T5893] usb 4-1: device descriptor read/64, error -71 [ 426.654258][ T7755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.723858][ T7755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.857739][ T5893] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 427.058212][ T5893] usb 4-1: device descriptor read/64, error -71 [ 427.170577][ T5893] usb usb4-port1: attempt power cycle [ 427.507566][ T5893] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 427.542578][ T5893] usb 4-1: device descriptor read/8, error -71 [ 428.177692][ T5893] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 428.206447][ T5893] usb 4-1: device descriptor read/8, error -71 [ 428.307911][ T5893] usb usb4-port1: unable to enumerate USB device [ 428.554217][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.882018][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.194969][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.198485][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.513594][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.513758][ T1465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.964923][ T1918] bridge_slave_1: left allmulticast mode [ 429.964954][ T1918] bridge_slave_1: left promiscuous mode [ 429.965215][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.109304][ T1918] bridge_slave_0: left allmulticast mode [ 430.109331][ T1918] bridge_slave_0: left promiscuous mode [ 430.109556][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.189941][ T8027] fuse: Bad value for 'rootmode' [ 432.079235][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.169685][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.230390][ T1918] bond0 (unregistering): Released all slaves [ 432.723824][ T8045] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 432.780619][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.888877][ T8049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.501'. [ 432.929912][ T1918] hsr_slave_0: left promiscuous mode [ 432.947938][ T1918] hsr_slave_1: left promiscuous mode [ 432.948727][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.988363][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.761427][ T8053] input: syz0 as /devices/virtual/input/input18 [ 434.202929][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 434.360239][ T1918] team0 (unregistering): Port device team_slave_0 removed [ 435.476669][ T8045] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 435.489333][ T8045] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 435.599137][ T8048] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 435.870301][ T7755] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.932826][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.932976][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.023016][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.023186][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.993392][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.147313][ T7824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 437.251833][ T7824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 437.341400][ T7824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 437.411543][ T7824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 437.692348][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.836584][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.886197][ T7824] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.972007][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.972279][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.036740][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.036892][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.339772][ T7755] veth0_vlan: entered promiscuous mode [ 439.354550][ T7755] veth1_vlan: entered promiscuous mode [ 439.438236][ T7755] veth0_macvtap: entered promiscuous mode [ 439.444633][ T7755] veth1_macvtap: entered promiscuous mode [ 440.577682][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.842775][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.925012][ T1504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.939113][ T1504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.966345][ T1504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.017468][ T1504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.374778][ T7676] veth0_vlan: entered promiscuous mode [ 441.648130][ T7676] veth1_vlan: entered promiscuous mode [ 442.044053][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.047338][ T1918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.047521][ T1918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.338735][ T7676] veth0_macvtap: entered promiscuous mode [ 442.454614][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.454635][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.495874][ T7676] veth1_macvtap: entered promiscuous mode [ 442.661700][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.709615][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.802000][ T3464] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.802077][ T3464] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.802138][ T3464] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.802207][ T3464] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.745413][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.745435][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.949533][ T8147] netlink: 'syz.5.511': attribute type 1 has an invalid length. [ 444.131596][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.5.511'. [ 444.321013][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.321035][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.386795][ T7824] veth0_vlan: entered promiscuous mode [ 444.404259][ T7824] veth1_vlan: entered promiscuous mode [ 444.541047][ T7824] veth0_macvtap: entered promiscuous mode [ 444.719924][ T7824] veth1_macvtap: entered promiscuous mode [ 444.828964][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.863781][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.926500][ T3464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.944235][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.983677][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.006062][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.487530][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.487552][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.578306][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.578382][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.007569][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.007599][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.029522][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 448.063223][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.066605][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.085507][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.297845][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.806362][ T70] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.368720][ T5119] Bluetooth: hci2: command tx timeout [ 451.022625][ T70] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.523044][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.994896][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.168803][ T70] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.438205][ T5119] Bluetooth: hci2: command tx timeout [ 452.682452][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.896387][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.090564][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.259979][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.401198][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.495056][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 453.734379][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.518719][ T5119] Bluetooth: hci2: command tx timeout [ 455.396464][ T8251] input: syz0 as /devices/virtual/input/input19 [ 455.519185][ T70] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.209734][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.215344][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.215619][ T8182] bridge_slave_0: entered allmulticast mode [ 456.239850][ T8182] bridge_slave_0: entered promiscuous mode [ 456.268026][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.268210][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.268431][ T8182] bridge_slave_1: entered allmulticast mode [ 456.276018][ T8182] bridge_slave_1: entered promiscuous mode [ 456.604804][ T5119] Bluetooth: hci2: command tx timeout [ 