last executing test programs: 20m7.350162685s ago: executing program 3 (id=1242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4", 0x19}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 20m7.195399078s ago: executing program 3 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, 0x0) write$binfmt_script(r4, &(0x7f0000005e80)={'#! ', './file0'}, 0xb) 20m2.894047362s ago: executing program 3 (id=1253): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x4}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m58.819893015s ago: executing program 3 (id=1265): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 19m53.378199821s ago: executing program 1 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) 19m50.245594276s ago: executing program 1 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpeername$ax25(r5, &(0x7f00000003c0)={{0x3, @rose}, [@bcast, @rose, @default, @netrom, @netrom, @rose, @bcast]}, &(0x7f0000000440)=0x48) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {0x9}, {}, {0x20}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYBLOB="0909000000000000140012800b00010067656e6576650000040002800a000100", @ANYRESHEX=r9], 0x40}}, 0x0) 19m50.196449172s ago: executing program 3 (id=1287): prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x3) 19m49.039520941s ago: executing program 1 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 19m48.996550912s ago: executing program 3 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 19m47.787086383s ago: executing program 1 (id=1292): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 19m47.508088537s ago: executing program 1 (id=1294): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x4}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19m47.194089745s ago: executing program 1 (id=1298): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 19m33.862073264s ago: executing program 32 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 19m31.861996254s ago: executing program 33 (id=1298): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 19m25.558249552s ago: executing program 4 (id=1331): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 19m25.451646786s ago: executing program 4 (id=1332): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0x114) 19m23.102245241s ago: executing program 4 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m22.0083822s ago: executing program 4 (id=1338): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f00000028c0)=""/4098, 0x1052}], 0x2) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @pix_mp={0xfffffffb, 0x1c6c, 0x34524742, 0x1, 0x2, [{0x5, 0x9}, {0x87, 0x6}, {0x4, 0x9}, {0x8dae, 0x3}, {0x6, 0x60000000}, {0x10}, {0x7fffffff, 0x4}, {0x10000008, 0x1}], 0x5, 0x7, 0x4, 0x1, 0x2}}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = fsmount(r3, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0x22, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000000)={0x4400, 0x0, 0x10}, 0x18) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma -cp'], 0xe) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$llc(r7, &(0x7f0000000080)={0x1a, 0x103, 0x10, 0x6, 0x2, 0x8, @local}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000000180)=[{0x80, 0x1000}]}) 19m20.742247612s ago: executing program 4 (id=1339): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r0, 0x0, 0x0) 19m20.469223931s ago: executing program 4 (id=1341): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001d002100fefb1c00050000000700000005000400000000ffff"], 0x24}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x5, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x2, 0xc6a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016000b63d25a80648c2594f91324fc60be59abd819f1e077d2d39e4796a1c07f6d0fdaf8d7ce1cbfa3cf40844f768faf88b0a95c8a0e62db049702e345e2a183d1740a9bdfaf24ebf9a9c1782c2bbd8a7ee92df9ff1844b0cff23d15af94096ff4616ce6b19b834c8a3865f758e487ebb9d9434574e92f72d6ee6c183765982fdcaa437bc73bb958bb95c7859c68aca07a3a4d3e1448069042912ee8b20bf1555d80f045f11995311bd8a3c546f49d5dc2333bd544a660adc0abff62fb55e1f78507b4d97cfb1b50877795eb147c", 0xd2}], 0x1}, 0x0) pipe2(0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) r4 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x38}}, 0x0) 19m5.297529584s ago: executing program 34 (id=1341): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001d002100fefb1c00050000000700000005000400000000ffff"], 0x24}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x5, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x2, 0xc6a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016000b63d25a80648c2594f91324fc60be59abd819f1e077d2d39e4796a1c07f6d0fdaf8d7ce1cbfa3cf40844f768faf88b0a95c8a0e62db049702e345e2a183d1740a9bdfaf24ebf9a9c1782c2bbd8a7ee92df9ff1844b0cff23d15af94096ff4616ce6b19b834c8a3865f758e487ebb9d9434574e92f72d6ee6c183765982fdcaa437bc73bb958bb95c7859c68aca07a3a4d3e1448069042912ee8b20bf1555d80f045f11995311bd8a3c546f49d5dc2333bd544a660adc0abff62fb55e1f78507b4d97cfb1b50877795eb147c", 0xd2}], 0x1}, 0x0) pipe2(0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) r4 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x38}}, 0x0) 7m46.673446704s ago: executing program 2 (id=2669): syz_open_procfs(0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$kcm(0x29, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 7m40.02260204s ago: executing program 2 (id=2672): close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) 7m39.34781605s ago: executing program 2 (id=2675): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x51, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast]}, 0x30}, 0x1, 0x0, 0x0, 0x40009}, 0x804) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x0) 7m39.156827049s ago: executing program 2 (id=2676): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x91, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x19) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x0) 7m37.802241995s ago: executing program 2 (id=2683): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x8, 0xfffffffc, 0x8, 0x8000, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x200, 0x5, 0x2}) 7m35.611874843s ago: executing program 2 (id=2688): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x189100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f00000005c0), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000380)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) 7m6.783732322s ago: executing program 0 (id=2795): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x57, &(0x7f0000001040)=[@op={0x18}], 0x18, 0x880}], 0x1, 0x80001) read$alg(r1, 0x0, 0x0) 7m5.867909629s ago: executing program 0 (id=2802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x36) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005b80)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000", 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x7888263725b6bafc, 0x80) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x1000}) 7m4.869437255s ago: executing program 0 (id=2803): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x91, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9441fdc4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x19) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) getdents64(r2, 0x0, 0x0) 7m3.894159483s ago: executing program 0 (id=2812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x36) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005b80)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000", 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x7888263725b6bafc, 0x80) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x1000}) 7m1.338799416s ago: executing program 0 (id=2819): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6m57.594788839s ago: executing program 0 (id=2832): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 6m42.216019758s ago: executing program 35 (id=2832): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 6m23.6978172s ago: executing program 6 (id=2920): syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m23.552479745s ago: executing program 6 (id=2922): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200, 0x0, 0x1, 0xf, 0x1}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20004054) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) 6m22.342829092s ago: executing program 6 (id=2924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a0000010900020073797a31000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6m22.089558071s ago: executing program 6 (id=2927): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x200002, 0x3, 0x42}) 6m18.71398059s ago: executing program 6 (id=2936): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r0}}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 6m16.80502515s ago: executing program 6 (id=2941): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xdd02}}], 0x18}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x22) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x44, 0x20203843, 0x3, [0x2], [0x80ffff, 0xfffd, 0xfffffff9], [0x0, 0xfffffffd, 0x8, 