457.119559][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.195270][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.362145][ T8182] team0: Port device team_slave_0 added [ 458.428844][ T8182] team0: Port device team_slave_1 added [ 459.657013][ T70] bridge_slave_1: left allmulticast mode [ 459.657045][ T70] bridge_slave_1: left promiscuous mode [ 459.657308][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.874697][ T70] bridge_slave_0: left allmulticast mode [ 459.874729][ T70] bridge_slave_0: left promiscuous mode [ 459.874984][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.308363][ T980] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 464.598446][ T980] usb 6-1: device descriptor read/64, error -71 [ 464.783946][ T8335] input: syz0 as /devices/virtual/input/input20 [ 464.847939][ T980] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 465.408539][ T980] usb 6-1: device descriptor read/64, error -71 [ 465.527915][ T980] usb usb6-port1: attempt power cycle [ 465.970164][ T980] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 466.013278][ T980] usb 6-1: device descriptor read/8, error -71 [ 466.357671][ T980] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 466.669989][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.788618][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.884126][ T70] bond0 (unregistering): Released all slaves [ 467.514687][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.514702][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.514721][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.620965][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.620984][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.621014][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.020260][ T8182] hsr_slave_0: entered promiscuous mode [ 470.052567][ T8182] hsr_slave_1: entered promiscuous mode [ 470.086704][ T8182] debugfs: 'hsr0' already exists in 'hsr' [ 470.086737][ T8182] Cannot create hsr debugfs directory [ 470.350237][ T70] hsr_slave_0: left promiscuous mode [ 470.422002][ T70] hsr_slave_1: left promiscuous mode [ 470.423109][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.423137][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.514365][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.514396][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.874288][ T70] veth1_macvtap: left promiscuous mode [ 470.874404][ T70] veth0_macvtap: left promiscuous mode [ 470.910711][ T70] veth1_vlan: left promiscuous mode [ 470.910945][ T70] veth0_vlan: left promiscuous mode [ 471.341852][ T980] usb 6-1: device descriptor read/8, error -71 [ 471.457624][ T980] usb usb6-port1: unable to enumerate USB device [ 475.283914][ T8393] fuse: Unknown parameter 'user_id00000000000000000000' [ 478.270952][ T5891] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 478.427801][ T5891] usb 4-1: device descriptor read/64, error -71 [ 478.702635][ T5891] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 478.847632][ T5891] usb 4-1: device descriptor read/64, error -71 [ 478.959524][ T5891] usb usb4-port1: attempt power cycle [ 479.055555][ T70] team0 (unregistering): Port device team_slave_1 removed [ 479.288595][ T70] team0 (unregistering): Port device team_slave_0 removed [ 479.311781][ T5891] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 479.337515][ T5891] usb 4-1: device descriptor read/8, error -71 [ 479.577524][ T5891] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 479.909054][ T5891] usb 4-1: device descriptor read/8, error -71 [ 480.020158][ T5891] usb usb4-port1: unable to enumerate USB device [ 481.731536][ T8433] fuse: Unknown parameter 'user_id00000000000000000000' [ 482.351861][ T8438] input: syz0 as /devices/virtual/input/input21 [ 483.040173][ T8440] No control pipe specified [ 493.524928][ T8478] fuse: Bad value for 'fd' [ 494.027533][ T8487] No control pipe specified [ 501.355713][ T8182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.695868][ T8182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.883426][ T8182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 502.177265][ T8182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 504.697264][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.801011][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.922473][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.923148][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.971034][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.971131][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.007500][ T5893] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 505.138220][ T5893] usb 4-1: device descriptor read/64, error -71 [ 505.387685][ T5893] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 505.569310][ T5893] usb 4-1: device descriptor read/64, error -71 [ 505.687948][ T5893] usb usb4-port1: attempt power cycle [ 506.057568][ T5893] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 507.206384][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.211915][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.173415][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.194194][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 510.196803][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 510.246155][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 510.248419][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 511.157797][ T5893] usb 4-1: device descriptor read/8, error -110 [ 511.397511][ T5893] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 511.417860][ T5893] usb 4-1: device descriptor read/8, error -32 [ 511.537869][ T5893] usb usb4-port1: unable to enumerate USB device [ 512.438384][ T61] Bluetooth: hci2: command tx timeout [ 514.815158][ T61] Bluetooth: hci2: command tx timeout [ 517.237967][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 517.427899][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 517.431491][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.431521][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 517.431547][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.431573][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.431629][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.431654][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.477637][ T61] Bluetooth: hci2: command tx timeout [ 518.145186][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 518.145222][ T10] usbtmc 4-1:16.0: can't read capabilities [ 518.404648][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.420957][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.421050][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.421130][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.428740][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.428812][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.428861][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.430007][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.430102][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.432687][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.436129][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.473253][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.476648][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.476746][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.476833][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.484154][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 518.508489][ T10] usb 4-1: USB disconnect, device number 62 [ 518.907646][ T5893] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 518.947981][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 519.127580][ T5893] usb 1-1: device descriptor read/64, error -71 [ 519.317754][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 519.437492][ T5893] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 519.557508][ T5119] Bluetooth: hci2: command tx timeout [ 519.782454][ T5893] usb 1-1: device descriptor read/64, error -71 [ 519.887930][ T5893] usb usb1-port1: attempt power cycle [ 520.227732][ T5893] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 520.249504][ T5893] usb 1-1: device descriptor read/8, error -71 [ 520.577460][ T5893] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 523.018822][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 524.194740][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.194907][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.195162][ T8633] bridge_slave_0: entered allmulticast mode [ 524.270689][ T8633] bridge_slave_0: entered promiscuous mode [ 524.302815][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.303217][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.303688][ T8633] bridge_slave_1: entered allmulticast mode [ 524.331012][ T8633] bridge_slave_1: entered promiscuous mode [ 524.437499][ T5119] Bluetooth: hci1: command 0x0406 tx timeout [ 525.434796][ T8748] fuse: Unknown parameter '0x0000000000000004' [ 525.637893][ T5893] usb 1-1: device descriptor read/8, error -110 [ 525.748122][ T5893] usb usb1-port1: unable to enumerate USB device [ 525.861820][ T3464] bridge_slave_1: left allmulticast mode [ 525.861850][ T3464] bridge_slave_1: left promiscuous mode [ 525.862166][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.470203][ T3464] bridge_slave_0: left allmulticast mode [ 526.470226][ T3464] bridge_slave_0: left promiscuous mode [ 526.470768][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.737791][ T8798] fuse: Unknown parameter '0xffffffffffffffff' [ 532.658421][ T980] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 532.807542][ T980] usb 6-1: device descriptor read/64, error -71 [ 533.097532][ T980] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 533.369531][ T980] usb 6-1: device descriptor read/64, error -71 [ 533.527753][ T980] usb usb6-port1: attempt power cycle [ 533.867487][ T980] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 534.134879][ T980] usb 6-1: device descriptor read/8, error -71 [ 535.157713][ T980] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 536.666036][ T8835] fuse: Unknown parameter '0x0000000000000004' [ 538.815732][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.888474][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.916247][ T3464] bond0 (unregistering): Released all slaves [ 539.419699][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.465868][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.514018][ T8755] netdevsim netdevsim3: Direct firmware load for . [ 539.514018][ T8755] failed with error -2 [ 539.514104][ T8755] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 539.514104][ T8755] [ 540.197936][ T980] usb 6-1: device descriptor read/8, error -110 [ 540.308057][ T980] usb usb6-port1: unable to enumerate USB device [ 542.268431][ T8876] fuse: Unknown parameter 'fd0x0000000000000004' [ 542.278179][ T3464] hsr_slave_0: left promiscuous mode [ 542.358233][ T3464] hsr_slave_1: left promiscuous mode [ 542.359356][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.498430][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.832479][ T8886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.846256][ T8886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.861244][ T8886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.865297][ T8886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.884727][ T8886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 544.119342][ T8895] input: syz0 as /devices/virtual/input/input22 [ 544.926970][ T61] Bluetooth: hci5: command tx timeout [ 546.717550][ T5891] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 547.004099][ T61] Bluetooth: hci5: command tx timeout [ 547.868327][ T5891] usb 6-1: device descriptor read/64, error -71 [ 548.120047][ T5891] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 548.159828][ T8919] fuse: Unknown parameter 'fd0x0000000000000004' [ 548.327532][ T5891] usb 6-1: device descriptor read/64, error -71 [ 548.447869][ T5891] usb usb6-port1: attempt power cycle [ 548.807557][ T5891] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 549.077739][ T61] Bluetooth: hci5: command tx timeout [ 549.260582][ T5891] usb 6-1: device descriptor read/8, error -71 [ 549.497488][ T5891] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 549.889542][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 550.597682][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 551.490262][ T61] Bluetooth: hci5: command tx timeout [ 554.600112][ T5891] usb 6-1: device descriptor read/8, error -110 [ 554.707928][ T5891] usb usb6-port1: unable to enumerate USB device [ 555.043223][ T8951] fuse: Unknown parameter 'fd0x0000000000000004' [ 559.787691][ T5891] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 559.917522][ T5891] usb 1-1: device descriptor read/64, error -71 [ 560.338293][ T5891] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 560.488027][ T5891] usb 1-1: device descriptor read/64, error -71 [ 560.599092][ T5891] usb usb1-port1: attempt power cycle [ 561.307466][ T5891] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 561.328456][ T5891] usb 1-1: device descriptor read/8, error -71 [ 561.717561][ T5891] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 561.753477][ T5891] usb 1-1: device descriptor read/8, error -71 [ 562.017729][ T5891] usb usb1-port1: unable to enumerate USB device [ 563.787248][ T8633] team0: Port device team_slave_0 added [ 564.185581][ T8633] team0: Port device team_slave_1 added [ 564.387570][ T5660] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 564.920042][ T5660] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.920102][ T5660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 564.920126][ T5660] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 564.920150][ T5660] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.925152][ T5660] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 564.925183][ T5660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.925204][ T5660] usb 1-1: Product: syz [ 564.925219][ T5660] usb 1-1: Manufacturer: syz [ 564.925235][ T5660] usb 1-1: SerialNumber: syz [ 564.955859][ T5660] usb 1-1: config 0 descriptor?? [ 564.963122][ T5660] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 565.211646][ T9014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 565.211678][ T9014] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 565.247212][ T9014] vhci_hcd vhci_hcd.0: Device attached [ 565.259085][ T9027] vhci_hcd: connection closed [ 565.284437][ T70] vhci_hcd: stop threads [ 565.286672][ T70] vhci_hcd: release socket [ 565.286774][ T70] vhci_hcd: disconnect device [ 565.453330][ T5660] usb 1-1: USB disconnect, device number 32 [ 565.484173][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.484193][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.484224][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.518050][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.518074][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.518107][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.141296][ T9059] binder: BINDER_SET_CONTEXT_MGR already set [ 568.141314][ T9059] binder: 9057:9059 ioctl 4018620d 200000000040 returned -16 [ 568.448531][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.448607][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.138720][ T980] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 569.145271][ T8886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.166922][ T8886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.171322][ T8886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.175842][ T8886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.184003][ T8886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.267474][ T980] usb 6-1: device descriptor read/64, error -71 [ 569.527437][ T980] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 569.658557][ T980] usb 6-1: device descriptor read/64, error -71 [ 569.769343][ T980] usb usb6-port1: attempt power cycle [ 570.129783][ T980] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 570.148938][ T980] usb 6-1: device descriptor read/8, error -71 [ 570.358486][ T3464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.387472][ T980] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 570.466490][ T980] usb 6-1: device descriptor read/8, error -71 [ 570.513959][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 570.568031][ T980] usb usb6-port1: unable to enumerate USB device [ 570.888777][ T3464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.317750][ T8886] Bluetooth: hci2: command tx timeout [ 571.335515][ T3464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.737546][ T5878] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 571.909810][ T5878] usb 7-1: config 10 has an invalid interface number: 92 but max is 1 [ 571.909832][ T5878] usb 7-1: config 10 has no interface number 1 [ 571.909913][ T5878] usb 7-1: config 10 interface 92 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 571.909929][ T5878] usb 7-1: too many endpoints for config 10 interface 0 altsetting 255: 56, using maximum allowed: 30 [ 571.909963][ T5878] usb 7-1: config 10 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 571.909983][ T5878] usb 7-1: config 10 interface 92 has no altsetting 0 [ 571.909997][ T5878] usb 7-1: config 10 interface 0 has no altsetting 