0xfffffffe], [0x400000000000001, 0x1, 0x5, 0xa2c6]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010102ffffffeb0000000000df00"], 0x14}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) io_setup(0x4005, &(0x7f0000000400)=0x0) io_submit(r7, 0xffffff56, 0xfffffffffffffffe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ecryptfs\x00', 0x1214000, 0x0) 6m1.655097999s ago: executing program 36 (id=2941): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xdd02}}], 0x18}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x22) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x44, 0x20203843, 0x3, [0x2], [0x80ffff, 0xfffd, 0xfffffff9], [0x0, 0xfffffffd, 0x8, 0xfffffffe], [0x400000000000001, 0x1, 0x5, 0xa2c6]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010102ffffffeb0000000000df00"], 0x14}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) io_setup(0x4005, &(0x7f0000000400)=0x0) io_submit(r7, 0xffffff56, 0xfffffffffffffffe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ecryptfs\x00', 0x1214000, 0x0) 4.044656683s ago: executing program 7 (id=3640): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x1b4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.708498146s ago: executing program 5 (id=3641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 3.558229339s ago: executing program 5 (id=3642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 3.517859944s ago: executing program 7 (id=3643): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x420) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000180)=""/81) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quot']) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000086) 2.314369083s ago: executing program 5 (id=3644): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB='\"'], 0x33) close(r0) 2.174125228s ago: executing program 5 (id=3645): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200, 0x0, 0x1, 0xf, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20004054) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 1.922380393s ago: executing program 7 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x81, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x1c, 0x69, 0x1, 0x0, 0x0, "", [@generic="9a35012b8891da90f7"]}, 0x1c}], 0x1}, 0x0) 384.168504ms ago: executing program 7 (id=3647): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x20000000) 254.039785ms ago: executing program 7 (id=3648): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="580000eade05f20400000000030000000000393c", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000108000000000000005da100000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000040900010073797a3000000000080003400000000a1488080000000100000000000000"], 0x64}}, 0x0) 236.441747ms ago: executing program 5 (id=3649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 200.697802ms ago: executing program 5 (id=3650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) r4 = dup(r3) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={0x0, @sco, @ax25={0x3, @bcast, 0x7}, @generic={0x28, "e24c346f513e1be718aba45eee59"}, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa81, 0x3, 0x2}) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f00000001c0)=0x30) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 0s ago: executing program 7 (id=3651): r0 = gettid() r1 = getpid() r2 = syz_usb_connect(0x0, 0xab, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x8d, 0x36, 0xc6, 0x8, 0x424, 0xc001, 0xe1c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0xc7, 0xfe, 0x20, 0x3, [{{0x9, 0x4, 0x2, 0x5, 0x3, 0xd1, 0x13, 0x5c, 0x7, [], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x3, 0xc, 0x0, [@generic={0x63, 0x10, "6aadb2f61621d7789ba95668cfe5a592baf680c4a0867856a6edb8fb885c9f6c025cc1fe144a6fdb1a7cf8c0e5137579c7f2384e07b896cfe6c9ab0b12f0a834144efd28b8226fd7771227338ea5a308b589ad8c27ced274270fa636500386c421"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5, 0x9a}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x2, 0x2, 0x7, [@generic={0x2, 0x35}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xbe, 0x80, 0x0, 0x0, 0x3}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001400)={0x14, 0x0, 0x0}, &(0x7f0000001540)={0x1c, &(0x7f0000001440)={0x20, 0xe, 0x6f, "0e38b1b7c9b47e70bd825f7d66660d3c5195a814f203e84f8c51ad55302d13d4c3b29ef33ef058dab1f4d671ef22c57805c279d4960f201a733a3dcf0f67cfa19a1c1ad70352c6e3a839c7801358f8a2e936c2a2228a2f5d2e0eef6e5874f1dbbf084d10bb038d1ee7871dbfd73ed7"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0xee}, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpgid(r0) kernel console output (not intermixed with test programs): w USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1292.846529][ T5909] usb 1-1: Manufacturer: syz [ 1292.896209][ T5909] usb 1-1: config 0 descriptor?? [ 1293.829434][ T5909] usbhid 1-1:0.0: can't add hid device: -32 [ 1293.829572][ T5909] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1293.934912][ T5909] usb 1-1: USB disconnect, device number 72 [ 1294.015680][T15172] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1296.643029][ T69] hsr_slave_0: left promiscuous mode [ 1296.685741][ T69] hsr_slave_1: left promiscuous mode [ 1296.686755][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.686780][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.723001][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.723029][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.887769][T15188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1296.915133][ T69] veth1_macvtap: left promiscuous mode [ 1296.915246][ T69] veth0_macvtap: left promiscuous mode [ 1296.916748][ T69] veth1_vlan: left promiscuous mode [ 1296.917066][ T69] veth0_vlan: left promiscuous mode [ 1298.921597][T15209] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1300.387126][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.387200][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.411178][T15225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2847'. [ 1302.374551][T15234] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1302.646999][T15226] Bluetooth: hci4: command 0x0406 tx timeout [ 1303.964022][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2853'. [ 1306.975320][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1307.252216][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1309.672245][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2863'. [ 1309.736326][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2863'. [ 1311.378231][T15226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1311.402281][T15226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1311.414526][T15226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1311.416443][T15226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1311.417259][T15226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1312.204703][T15285] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2868'. [ 1313.388652][T15279] lo speed is unknown, defaulting to 1000 [ 1313.493804][T12425] Bluetooth: hci0: command tx timeout [ 1313.572389][T14808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1314.717087][T14808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1314.921627][T14808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1315.090807][T14808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1315.230170][T15317] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1315.240257][ T69] IPVS: stop unused estimator thread 0... [ 1315.825379][T12425] Bluetooth: hci0: command tx timeout [ 1316.885772][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'. [ 1317.713817][T15338] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2880'. [ 1317.891526][T12425] Bluetooth: hci0: command tx timeout [ 1319.694831][T15279] chnl_net:caif_netlink_parms(): no params data found [ 1319.992209][T12425] Bluetooth: hci0: command tx timeout [ 1320.038505][T15226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1320.054600][T15226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1320.063440][T15226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1320.067086][T15226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1320.067855][T15226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1320.141810][ T5946] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1320.163734][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1320.178014][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.271586][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1320.314696][ T10] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1320.314754][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1320.314787][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1320.314798][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.317791][ T10] usb 7-1: config 0 descriptor?? [ 1320.377513][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1320.531659][ T5946] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1320.662259][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1320.793185][ T5946] usb