1 [ 571.910021][ T5878] usb 7-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=a0.36 [ 571.910038][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.068529][ T3464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.230363][ T5878] usb 7-1: string descriptor 0 read error: -71 [ 572.401029][ T5878] usb 7-1: USB disconnect, device number 2 [ 572.532643][ T8513] udevd[8513]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:10.92/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.539654][ T8886] Bluetooth: hci2: command tx timeout [ 574.165565][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.165801][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.166058][ T8884] bridge_slave_0: entered allmulticast mode [ 574.215761][ T8884] bridge_slave_0: entered promiscuous mode [ 574.246070][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.246236][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.246458][ T8884] bridge_slave_1: entered allmulticast mode [ 574.274887][ T8884] bridge_slave_1: entered promiscuous mode [ 574.816927][ T9104] binder: BINDER_SET_CONTEXT_MGR already set [ 574.816939][ T9104] binder: 9103:9104 ioctl 4018620d 200000000040 returned -16 [ 575.361848][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.284835][ T8886] Bluetooth: hci2: command tx timeout [ 576.391050][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.273290][ T8884] team0: Port device team_slave_0 added [ 577.304007][ T8884] team0: Port device team_slave_1 added [ 577.727581][ T31] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 578.275525][ T31] usb 6-1: device descriptor read/64, error -71 [ 578.367503][ T8886] Bluetooth: hci2: command tx timeout [ 578.592646][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.592666][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.592694][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.473484][ T31] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 579.590933][ T9138] binder: BINDER_SET_CONTEXT_MGR already set [ 579.590945][ T9138] binder: 9137:9138 ioctl 4018620d 200000000040 returned -16 [ 579.677455][ T31] usb 6-1: device descriptor read/64, error -71 [ 579.787899][ T31] usb usb6-port1: attempt power cycle [ 580.257718][ T31] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 581.267448][ T5660] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 581.422699][ T5660] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.450466][ T5660] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 581.450490][ T5660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.450504][ T5660] usb 1-1: Product: syz [ 581.450558][ T5660] usb 1-1: Manufacturer: syz [ 581.450569][ T5660] usb 1-1: SerialNumber: syz [ 581.494842][ T5660] usb 1-1: config 0 descriptor?? [ 581.549867][ T31] usb 6-1: device descriptor read/8, error -71 [ 581.554530][ T5660] ldusb 1-1:0.0: Interrupt in endpoint not found [ 582.148349][ T3464] bond1 (unregistering): (slave bridge1): Releasing active interface [ 582.288257][ T5660] usb 1-1: USB disconnect, device number 33 [ 584.211270][ T3464] bond0 (unregistering): Released all slaves [ 584.226177][ T3464] bond1 (unregistering): Released all slaves [ 584.268903][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.268923][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.268951][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.109839][ T9183] input: syz1 as /devices/virtual/input/input23 [ 587.279680][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 587.630754][ T9070] chnl_net:caif_netlink_parms(): no params data found [ 589.294395][ T8884] hsr_slave_0: entered promiscuous mode [ 589.297187][ T8884] hsr_slave_1: entered promiscuous mode [ 592.724466][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.748'. [ 592.848148][ T3464] hsr_slave_0: left promiscuous mode [ 592.901467][ T3464] hsr_slave_1: left promiscuous mode [ 593.142697][ T3464] veth1_macvtap: left promiscuous mode [ 593.142828][ T3464] veth0_macvtap: left promiscuous mode [ 593.143238][ T3464] veth1_vlan: left promiscuous mode [ 593.143577][ T3464] veth0_vlan: left promiscuous mode [ 593.168657][ T9232] [U] : [ 593.168707][ T9232] [U] [ 593.168754][ T9232] [U] [ 593.168793][ T9232] [U] [ 593.168979][ T9232] [U] [ 593.169025][ T9232] [U] [ 593.169070][ T9232] [U] [ 593.169114][ T9232] [U] [ 593.171397][ T9232] [U] [ 593.171452][ T9232] [U] [ 593.171493][ T9232] [U] [ 593.171533][ T9232] [U] [ 593.171749][ T9232] [U] [ 593.171797][ T9232] [U] [ 593.171853][ T9232] [U] [ 593.171903][ T9232] [U] [ 593.172117][ T9232] [U] [ 593.172170][ T9232] [U] [ 593.172218][ T9232] [U] [ 593.172264][ T9232] [U] [ 593.172560][ T9232] [U] [ 593.172608][ T9232] [U] [ 593.172657][ T9232] [U] [ 593.172705][ T9232] [U] [ 593.172919][ T9232] [U] [ 593.172967][ T9232] [U] [ 593.173013][ T9232] [U] [ 593.173061][ T9232] [U] [ 593.173245][ T9232] [U] [ 593.173292][ T9232] [U] [ 593.173340][ T9232] [U] [ 593.173385][ T9232] [U] [ 593.173700][ T9232] [U] [ 593.173749][ T9232] [U] [ 593.173797][ T9232] [U] [ 593.173852][ T9232] [U] [ 593.174037][ T9232] [U] [ 593.174088][ T9232] [U] [ 593.174135][ T9232] [U] [ 593.174182][ T9232] [U] [ 593.174379][ T9232] [U] [ 593.174428][ T9232] [U] [ 593.174474][ T9232] [U] [ 593.174521][ T9232] [U] [ 593.174821][ T9232] [U] [ 593.174870][ T9232] [U] [ 593.174918][ T9232] [U] [ 593.174965][ T9232] [U] [ 593.175170][ T9232] [U] [ 593.175218][ T9232] [U] [ 593.175297][ T9232] [U] [ 593.175345][ T9232] [U] [ 593.175530][ T9232] [U] [ 593.175577][ T9232] [U] [ 593.175623][ T9232] [U] [ 593.175669][ T9232] [U] [ 593.175989][ T9232] [U] [ 593.176038][ T9232] [U] [ 593.176087][ T9232] [U] [ 593.176135][ T9232] [U] [ 593.176327][ T9232] [U] [ 593.176372][ T9232] [U] [ 593.176419][ T9232] [U] [ 593.176465][ T9232] [U] [ 593.176667][ T9232] [U] [ 593.176712][ T9232] [U] [ 593.176762][ T9232] [U] [ 593.176816][ T9232] [U] [ 593.177118][ T9232] [U] [ 593.177166][ T9232] [U] [ 593.177213][ T9232] [U] [ 593.177260][ T9232] [U] [ 593.195533][ T9232] [U] [ 593.195583][ T9232] [U] [ 593.195630][ T9232] [U] [ 593.195678][ T9232] [U] [ 593.195879][ T9232] [U] [ 593.195925][ T9232] [U] [ 593.195971][ T9232] [U] [ 593.196019][ T9232] [U] [ 593.196230][ T9232] [U] [ 593.198934][ T9232] [U] [ 593.198988][ T9232] [U] [ 593.199035][ T9232] [U] [ 593.199248][ T9232] [U] [ 593.199296][ T9232] [U] [ 593.199344][ T9232] [U] [ 593.199392][ T9232] [U] [ 593.199601][ T9232] [U] [ 593.199652][ T9232] [U] [ 593.200961][ T9232] [U] [ 593.201012][ T9232] [U] [ 593.201221][ T9232] [U] [ 593.201267][ T9232] [U] [ 593.201312][ T9232] [U] [ 593.201359][ T9232] [U] [ 593.201573][ T9232] [U] [ 593.201620][ T9232] [U] [ 593.201669][ T9232] [U] [ 593.201716][ T9232] [U] [ 593.201902][ T9232] [U] [ 593.201942][ T9232] [U] [ 593.209649][ T9232] [U] [ 593.209705][ T9232] [U] [ 593.209958][ T9232] [U] [ 593.210008][ T9232] [U] [ 593.210057][ T9232] [U] [ 593.210106][ T9232] [U] [ 593.210431][ T9232] [U] [ 593.210480][ T9232] [U] [ 593.210528][ T9232] [U] [ 593.210571][ T9232] [U] [ 593.210782][ T9232] [U] [ 593.210844][ T9232] [U] [ 593.210892][ T9232] [U] [ 593.210939][ T9232] [U] [ 593.211124][ T9232] [U] [ 593.211171][ T9232] [U] [ 593.211219][ T9232] [U] [ 593.211266][ T9232] [U] [ 593.214289][ T9232] [U] [ 593.214343][ T9232] [U] [ 593.214390][ T9232] [U] [ 593.214437][ T9232] [U] [ 593.214597][ T9232] [U] [ 593.214644][ T9232] [U] [ 593.214692][ T9232] [U] [ 593.308272][ T9231] [U] [ 602.905196][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.905338][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.905608][ T9070] bridge_slave_0: entered allmulticast mode [ 602.947689][ T9070] bridge_slave_0: entered promiscuous mode [ 602.952716][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.956272][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.956534][ T9070] bridge_slave_1: entered allmulticast mode [ 603.003702][ T9070] bridge_slave_1: entered promiscuous mode [ 603.375490][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.390490][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.397023][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 603.450788][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 603.451637][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 606.398978][ T9309] input: syz0 as /devices/virtual/input/input24 [ 606.541254][ T8886] Bluetooth: hci4: command tx timeout [ 607.210789][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.244744][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.844102][ T61] Bluetooth: hci4: command tx timeout [ 608.956241][ T9070] team0: Port device team_slave_0 added [ 609.098013][ T9070] team0: Port device team_slave_1 added [ 609.226823][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.226864][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.226891][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.226918][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.226944][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.226971][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.226997][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.227023][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.227049][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.227075][ T980] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 609.349005][ T980] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 610.583578][ T9340] fido_id[9340]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 610.965805][ T8886] Bluetooth: hci4: command tx timeout [ 612.679631][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.699998][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.202532][ T8886] Bluetooth: hci4: command tx timeout [ 613.230412][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.310932][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.791215][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.990085][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.460346][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.496782][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.824967][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.163531][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.163550][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.163579][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.186925][ T9347] syz.5.781 (9347) used greatest stack depth: 15592 bytes left [ 617.240035][ T70] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.241749][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.241765][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.241793][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.242398][ T70] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.263400][ T70] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.282239][ T70] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.295041][ T3464] IPVS: stop unused estimator thread 0... [ 617.827161][ T9070] hsr_slave_0: entered promiscuous mode [ 617.835029][ T9070] hsr_slave_1: entered promiscuous mode [ 617.836086][ T9070] debugfs: 'hsr0' already exists in 'hsr' [ 617.836113][ T9070] Cannot create hsr debugfs directory [ 619.904681][ T3464] bridge_slave_1: left allmulticast mode [ 619.904708][ T3464] bridge_slave_1: left promiscuous mode [ 619.904917][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.991750][ T3464] bridge_slave_0: left allmulticast mode [ 619.991784][ T3464] bridge_slave_0: left promiscuous mode [ 619.992162][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.091068][ T3464] bridge_slave_1: left allmulticast mode [ 620.091093][ T3464] bridge_slave_1: left promiscuous mode [ 620.091280][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.139120][ T3464] bridge_slave_0: left allmulticast mode [ 620.139155][ T3464] bridge_slave_0: left promiscuous mode [ 620.139456][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.588442][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.668562][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.733647][ T3464] bond0 (unregistering): Released all slaves [ 621.526777][ T9430] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 621.820316][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.395013][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.525436][ T3464] bond0 (unregistering): Released all slaves [ 624.747058][ T9286] chnl_net:caif_netlink_parms(): no params data found [ 626.680111][ T3464] hsr_slave_0: left promiscuous mode [ 626.721704][ T3464] hsr_slave_1: left promiscuous mode [ 626.723960][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.768919][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.950760][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.068547][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.082404][ T9492] netlink: 'syz.6.828': attribute type 2 has an invalid length. [ 628.082431][ T9492] netlink: 'syz.6.828': attribute type 9 has an invalid length. [ 628.082447][ T9492] netlink: 'syz.6.828': attribute type 1 has an invalid length. [ 628.082461][ T9492] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.828'. [ 628.588084][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 628.718195][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 629.960510][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.960586][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.213684][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.230897][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.239445][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.242453][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.243894][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 632.281793][ T61] Bluetooth: hci5: command tx timeout [ 633.938241][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 635.249915][ T9533] fuse: Unknown parameter 'group_id00000000000000000000' [ 635.410227][ T61] Bluetooth: hci5: command tx timeout [ 635.708337][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 637.708882][ T61] Bluetooth: hci5: command tx timeout [ 639.717475][ T61] Bluetooth: hci5: command tx timeout [ 640.327563][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.327709][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.327968][ T9286] bridge_slave_0: entered allmulticast mode [ 640.366310][ T9286] bridge_slave_0: entered promiscuous mode [ 640.455656][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.455797][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.456004][ T9286] bridge_slave_1: entered allmulticast mode [ 640.492637][ T9286] bridge_slave_1: entered promiscuous mode [ 643.231922][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.512151][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.784412][ T9286] team0: Port device team_slave_0 added [ 646.812086][ T9286] team0: Port device team_slave_1 added [ 647.563952][ T9628] No control pipe specified [ 649.733661][ T9619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 649.733827][ T9619] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 649.906987][ T9619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 649.907119][ T9619] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 650.011776][ T9619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 650.011907][ T9619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 650.045986][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.046005][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.046036][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.102141][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.102160][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.102189][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.166809][ T9619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.166956][ T9619] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 651.030307][ T9619] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 651.551257][ T9619] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 651.551365][ T9619] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 651.807626][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 651.957474][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 652.037459][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 652.152049][ T9619] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 652.197393][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 652.730167][ T9286] hsr_slave_0: entered promiscuous mode [ 652.731648][ T9286] hsr_slave_1: entered promiscuous mode [ 652.887996][ T9664] No control pipe specified [ 653.565488][ T61] Bluetooth: hci5: command 0x0c1a tx timeout [ 653.897473][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 653.937796][ T9671] fuse: Unknown parameter 'group_id00000000000000000000' [ 654.186250][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 654.186291][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 654.439778][ T8886] Bluetooth: hci4: command 0x0c1a tx timeout [ 655.765950][ T8886] Bluetooth: hci5: command 0x0c1a tx timeout [ 656.593947][ T8886] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.797512][ T8886] Bluetooth: hci5: command 0x0c1a tx timeout [ 659.001637][ T155] bridge_slave_1: left allmulticast mode [ 659.001669][ T155] bridge_slave_1: left promiscuous mode [ 659.001944][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.632632][ T155] bridge_slave_0: left