usb6-port1: attempt power cycle [ 1320.825175][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.831722][T11990] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1320.991644][T11990] usb 8-1: Using ep0 maxpacket: 16 [ 1320.993930][T11990] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.993963][T11990] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.993984][T11990] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1320.994023][T11990] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1320.994046][T11990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.997628][T11990] usb 8-1: config 0 descriptor?? [ 1321.131672][ T5946] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1321.152770][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1321.289490][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.352835][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.353144][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.353766][T15279] bridge_slave_0: entered allmulticast mode [ 1321.356370][T15279] bridge_slave_0: entered promiscuous mode [ 1321.359439][T15368] lo speed is unknown, defaulting to 1000 [ 1321.360921][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.361105][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.361343][T15279] bridge_slave_1: entered allmulticast mode [ 1321.364940][T15279] bridge_slave_1: entered promiscuous mode [ 1321.391796][ T5946] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1321.435936][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1321.548691][ T5946] usb usb6-port1: unable to enumerate USB device [ 1321.612220][T11990] usbhid 8-1:0.0: can't add hid device: -71 [ 1321.612353][T11990] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1321.617781][T11990] usb 8-1: USB disconnect, device number 4 [ 1321.805176][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.840796][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.865974][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.091722][T15279] team0: Port device team_slave_0 added [ 1322.108440][T15279] team0: Port device team_slave_1 added [ 1322.132497][T12425] Bluetooth: hci2: command tx timeout [ 1323.400089][ T5939] usb 7-1: USB disconnect, device number 5 [ 1323.581130][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.581149][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.581183][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.675461][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.675479][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.675505][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.893056][T15398] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2906'. [ 1324.071598][ T5939] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1324.622454][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 1324.804437][ T5939] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1324.804467][ T5939] usb 7-1: config 0 has no interface number 0 [ 1324.804522][ T5939] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1324.811326][ T5939] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1324.811355][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.820739][ T5939] usb 7-1: Product: syz [ 1324.820763][ T5939] usb 7-1: Manufacturer: syz [ 1324.820779][ T5939] usb 7-1: SerialNumber: syz [ 1324.848198][T12425] Bluetooth: hci2: command tx timeout [ 1324.961037][ T5939] usb 7-1: config 0 descriptor?? [ 1324.980781][ T5939] smsc75xx v1.0.0 [ 1325.141295][T15279] hsr_slave_0: entered promiscuous mode [ 1325.142906][T15279] hsr_slave_1: entered promiscuous mode [ 1325.162377][ T5946] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1325.253150][ T69] bridge_slave_1: left allmulticast mode [ 1325.253231][ T69] bridge_slave_1: left promiscuous mode [ 1325.253584][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.291606][ T5882] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1325.323973][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.324007][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.325375][ T5946] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1325.325403][ T5946] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1325.325423][ T5946] usb 8-1: Manufacturer: syz [ 1325.330451][ T5946] usb 8-1: config 0 descriptor?? [ 1325.382188][ T69] bridge_slave_0: left allmulticast mode [ 1325.382271][ T69] bridge_slave_0: left promiscuous mode [ 1325.382631][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.444322][ T5882] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1325.444385][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1325.444468][ T5882] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1325.444492][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.450948][ T5882] usb 6-1: config 0 descriptor?? [ 1325.532603][ T5882] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1325.592169][ T5939] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1325.592202][ T5939] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1325.592230][ T5939] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1325.592500][ T5939] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1325.598504][ T5939] usb 7-1: USB disconnect, device number 6 [ 1325.746311][ T5946] usbhid 8-1:0.0: can't add hid device: -32 [ 1325.746442][ T5946] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1325.749484][ T5946] usb 8-1: USB disconnect, device number 5 [ 1326.851964][T12425] Bluetooth: hci2: command tx timeout [ 1327.164115][T15418] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2911'. [ 1328.106340][ T5939] usb 6-1: USB disconnect, device number 22 [ 1328.931675][T12425] Bluetooth: hci2: command tx timeout [ 1328.952332][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.002118][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.031033][ T69] bond0 (unregistering): Released all slaves [ 1329.446917][T15368] chnl_net:caif_netlink_parms(): no params data found [ 1329.470884][T15444] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1330.704525][T15451] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2924'. [ 1331.144845][ T983] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1331.178646][T15467] overlayfs: failed to resolve './file1': -2 [ 1331.293981][ T983] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1331.294015][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1331.294038][ T983] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1331.294081][ T983] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1331.294103][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.365847][ T983] usb 7-1: config 0 descriptor?? [ 1331.387301][ T983] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1332.233039][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1334.182659][ T5939] usb 7-1: USB disconnect, device number 7 [ 1336.250573][T15503] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1337.501229][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.513959][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.514247][T15368] bridge_slave_0: entered allmulticast mode [ 1337.600550][T15368] bridge_slave_0: entered promiscuous mode [ 1338.001704][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.001848][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.002147][T15368] bridge_slave_1: entered allmulticast mode [ 1338.133187][T15368] bridge_slave_1: entered promiscuous mode [ 1338.243391][T13371] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1338.291666][T15226] Bluetooth: hci5: command 0x0406 tx timeout [ 1338.965635][T15516] Device name cannot be null; rc = [-22] [ 1338.987886][T13371] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1338.987926][T13371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1338.988112][T13371] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1338.988236][T13371] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.988293][T13371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.167731][T13371] usb 6-1: config 0 descriptor?? [ 1339.386182][T13371] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1342.059587][T13371] usb 6-1: USB disconnect, device number 23 [ 1342.745729][ T69] hsr_slave_0: left promiscuous mode [ 1342.802170][ T69] hsr_slave_1: left promiscuous mode [ 1342.805998][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.806028][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.098261][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.098291][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.369817][ T69] veth1_macvtap: left promiscuous mode [ 1343.369928][ T69] veth0_macvtap: left promiscuous mode [ 1343.370207][ T69] veth1_vlan: left promiscuous mode [ 1343.370400][ T69] veth0_vlan: left promiscuous mode [ 1345.091748][ T5883] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1346.044253][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1346.044289][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1346.044313][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1346.044359][ T5883] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1346.044385][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.109529][ T5883] usb 8-1: config 0 descriptor?? [ 1346.122207][ T5883] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1348.145593][ T5883] usb 8-1: USB disconnect, device number 6 [ 1351.643934][T15597] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1352.878302][T15226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1352.945437][T15226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1352.950611][T15226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1352.960943][T15226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1352.966586][T15226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1353.377791][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1354.011466][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1355.118042][T15226] Bluetooth: hci3: command tx timeout [ 1357.172296][T15226] Bluetooth: hci3: command tx timeout [ 1357.891717][ T5875] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1358.096836][ T5875] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1358.096868][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.096888][ T5875] usb 8-1: Product: syz [ 1358.096904][ T5875] usb 8-1: Manufacturer: syz [ 1358.096919][ T5875] usb 8-1: SerialNumber: syz [ 1358.137691][ T5875] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1358.157983][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1359.364635][T15226] Bluetooth: hci3: command tx timeout [ 1359.370439][ T983] usb 8-1: USB disconnect, device number 7 [ 1359.378593][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1359.378784][ T10] ath9k_htc: Failed to initialize the device [ 1359.557992][ T983] usb 8-1: ath9k_htc: USB layer deinitialized [ 1359.859385][T15368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.927923][T15368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.353360][T15368] team0: Port device team_slave_0 added [ 1360.384801][T15368] team0: Port device team_slave_1 added [ 1360.410737][T15601] lo speed is unknown, defaulting to 1000 [ 1360.501544][ T983] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1360.653199][ T983] usb 6-1: Using ep0 maxpacket: 16 [ 1360.656363][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.656395][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.656418][ T983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1360.656461][ T983] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1360.656484][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.723059][ T983] usb 6-1: config 0 descriptor?? [ 1360.850659][T15368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.850676][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.850696][T15368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.866325][T15368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.866343][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.866368][T15368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.073642][T15279] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1361.139548][T15279] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1361.241875][T15279] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1361.364604][ T983] usbhid 6-1:0.0: can't add hid device: -71 [ 1361.364739][ T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1361.387825][ T983] usb 6-1: USB disconnect, device number 24 [ 1361.411636][T15226] Bluetooth: hci3: command tx timeout [ 1361.457524][T15279] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1361.606682][T15368] hsr_slave_0: entered promiscuous mode [ 1361.608271][T15368] hsr_slave_1: entered promiscuous mode [ 1361.609335][T15368] debugfs: 'hsr0' already exists in 'hsr' [ 1361.609360][T15368] Cannot create hsr debugfs directory [ 1361.821281][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.821326][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.232845][T11990] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1362.405811][T11990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.405838][T11990] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1362.405893][T11990] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1362.405917][T11990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.458352][T11990] usb 6-1: config 0 descriptor?? [ 1362.477880][T11990] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1362.477936][T11990] dvb-usb: bulk message failed: -22 (3/0) [ 1362.500944][T11990] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1362.513895][T11990] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1362.513965][T11990] usb 6-1: media controller created [ 1362.521251][T11990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1362.570611][T11990] dvb-usb: bulk message failed: -22 (6/0) [ 1362.570851][T11990] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1362.598628][T11990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1362.613531][T11990] dvb-usb: schedule remote query interval to 150 msecs. [ 1362.613555][T11990] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1362.691108][T15646] dvb-usb: bulk message failed: -22 (2/0) [ 1362.700841][ T983] usb 6-1: USB disconnect, device number 25 [ 1362.737887][ T69] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.821906][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1363.657572][ T69] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.315310][ T69] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.602800][ T5946] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1364.688496][ T69] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.758699][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.758734][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.760251][ T5946] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1364.760280][ T5946] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1364.760301][ T5946] usb 8-1: Manufacturer: syz [ 1364.788638][ T5946] usb 8-1: config 0 descriptor?? [ 1365.216803][T15666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1365.354031][T15601] chnl_net:caif_netlink_parms(): no params data found [ 1365.440007][ T5946] usbhid 8-1:0.0: can't add hid device: -32 [ 1365.440144][ T5946] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1365.459275][ T5946] usb 8-1: USB disconnect, device number 8 [ 1365.918144][T15672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1369.941922][T15601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.942063][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.951802][T15601] bridge_slave_0: entered allmulticast mode [ 1369.968183][T15601] bridge_slave_0: entered promiscuous mode [ 1369.982253][T15601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.991734][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.995890][T15601] bridge_slave_1: entered allmulticast mode [ 1369.998924][T15601] bridge_slave_1: entered promiscuous mode [ 1370.287859][T15700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1370.384344][ T69] bridge_slave_1: left allmulticast mode [ 1370.384375][ T69] bridge_slave_1: left promiscuous mode [ 1370.384596][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.493364][ T69] bridge_slave_0: left allmulticast mode [ 1370.493394][ T69] bridge_slave_0: left promiscuous mode [ 1370.493642][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.566174][ T69] bridge_slave_1: left allmulticast mode [ 1370.566206][ T69] bridge_slave_1: left promiscuous mode [ 1370.566468][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.653254][ T69] bridge_slave_0: left allmulticast mode [ 1370.653286][ T69] bridge_slave_0: left promiscuous mode [ 1370.653541][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.761651][ T983] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1370.941856][ T983] usb 6-1: Using ep0 maxpacket: 32 [ 1371.075310][ T983] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1371.075458][ T983] usb 6-1: config 0 has no interface number 0 [ 1371.076710][ T983] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1371.248093][ T983] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1371.249948][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.250185][ T983] usb 6-1: Product: syz [ 1371.250323][ T983] usb 6-1: Manufacturer: syz [ 1371.250535][ T983] usb 6-1: SerialNumber: syz [ 1371.468331][ T983] usb 6-1: config 0 descriptor?? [ 1371.496969][ T983] smsc75xx v1.0.0 [ 1371.924917][ T983] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1371.924948][ T983] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1371.924969][ T983] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1371.925252][ T983] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1371.948173][ T983] usb 6-1: USB disconnect, device number 26 [ 1371.960924][T12425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1371.983857][T12425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1371.994935][T12425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1371.997324][T12425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1371.998179][T12425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1372.741715][ T983] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1372.894710][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.894759][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.896512][ T983] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1372.896540][ T983] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1372.896559][ T983] usb 6-1: Manufacturer: syz [ 1372.901364][ T983] usb 6-1: config 0 descriptor?? [ 1373.569491][ T983] usbhid 6-1:0.0: can't add hid device: -32 [ 1373.569576][ T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1373.573102][ T983] usb 6-1: USB disconnect, device number 27 [ 1373.932171][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.012414][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.034720][ T69] bond0 (unregistering): Released all slaves [ 1374.131569][T12425] Bluetooth: hci5: command tx timeout [ 1376.115629][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.192833][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.291808][T12425] Bluetooth: hci5: command tx timeout [ 1376.295361][ T69] bond0 (unregistering): Released all slaves [ 1376.481285][T15601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.514918][T15601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.301275][ T69] IPVS: stopping master sync thread 15103 ... [ 1377.984631][T15601] team0: Port device team_slave_0 added [ 1378.401578][T15226] Bluetooth: hci5: command tx timeout [ 1379.011289][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'. [ 1379.980027][T12425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1380.046889][T12425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1380.048337][T12425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1380.049488][T12425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1380.050256][T12425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1380.451802][T15226] Bluetooth: hci5: command tx timeout [ 1381.426562][T15601] team0: Port device team_slave_1 added [ 1381.581572][ T5875] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1381.740498][ T5875] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.740525][ T5875] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1381.762640][ T5875] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1381.762658][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1381.762669][ T5875] usb 8-1: SerialNumber: syz [ 1381.935197][T15708] lo speed is unknown, defaulting to 1000 [ 1381.989842][ T5875] usb 8-1: 0:2 : does not exist [ 1381.989943][ T5875] usb 8-1: unit 5 not found! [ 1382.015180][ T5875] usb 8-1: USB disconnect, device number 9 [ 1382.138049][T15226] Bluetooth: hci0: command tx timeout [ 1382.327769][T15601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.327782][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.327796][T15601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.392615][T15601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.392633][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.392659][T15601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.296930][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3017'. [ 1384.211965][T15226] Bluetooth: hci0: command tx timeout [ 1384.592505][T15742] lo speed is unknown, defaulting to 1000 [ 1385.790490][ T5909] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1385.953048][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3021'. [ 1386.253003][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1386.467849][T15226] Bluetooth: hci0: command tx timeout [ 1386.522150][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.522207][ T5909] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.522224][ T5909] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.522235][ T5909] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1386.522248][ T5909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1386.522268][ T5909] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1386.522280][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.526357][ T5909] usb 6-1: config 0 descriptor?? [ 1386.806837][T15601] hsr_slave_0: entered promiscuous mode [ 1386.808404][T15601] hsr_slave_1: entered promiscuous mode [ 1386.809438][T15601] debugfs: 'hsr0' already exists in 'hsr' [ 1386.809463][T15601] Cannot create hsr debugfs directory [ 1386.961648][ T5909] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 1386.961690][ T5909] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 1386.961716][ T5909] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 1386.961740][ T5909] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 1386.961766][ T5909] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 1386.967427][ T5909] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 1386.967707][ T5909] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints? [ 1387.148788][ C1] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -71 [ 1387.149667][ T5882] usb 6-1: USB disconnect, device number 28 [ 1387.411681][ T5909] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1387.565440][ T5909] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.565469][ T5909] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.569354][ T5909] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1387.569385][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1387.569404][ T5909] usb 8-1: SerialNumber: syz [ 1387.641930][ T69] hsr_slave_0: left promiscuous mode [ 1387.661744][ T69] hsr_slave_1: left promiscuous mode [ 1387.662876][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.662906][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.704115][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.704145][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.825821][ T5909] usb 8-1: 0:2 : does not exist [ 1387.825880][ T5909] usb 8-1: unit 5 not found! [ 1387.846269][ T5909] usb 8-1: USB disconnect, device number 10 [ 1387.894302][ T69] hsr_slave_0: left promiscuous mode [ 1387.931915][ T69] hsr_slave_1: left promiscuous mode [ 1387.933860][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.393574][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.502597][ T69] veth1_macvtap: left promiscuous mode [ 1388.502693][ T69] veth0_macvtap: left promiscuous mode [ 1388.502896][ T69] veth1_vlan: left promiscuous mode [ 1388.503036][ T69] veth0_vlan: left promiscuous mode [ 1388.531951][T15226] Bluetooth: hci0: command tx timeout [ 1391.361291][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3030'. [ 1394.297778][T15825] mmap: syz.5.3038 (15825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1394.400814][T15827] fuse: Bad value for 'user_id' [ 1394.400828][T15827] fuse: Bad value for 'user_id' [ 1394.692321][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1394.952692][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1400.822940][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1401.012060][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1402.601325][T15883] siw: device registration error -23 [ 1403.810748][T15708] chnl_net:caif_netlink_parms(): no params data found [ 1404.587256][T15742] chnl_net:caif_netlink_parms(): no params data found [ 1405.599650][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.599864][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.600493][T15708] bridge_slave_0: entered allmulticast mode [ 1405.629515][T15708] bridge_slave_0: entered promiscuous mode [ 1405.640654][T15601] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1405.697885][T15708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.698036][T15708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.698642][T15708] bridge_slave_1: entered allmulticast mode [ 1405.731767][T15708] bridge_slave_1: entered promiscuous mode [ 1405.776126][T15601] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1406.021597][T15601] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1407.263569][T15601] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1407.500436][T15708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.945171][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3066'. [ 1408.450231][T15708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.450840][T15742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.450998][T15742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.451203][T15742] bridge_slave_0: entered allmulticast mode [ 1408.455478][T15742] bridge_slave_0: entered promiscuous mode [ 1408.648735][T15742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.648944][T15742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.649219][T15742] bridge_slave_1: entered allmulticast mode [ 1408.687492][T15742] bridge_slave_1: entered promiscuous mode [ 1409.952318][T15708] team0: Port device team_slave_0 added [ 1410.150352][T15708] team0: Port device team_slave_1 added [ 