allmulticast mode [ 660.632665][ T155] bridge_slave_0: left promiscuous mode [ 660.632955][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.826933][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'. [ 662.574430][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.988476][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.074474][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.087597][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.089150][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.102842][ T155] bond0 (unregistering): Released all slaves [ 663.376756][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.416038][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.520508][ T61] Bluetooth: hci2: command tx timeout [ 666.109332][ T155] hsr_slave_0: left promiscuous mode [ 666.160527][ T155] hsr_slave_1: left promiscuous mode [ 666.161961][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.181481][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.577793][ T61] Bluetooth: hci2: command tx timeout [ 669.891837][ T61] Bluetooth: hci2: command tx timeout [ 672.305247][ T61] Bluetooth: hci2: command tx timeout [ 673.539540][ T155] team0 (unregistering): Port device team_slave_1 removed [ 675.808196][ T155] team0 (unregistering): Port device team_slave_0 removed [ 681.705766][ T9506] chnl_net:caif_netlink_parms(): no params data found [ 684.050578][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.050721][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.050970][ T9506] bridge_slave_0: entered allmulticast mode [ 684.054348][ T9506] bridge_slave_0: entered promiscuous mode [ 684.107893][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.108079][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.108326][ T9506] bridge_slave_1: entered allmulticast mode [ 684.112279][ T9506] bridge_slave_1: entered promiscuous mode [ 684.406927][ T9506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.469694][ T9506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.159172][ T9928] binder: 9927:9928 ioctl 4018620d 0 returned -22 [ 687.254267][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.146059][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.166916][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.677606][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.727343][ T6215] bridge_slave_1: left allmulticast mode [ 688.727374][ T6215] bridge_slave_1: left promiscuous mode [ 688.727633][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.813751][ T6215] bridge_slave_0: left allmulticast mode [ 688.813797][ T6215] bridge_slave_0: left promiscuous mode [ 688.814118][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.850033][ T980] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 689.023053][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 689.034946][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.034981][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.035031][ T980] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 689.035055][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.085246][ T980] usb 1-1: config 0 descriptor?? [ 689.572732][ T980] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 689.658287][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.778801][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.828016][ T5892] usb 1-1: USB disconnect, device number 34 [ 689.895490][ T6215] bond0 (unregistering): Released all slaves [ 689.970884][ T9506] team0: Port device team_slave_0 added [ 690.154475][ T9744] chnl_net:caif_netlink_parms(): no params data found [ 691.557862][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.557946][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.202225][ T8886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.237954][ T8886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.241619][ T8886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.243660][ T8886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.244907][ T8886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.390044][ T6215] hsr_slave_0: left promiscuous mode [ 692.453064][ T6215] hsr_slave_1: left promiscuous mode [ 692.462183][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.477459][ T5891] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 692.542719][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.648820][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 692.660645][ T5891] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 692.660678][ T5891] usb 7-1: config 0 has no interface number 0 [ 692.660738][ T5891] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 692.663744][ T5891] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 692.663778][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 692.663802][ T5891] usb 7-1: Product: syz [ 692.663820][ T5891] usb 7-1: SerialNumber: syz [ 692.672802][ T5891] usb 7-1: config 0 descriptor?? [ 692.760482][ T5891] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 692.785497][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input25 [ 693.293128][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 693.293576][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 693.294479][ T8848] usb 7-1: USB disconnect, device number 3 [ 693.296719][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 693.296747][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 693.814451][ T8848] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 694.367504][ T8886] Bluetooth: hci4: command tx timeout [ 694.449069][ T6215] team0 (unregistering): Port device team_slave_1 removed [ 694.609448][ T6215] team0 (unregistering): Port device team_slave_0 removed [ 695.272928][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.835213][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.228254][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.409934][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.934316][ T8886] Bluetooth: hci4: command tx timeout [ 697.288638][ T5892] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 697.450502][ T5892] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 697.450532][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.450553][ T5892] usb 1-1: config 0 has no interface number 0 [ 697.478224][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 697.478261][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.478287][ T5892] usb 1-1: Product: syz [ 697.478303][ T5892] usb 1-1: Manufacturer: syz [ 697.478319][ T5892] usb 1-1: SerialNumber: syz [ 697.512558][ T5892] usb 1-1: config 0 descriptor?? [ 697.547232][ T5892] hub 1-1:0.31: bad descriptor, ignoring hub [ 697.555873][ T5892] hub 1-1:0.31: probe with driver hub failed with error -5 [ 697.566483][ T5892] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 697.613669][ T5892] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 697.616510][ T5892] uvcvideo 1-1:0.31: Failed to create links for entity 6 [ 697.616535][ T5892] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 697.887930][ T5892] usb 1-1: USB disconnect, device number 35 [ 698.069774][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.139732][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.139959][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.140177][ T9744] bridge_slave_0: entered allmulticast mode [ 698.143220][ T9744] bridge_slave_0: entered promiscuous mode [ 698.148621][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.154096][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.154395][ T9744] bridge_slave_1: entered allmulticast mode [ 698.207778][ T9744] bridge_slave_1: entered promiscuous mode [ 698.351671][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.500086][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.771160][ T9744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.815771][ T9744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.942025][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.259905][ T8886] Bluetooth: hci4: command tx timeout [ 699.415230][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.465255][ T8886] Bluetooth: hci4: command tx timeout [ 701.587510][ T9744] team0: Port device team_slave_0 added [ 701.633046][ T9744] team0: Port device team_slave_1 added [ 703.200496][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.200515][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.200543][ T9744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.228089][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.228111][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.228146][ T9744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.500163][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.835134][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.706698][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.759308][T10120] input: syz0 as /devices/virtual/input/input26 [ 706.099576][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.028690][ T6215] bridge_slave_1: left allmulticast mode [ 707.028723][ T6215] bridge_slave_1: left promiscuous mode [ 707.028990][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.080663][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.129004][ T6215] bridge_slave_0: left allmulticast mode [ 707.129035][ T6215] bridge_slave_0: left promiscuous mode [ 707.129286][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.428619][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.548337][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.683725][ T6215] bond0 (unregistering): Released all slaves [ 709.000464][ T9744] hsr_slave_0: entered promiscuous mode [ 709.003479][ T9744] hsr_slave_1: entered promiscuous mode [ 709.448764][T10151] Bluetooth: MGMT ver 1.23 [ 709.874660][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.616276][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.946895][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.900301][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.178056][ T6215] team0 (unregistering): Port device team_slave_0 removed [ 712.259263][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.441765][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.349632][ T9991] chnl_net:caif_netlink_parms(): no params data found [ 721.863770][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.876620][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.876768][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.877010][ T9991] bridge_slave_0: entered allmulticast mode [ 721.920251][ T9991] bridge_slave_0: entered promiscuous mode [ 722.011610][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.011834][ T9991] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.012084][ T9991] bridge_slave_1: entered allmulticast mode [ 722.015482][ T9991] bridge_slave_1: entered promiscuous mode [ 722.151580][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.188302][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.312830][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.702064][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.103805][T10238] binder: 10237:10238 ioctl c0306201 0 returned -14 [ 725.160325][ T9991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.769929][ T9991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.987821][ T8886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.995953][ T8886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 727.683954][ T8886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 727.685955][ T8886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 727.686782][ T8886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 728.432312][ T9991] team0: Port device team_slave_0 added [ 728.507035][ T9991] team0: Port device team_slave_1 added [ 730.092728][ T61] Bluetooth: hci5: command tx timeout [ 730.729408][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.729755][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.729958][ T9991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.505854][ T9991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.505873][ T9991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.505904][ T9991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.187896][ T61] Bluetooth: hci5: command tx timeout [ 732.752875][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.247159][ T9991] hsr_slave_0: entered promiscuous mode [ 733.253027][ T9991] hsr_slave_1: entered promiscuous mode [ 733.254056][ T9991] debugfs: 'hsr0' already exists in 'hsr' [ 733.254084][ T9991] Cannot create hsr debugfs directory [ 733.998269][T10322] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 734.251551][ T61] Bluetooth: hci5: command tx timeout [ 736.518807][ T61] Bluetooth: hci5: command tx timeout [ 740.813850][T10257] chnl_net:caif_netlink_parms(): no params data found [ 744.181645][ T9991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.247471][ T2170] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 744.300087][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.300206][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.300456][T10257] bridge_slave_0: entered allmulticast mode [ 744.303008][T10257] bridge_slave_0: entered promiscuous mode [ 744.305342][ T9991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.374815][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.374956][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.375203][T10257] bridge_slave_1: entered allmulticast mode [ 744.395673][T10257] bridge_slave_1: entered promiscuous mode [ 744.398050][ T2170] usb 7-1: Using ep0 maxpacket: 16 [ 744.407144][ T2170] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 744.407175][ T2170] usb 7-1: config 0 has no interface number 0 [ 744.410384][ T2170] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 744.428982][ T2170] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 744.429020][ T2170] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 744.429044][ T2170] usb 7-1: Product: syz [ 744.429061][ T2170] usb 7-1: SerialNumber: syz [ 744.447836][ T9991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.456189][ T2170] usb 7-1: config 0 descriptor?? [ 744.489219][ T2170] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 744.534375][ T2170] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input27 [ 744.895853][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 744.896146][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 744.896446][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 744.896700][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 744.896995][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 744.897769][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 744.897781][ T5805] usb 7-1: USB disconnect, device number 4 [ 744.897800][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 745.017041][ T9991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 745.039145][ T5805] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 746.082356][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.349341][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.799330][ T6215] bridge_slave_1: left allmulticast mode [ 746.799363][ T6215] bridge_slave_1: left promiscuous mode [ 746.799633][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.834095][ T6215] bridge_slave_0: left allmulticast mode [ 747.834128][ T6215] bridge_slave_0: left promiscuous mode [ 747.834397][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.299781][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.281351][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.530768][ T6215] bond0 (unregistering): Released all slaves [ 751.307168][ T61] ================================================================== [ 751.307189][ T61] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.307237][ T61] Read of size 8 at addr ffff88801ef7a7a0 by task kworker/u9:0/61 [ 751.307255][ T61] [ 751.307278][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 751.307303][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.307321][ T61] Workqueue: hci0 hci_rx_work [ 751.307367][ T61] Call Trace: [ 751.307380][ T61] [ 751.307390][ T61] dump_stack_lvl+0x189/0x250 [ 751.307420][ T61] ? rcu_is_watching+0x15/0xb0 [ 751.307449][ T61] ? __kasan_check_byte+0x12/0x40 [ 751.307475][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.307501][ T61] ? rcu_is_watching+0x15/0xb0 [ 751.307529][ T61] ? lock_release+0x4b/0x3e0 [ 751.307556][ T61] ? __virt_addr_valid+0x1c8/0x5c0 [ 751.307583][ T61] ? __virt_addr_valid+0x4a5/0x5c0 [ 751.307613][ T61] print_report+0xca/0x240 [ 751.307654][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.307681][ T61] kasan_report+0x118/0x150 [ 751.307707][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.307740][ T61] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.307769][ T61] l2cap_connect_cfm+0x37a/0x1040 [ 751.307806][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 751.307835][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 751.307857][ T61] hci_connect_cfm+0x95/0x140 [ 751.307893][ T61] le_conn_complete_evt+0xfb8/0x1500 [ 751.307940][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 751.307981][ T61] ? irqentry_exit+0x74/0x90 [ 751.308018][ T61] ? skb_pull_data+0xfb/0x200 [ 751.308046][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 751.308086][ T61] hci_event_packet+0x78f/0x1200 [ 751.308118][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 751.308153][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 751.308183][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 751.308224][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 751.308263][ T61] hci_rx_work+0x46a/0xe80 [ 751.308297][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 751.308335][ T61] process_scheduled_works+0xae1/0x17b0 [ 751.308394][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.308445][ T61] worker_thread+0x8a0/0xda0 [ 751.308485][ T61] kthread+0x711/0x8a0 [ 751.308516][ T61] ? __pfx_worker_thread+0x10/0x10 [ 751.308537][ T61] ? __pfx_kthread+0x10/0x10 [ 751.308561][ T61] ? rt_spin_unlock+0x150/0x200 [ 751.308594][ T61] ? rt_spin_unlock+0x161/0x200 [ 751.308622][ T61] ? __pfx_kthread+0x10/0x10 [ 751.308655][ T61] ret_from_fork+0x4bc/0x870 [ 751.308693][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 751.308733][ T61] ? __switch_to_asm+0x39/0x70 [ 751.308764][ T61] ? __switch_to_asm+0x33/0x70 [ 751.308793][ T61] ? __pfx_kthread+0x10/0x10 [ 751.308820][ T61] ret_from_fork_asm+0x1a/0x30 [ 751.308864][ T61] [ 751.308872][ T61] [ 751.308882][ T61] Allocated by task 61: [ 751.308894][ T61] kasan_save_track+0x3e/0x80 [ 751.308911][ T61] __kasan_kmalloc+0x93/0xb0 [ 751.308931][ T61] __kmalloc_noprof+0x233/0x7d0 [ 751.308950][ T61] sk_prot_alloc+0xe7/0x220 [ 751.308980][ T61] sk_alloc+0x3a/0x370 [ 751.309009][ T61] bt_sock_alloc+0x3b/0x310 [ 751.309036][ T61] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 751.309059][ T61] l2cap_connect_cfm+0x37a/0x1040 [ 751.309078][ T61] hci_connect_cfm+0x95/0x140 [ 751.309105][ T61] le_conn_complete_evt+0xfb8/0x1500 [ 751.309136][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 751.309164][ T61] hci_event_packet+0x78f/0x1200 [ 751.309187][ T61] hci_rx_work+0x46a/0xe80 [ 751.309210][ T61] process_scheduled_works+0xae1/0x17b0 [ 751.309242][ T61] worker_thread+0x8a0/0xda0 [ 751.309259][ T61] kthread+0x711/0x8a0 [ 751.309281][ T61] ret_from_fork+0x4bc/0x870 [ 751.309310][ T61] ret_from_fork_asm+0x1a/0x30 [ 751.309358][ T61] [ 751.309363][ T61] Freed by task 10493: [ 751.309373][ T61] kasan_save_track+0x3e/0x80 [ 751.309391][ T61] __kasan_save_free_info+0x46/0x50 [ 751.309420][ T61] __kasan_slab_free+0x5c/0x80 [ 751.309439][ T61] kfree+0x197/0x950 [ 751.309470][ T61] __sk_destruct+0x4e4/0x670 [ 751.309502][ T61] l2cap_sock_cleanup_listen+0xda/0x3e0 [ 751.309523][ T61] l2cap_sock_release+0x6a/0x230 [ 751.309543][ T61] sock_close+0xc3/0x240 [ 751.309564][ T61] __fput+0x45b/0xa80 [ 751.309588][ T61] task_work_run+0x1d4/0x260 [ 751.309613][ T61] get_signal+0x11c4/0x1310 [ 751.309643][ T61] arch_do_signal_or_restart+0xa0/0x790 [ 751.309688][ T61] exit_to_user_mode_loop+0x72/0x130 [ 751.309708][ T61] do_syscall_64+0x2bd/0xfa0 [ 751.309741][ T61] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.309761][ T61] [ 751.309766][ T61] The buggy address belongs to the object at ffff88801ef7a000 [ 751.309766][ T61] which belongs to the cache kmalloc-2k of size 2048 [ 751.309785][ T61] The buggy address is located 1952 bytes inside of [ 751.309785][ T61] freed 2048-byte region [ffff88801ef7a000, ffff88801ef7a800) [ 751.309808][ T61] [ 751.309814][ T61] The buggy address belongs to the physical page: [ 751.309838][ T61] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ef78 [ 751.309859][ T61] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 751.309877][ T61] anon flags: 0x80000000000040(head|node=0|zone=1) [ 751.309905][ T61] page_type: f5(slab) [ 751.309925][ T61] raw: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 751.309944][ T61] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 751.309965][ T61] head: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 751.309983][ T61] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 751.310004][ T61] head: 0080000000000003 ffffea00007bde01 00000000ffffffff 00000000ffffffff [ 751.310022][ T61] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 751.310034][ T61] page dumped because: kasan: bad access detected [ 751.310048][ T61] page_owner tracks the page as allocated [ 751.310056][ T61] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9665395230, free_ts 0 [ 751.310094][ T61] post_alloc_hook+0x240/0x2a0 [ 751.310114][ T61] get_page_from_freelist+0x28c0/0x2960 [ 751.310138][ T61] __alloc_frozen_pages_noprof+0x181/0x370 [ 751.310162][ T61] alloc_pages_mpol+0xd1/0x380 [ 751.310184][ T61] allocate_slab+0x96/0x3a0 [ 751.310213][ T61] ___slab_alloc+0xb12/0x13f0 [ 751.310239][ T61] __slab_alloc+0xc6/0x1f0 [ 751.310262][ T61] __kmalloc_cache_noprof+0xec/0x6c0 [ 751.310282][ T61] device_create_with_groups+0x12f/0x2f0 [ 751.310312][ T61] misc_register+0x2f6/0x550 [ 751.310342][ T61] cuse_init+0x10a/0x140 [ 751.310364][ T61] do_one_initcall+0x236/0x820 [ 751.310390][ T61] do_initcall_level+0x104/0x190 [ 751.310418][ T61] do_initcalls+0x59/0xa0 [ 751.310443][ T61] kernel_init_freeable+0x334/0x4b0 [ 751.310471][ T61] kernel_init+0x1d/0x1d0 [ 751.310493][ T61] page_owner free stack trace missing [ 751.310502][ T61] [ 751.310507][ T61] Memory state around the buggy address: [ 751.310519][ T61] ffff88801ef7a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.310534][ T61] ffff88801ef7a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.310549][ T61] >ffff88801ef7a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 751.310561][ T61] ^ [ 751.310573][ T61] ffff88801ef7a800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 751.310588][ T61] ffff88801ef7a880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 751.310599][ T61] ================================================================== [ 751.310677][ T61] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 751.310696][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 751.310721][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.310737][ T61] Workqueue: hci0 hci_rx_work [ 751.310765][ T61] Call Trace: [ 751.310774][ T61] [ 751.310783][ T61] dump_stack_lvl+0x99/0x250 [ 751.310811][ T61] ? __asan_memcpy+0x40/0x70 [ 751.310846][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.310873][ T61] ? __pfx__printk+0x10/0x10 [ 751.310907][ T61] vpanic+0x237/0x6d0 [ 751.310929][ T61] ? __pfx_vpanic+0x10/0x10 [ 751.310949][ T61] ? preempt_schedule+0xae/0xc0 [ 751.310982][ T61] ? __pfx_preempt_schedule+0x10/0x10 [ 751.311021][ T61] panic+0xb9/0xc0 [ 751.311040][ T61] ? __pfx_panic+0x10/0x10 [ 751.311063][ T61] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 751.311105][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.311130][ T61] check_panic_on_warn+0x89/0xb0 [ 751.311160][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.311186][ T61] end_report+0x78/0x160 [ 751.311210][ T61] kasan_report+0x129/0x150 [ 751.311235][ T61] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.311268][ T61] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 751.311297][ T61] l2cap_connect_cfm+0x37a/0x1040 [ 751.311326][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 751.311353][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 751.311376][ T61] hci_connect_cfm+0x95/0x140 [ 751.311411][ T61] le_conn_complete_evt+0xfb8/0x1500 [ 751.311455][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 751.311493][ T61] ? irqentry_exit+0x74/0x90 [ 751.311529][ T61] ? skb_pull_data+0xfb/0x200 [ 751.311556][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 751.311592][ T61] hci_event_packet+0x78f/0x1200 [ 751.311622][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 751.311662][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 751.311691][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 751.311731][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 751.311772][ T61] hci_rx_work+0x46a/0xe80 [ 751.311803][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 751.311841][ T61] process_scheduled_works+0xae1/0x17b0 [ 751.311893][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.311940][ T61] worker_thread+0x8a0/0xda0 [ 751.311975][ T61] kthread+0x711/0x8a0 [ 751.312004][ T61] ? __pfx_worker_thread+0x10/0x10 [ 751.312024][ T61] ? __pfx_kthread+0x10/0x10 [ 751.312046][ T61] ? rt_spin_unlock+0x150/0x200 [ 751.312076][ T61] ? rt_spin_unlock+0x161/0x200 [ 751.312103][ T61] ? __pfx_kthread+0x10/0x10 [ 751.312130][ T61] ret_from_fork+0x4bc/0x870 [ 751.312166][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 751.312205][ T61] ? __switch_to_asm+0x39/0x70 [ 751.312235][ T61] ? __switch_to_asm+0x33/0x70 [ 751.312265][ T61] ? __pfx_kthread+0x10/0x10 [ 751.312292][ T61] ret_from_fork_asm+0x1a/0x30 [ 751.312335][ T61] [ 751.312708][ T61] Kernel Offset: disabled