1410.275857][T15742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.743851][T15742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.195182][T15708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.195199][T15708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.195215][T15708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.490126][T15708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.490144][T15708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.490172][T15708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.544034][T15742] team0: Port device team_slave_0 added [ 1411.745980][T15742] team0: Port device team_slave_1 added [ 1412.828621][T12425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1412.846872][T12425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1412.850881][T12425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1412.877952][T12425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1412.902749][T12425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1413.277504][T15708] hsr_slave_0: entered promiscuous mode [ 1413.279102][T15708] hsr_slave_1: entered promiscuous mode [ 1413.280140][T15708] debugfs: 'hsr0' already exists in 'hsr' [ 1413.280165][T15708] Cannot create hsr debugfs directory [ 1413.288903][T15742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.288921][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.288947][T15742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.876793][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3075'. [ 1414.578814][T15742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.578833][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.578862][T15742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.012421][T15226] Bluetooth: hci2: command tx timeout [ 1415.713161][T15951] lo speed is unknown, defaulting to 1000 [ 1416.094749][T15742] hsr_slave_0: entered promiscuous mode [ 1416.097004][T15742] hsr_slave_1: entered promiscuous mode [ 1416.098466][T15742] debugfs: 'hsr0' already exists in 'hsr' [ 1416.098492][T15742] Cannot create hsr debugfs directory [ 1419.646218][T15226] Bluetooth: hci2: command tx timeout [ 1421.822231][T15226] Bluetooth: hci2: command tx timeout [ 1423.072048][T11990] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1423.261062][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.261123][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.280347][T11990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.280380][T11990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.280401][T11990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1423.280429][T11990] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1423.280444][T11990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.307874][T11990] usb 6-1: config 0 descriptor?? [ 1423.891946][T12425] Bluetooth: hci2: command tx timeout [ 1423.982863][T11990] usbhid 6-1:0.0: can't add hid device: -71 [ 1423.982999][T11990] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1423.995623][T11990] usb 6-1: USB disconnect, device number 29 [ 1424.964469][T15951] chnl_net:caif_netlink_parms(): no params data found [ 1425.652522][T14495] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1426.281539][T14495] usb 8-1: Using ep0 maxpacket: 32 [ 1426.283862][T14495] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1426.283889][T14495] usb 8-1: config 0 has no interface number 0 [ 1426.283946][T14495] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1426.287325][T14495] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1426.287354][T14495] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.287373][T14495] usb 8-1: Product: syz [ 1426.287388][T14495] usb 8-1: Manufacturer: syz [ 1426.287402][T14495] usb 8-1: SerialNumber: syz [ 1426.293623][T14495] usb 8-1: config 0 descriptor?? [ 1426.298338][T14495] smsc75xx v1.0.0 [ 1426.298357][T14495] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1426.298633][T14495] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 1426.771228][ T69] bridge_slave_1: left allmulticast mode [ 1426.771266][ T69] bridge_slave_1: left promiscuous mode [ 1426.778666][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.848874][ T69] bridge_slave_0: left allmulticast mode [ 1426.849018][ T69] bridge_slave_0: left promiscuous mode [ 1426.886903][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.764807][ T69] bridge_slave_1: left allmulticast mode [ 1427.764830][ T69] bridge_slave_1: left promiscuous mode [ 1427.765042][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.844517][ T69] bridge_slave_0: left allmulticast mode [ 1427.844548][ T69] bridge_slave_0: left promiscuous mode [ 1427.844860][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.385608][ T5946] usb 8-1: USB disconnect, device number 11 [ 1428.552593][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.692609][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.757890][ T69] bond0 (unregistering): Released all slaves [ 1428.771611][ T5946] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1428.934666][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.934699][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.934721][ T5946] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1428.934763][ T5946] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1428.934785][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.961260][ T5946] usb 8-1: config 0 descriptor?? [ 1429.632562][ T5946] usbhid 8-1:0.0: can't add hid device: -71 [ 1429.632711][ T5946] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1429.640337][ T5946] usb 8-1: USB disconnect, device number 12 [ 1431.962816][T15226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1431.982092][T15226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.988009][T15226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.989221][T15226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.990035][T15226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1433.062401][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.233820][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.261642][ T5946] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1433.316712][ T69] bond0 (unregistering): Released all slaves [ 1433.416132][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.416168][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.416198][ T5946] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1433.416242][ T5946] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1433.416264][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.487640][ T5946] usb 8-1: config 0 descriptor?? [ 1434.211603][T12425] Bluetooth: hci3: command tx timeout [ 1435.043425][ T5946] usbhid 8-1:0.0: can't add hid device: -71 [ 1435.043919][ T5946] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1435.134012][ T5946] usb 8-1: USB disconnect, device number 13 [ 1435.892590][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.892731][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.893020][T15951] bridge_slave_0: entered allmulticast mode [ 1435.895834][T15951] bridge_slave_0: entered promiscuous mode [ 1435.905694][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.905824][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.906089][T15951] bridge_slave_1: entered allmulticast mode [ 1435.914566][T15951] bridge_slave_1: entered promiscuous mode [ 1436.039075][ T5909] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1436.200714][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.200743][ T5909] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1436.200781][ T5909] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1436.200803][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.206457][ T5909] usb 6-1: config 0 descriptor?? [ 1436.428453][T12425] Bluetooth: hci3: command tx timeout [ 1436.460661][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.333241][ T69] hsr_slave_0: left promiscuous mode [ 1438.372086][ T69] hsr_slave_1: left promiscuous mode [ 1438.373105][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.412596][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.586805][T12425] Bluetooth: hci3: command tx timeout [ 1439.628761][ T5909] usb 6-1: USB disconnect, device number 30 [ 1439.692887][ T69] hsr_slave_0: left promiscuous mode [ 1439.731591][ T69] hsr_slave_1: left promiscuous mode [ 1439.732632][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.783306][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.941579][ T983] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1440.030728][T15226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1440.048576][T15226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1440.050680][T15226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1440.071779][T15226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1440.074067][T15226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1440.144401][ T983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.144435][ T983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.144458][ T983] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1440.144504][ T983] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1440.144528][ T983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.156005][ T983] usb 8-1: config 0 descriptor?? [ 1440.658918][T12425] Bluetooth: hci3: command tx timeout [ 1440.817526][ T983] usbhid 8-1:0.0: can't add hid device: -71 [ 1440.817663][ T983] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1440.823840][ T983] usb 8-1: USB disconnect, device number 14 [ 1440.952462][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1441.102149][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1442.135232][T12425] Bluetooth: hci6: command tx timeout [ 1442.495521][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3127'. [ 1444.216613][T12425] Bluetooth: hci6: command tx timeout [ 1444.413219][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1444.602842][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1445.536782][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.663645][T16127] macvlan0: entered promiscuous mode [ 1445.686593][T16127] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3127'. [ 1446.780164][T12425] Bluetooth: hci6: command tx timeout [ 1447.584095][T16066] lo speed is unknown, defaulting to 1000 [ 1447.649353][T15951] team0: Port device team_slave_0 added [ 1447.909489][T15951] team0: Port device team_slave_1 added [ 1448.851712][T12425] Bluetooth: hci6: command tx timeout [ 1450.578148][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.578166][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.578193][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.579983][T16120] lo speed is unknown, defaulting to 1000 [ 1450.645279][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.645298][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.645325][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.683160][T15951] hsr_slave_0: entered promiscuous mode [ 1452.684720][T15951] hsr_slave_1: entered promiscuous mode [ 1453.731602][T16190] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1458.389855][T16066] chnl_net:caif_netlink_parms(): no params data found [ 1459.943020][T16120] chnl_net:caif_netlink_parms(): no params data found [ 1463.028988][T16066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.040419][T16066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.040647][T16066] bridge_slave_0: entered allmulticast mode [ 1463.062663][T16066] bridge_slave_0: entered promiscuous mode [ 1463.411934][T16066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.412029][T16066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.412234][T16066] bridge_slave_1: entered allmulticast mode [ 1463.417286][T16066] bridge_slave_1: entered promiscuous mode [ 1463.919120][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3166'. [ 1464.967566][T16120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.967694][T16120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.967938][T16120] bridge_slave_0: entered allmulticast mode [ 1464.970777][T16120] bridge_slave_0: entered promiscuous mode [ 1467.904881][T16066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.909859][T16120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.909999][T16120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.910280][T16120] bridge_slave_1: entered allmulticast mode [ 1467.913628][T16120] bridge_slave_1: entered promiscuous mode [ 1468.658343][T16066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.357893][T16120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.459412][T16066] team0: Port device team_slave_0 added [ 1469.472557][T16120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.552126][T16066] team0: Port device team_slave_1 added [ 1470.025302][T16120] team0: Port device team_slave_0 added [ 1470.035614][T16066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.035631][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.035656][T16066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.095396][T16120] team0: Port device team_slave_1 added [ 1470.158743][T16066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.158754][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.158769][T16066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.501579][T15951] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1471.560906][T16294] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1471.561184][T16294] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1471.563262][T16120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.563278][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.563303][T16120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.571651][T13371] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1471.615780][T15951] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1471.691243][T16120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.691255][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.691270][T16120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.733929][T13371] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1471.733974][T13371] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1471.733996][T13371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.784437][T13371] usb 6-1: config 0 descriptor?? [ 1471.952639][T15951] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1472.208601][T15951] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1472.290113][T16066] hsr_slave_0: entered promiscuous mode [ 1472.291053][T16066] hsr_slave_1: entered promiscuous mode [ 1472.309731][T16066] debugfs: 'hsr0' already exists in 'hsr' [ 1472.309750][T16066] Cannot create hsr debugfs directory [ 1472.484859][T15951] kthread_run failed with err -4 [ 1472.990880][T12422] bridge_slave_1: left allmulticast mode [ 1472.990908][T12422] bridge_slave_1: left promiscuous mode [ 1472.991176][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.647514][T15226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.674070][T15226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.675764][T15226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.677673][T15226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.678488][T15226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1473.807124][T12422] bridge_slave_0: left allmulticast mode [ 1473.807158][T12422] bridge_slave_0: left promiscuous mode [ 1473.807471][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.926017][T12422] bridge_slave_1: left allmulticast mode [ 1473.926048][T12422] bridge_slave_1: left promiscuous mode [ 1473.926300][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.435912][T12422] bridge_slave_0: left allmulticast mode [ 1474.436014][T12422] bridge_slave_0: left promiscuous mode [ 1474.437204][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.786382][ T983] usb 6-1: USB disconnect, device number 31 [ 1474.837411][T16318] Bluetooth: MGMT ver 1.23 [ 1474.840954][T12422] bridge_slave_1: left allmulticast mode [ 1474.840985][T12422] bridge_slave_1: left promiscuous mode [ 1474.841231][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.952723][T12422] bridge_slave_0: left allmulticast mode [ 1474.952744][T12422] bridge_slave_0: left promiscuous mode [ 1474.952912][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.955430][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1474.955448][ T37] audit: type=1326 audit(1760332168.841:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.955720][ T37] audit: type=1326 audit(1760332168.841:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.955952][ T37] audit: type=1326 audit(1760332168.841:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.956416][ T37] audit: type=1326 audit(1760332168.841:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.956557][ T37] audit: type=1326 audit(1760332168.841:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.957013][ T37] audit: type=1326 audit(1760332168.841:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.957284][ T37] audit: type=1326 audit(1760332168.841:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.957574][ T37] audit: type=1326 audit(1760332168.841:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.957804][ T37] audit: type=1326 audit(1760332168.841:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1474.958034][ T37] audit: type=1326 audit(1760332168.841:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16319 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1475.562573][T12422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.642444][T12422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.706984][T12422] bond0 (unregistering): Released all slaves [ 1475.741725][T15226] Bluetooth: hci0: command tx timeout [ 1475.930329][T16324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3183'. [ 1475.973908][T12422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.072616][T12422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.135723][T12422] bond0 (unregistering): Released all slaves [ 1476.402264][T12422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.482898][T12422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.544134][T12422] bond0 (unregistering): Released all slaves [ 1476.587525][T16120] hsr_slave_0: entered promiscuous mode [ 1476.588585][T16120] hsr_slave_1: entered promiscuous mode [ 1476.589254][T16120] debugfs: 'hsr0' already exists in 'hsr' [ 1476.589270][T16120] Cannot create hsr debugfs directory [ 1477.816216][T15226] Bluetooth: hci0: command tx timeout [ 1479.187046][T16309] lo speed is unknown, defaulting to 1000 [ 1479.471599][T12422] hsr_slave_0: left promiscuous mode [ 1479.491794][T12422] hsr_slave_1: left promiscuous mode [ 1479.492559][T12422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.532556][T12422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.691607][T12422] hsr_slave_0: left promiscuous mode [ 1479.711788][T12422] hsr_slave_1: left promiscuous mode [ 1479.712527][T12422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.765103][T12422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.891817][T15226] Bluetooth: hci0: command tx timeout [ 1479.903176][T12422] hsr_slave_0: left promiscuous mode [ 1479.941791][T12422] hsr_slave_1: left promiscuous mode [ 1479.942498][T12422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.966970][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1479.967181][ T37] audit: type=1326 audit(1760332173.851:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.967236][ T37] audit: type=1326 audit(1760332173.851:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.967404][ T37] audit: type=1326 audit(1760332173.851:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.967705][ T37] audit: type=1326 audit(1760332173.851:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.967990][ T37] audit: type=1326 audit(1760332173.851:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.968179][ T37] audit: type=1326 audit(1760332173.851:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.968460][ T37] audit: type=1326 audit(1760332173.851:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.968686][ T37] audit: type=1326 audit(1760332173.851:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.968907][ T37] audit: type=1326 audit(1760332173.851:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1479.969087][ T37] audit: type=1326 audit(1760332173.851:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16341 comm="syz.5.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ce4ceec9 code=0x7ffc0000 [ 1480.061568][T12422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.912439][T12422] team0 (unregistering): Port device team_slave_1 removed [ 1481.114258][T12422] team0 (unregistering): Port device team_slave_0 removed [ 1481.341550][T16349] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3192'. [ 1481.971713][T15226] Bluetooth: hci0: command tx timeout [ 1482.372962][T12422] team0 (unregistering): Port device team_slave_1 removed [ 1482.562288][T12422] team0 (unregistering): Port device team_slave_0 removed [ 1483.793226][T12422] team0 (unregistering): Port device team_slave_1 removed [ 1483.942288][T12422] team0 (unregistering): Port device team_slave_0 removed [ 1484.698883][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.698954][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.096679][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1487.096696][ T37] audit: type=1326 audit(1760332180.981:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16366 comm="syz.7.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a799ceec9 code=0x7ffc0000 [ 1487.096744][ T37] audit: type=1326 audit(1760332180.981:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16366 comm="syz.7.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a799ceec9 code=0x7ffc0000 [ 1487.449070][T16309] chnl_net:caif_netlink_parms(): no params data found [ 1488.155699][T16309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.155831][T16309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.156036][T16309] bridge_slave_0: entered allmulticast mode [ 1488.158879][T16309] bridge_slave_0: entered promiscuous mode [ 1488.188754][T16379] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3200'. [ 1488.209286][T16309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.209490][T16309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.209689][T16309] bridge_slave_1: entered allmulticast mode [ 1488.222652][T16309] bridge_slave_1: entered promiscuous mode [ 1488.657633][T16309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.744435][T16309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.602834][T16066] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1491.169088][T16066] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1491.263964][T16309] team0: Port device team_slave_0 added [ 1491.268718][T16066] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1491.300601][T16309] team0: Port device team_slave_1 added [ 1491.303936][T16402] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3208'. [ 1491.340777][T16066] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1491.484161][T16066] kthread_run failed with err -4 [ 1491.939105][T12425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1491.966238][T12425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1491.967963][T12425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1491.971139][T12425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1492.003345][T12425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1492.482499][T16309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.482517][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.482545][T16309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.631353][T16309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.631515][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.631546][T16309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.051560][T15226] Bluetooth: hci2: command tx timeout [ 1494.246604][T16120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1494.323467][T16309] hsr_slave_0: entered promiscuous mode [ 1494.325009][T16309] hsr_slave_1: entered promiscuous mode [ 1494.335364][T16309] debugfs: 'hsr0' already exists in 'hsr' [ 1494.335394][T16309] Cannot create hsr debugfs directory [ 1494.337381][T16413] lo speed is unknown, defaulting to 1000 [ 1494.339332][T16120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1494.521045][T16120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1495.485050][T16120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1496.108166][T16444] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3217'. [ 1496.132696][T15226] Bluetooth: hci2: command tx timeout [ 1498.477593][T15226] Bluetooth: hci2: command tx timeout [ 1500.355624][T16476] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3226'. [ 1500.561659][T15226] Bluetooth: hci2: command tx timeout [ 1501.076738][T12425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1501.168677][T12425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1501.175194][T12425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1501.177441][T12425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1501.178195][T12425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1501.530557][T16413] chnl_net:caif_netlink_parms(): no params data found [ 1502.966328][T16481] lo speed is unknown, defaulting to 1000 [ 1502.983433][ T5946] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1503.138778][ T5946] usb 8-1: Using ep0 maxpacket: 32 [ 1503.147576][ T5946] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1503.147595][ T5946] usb 8-1: config 0 has no interface number 0 [ 1503.147626][ T5946] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1503.151070][ T5946] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1503.151088][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.151099][ T5946] usb 8-1: Product: syz [ 1503.151107][ T5946] usb 8-1: Manufacturer: syz [ 1503.151115][ T5946] usb 8-1: SerialNumber: syz [ 1503.181665][ T5946] usb 8-1: config 0 descriptor?? [ 1503.195796][ T5946] smsc75xx v1.0.0 [ 1503.253063][T15226] Bluetooth: hci3: command tx timeout [ 1503.600426][ T5946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1503.600447][ T5946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1503.600457][ T5946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1503.600633][ T5946] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 1503.803802][T14495] usb 8-1: USB disconnect, device number 15 [ 1503.861971][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.862052][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.862305][T16413] bridge_slave_0: entered allmulticast mode [ 1503.863988][T16413] bridge_slave_0: entered promiscuous mode [ 1503.900558][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.900742][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.900967][T16413] bridge_slave_1: entered allmulticast mode [ 1503.904403][T16413] bridge_slave_1: entered promiscuous mode [ 1504.280521][T12422] bridge_slave_1: left allmulticast mode [ 1504.280551][T12422] bridge_slave_1: left promiscuous mode [ 1504.280803][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.618175][T12422] bridge_slave_0: left allmulticast mode [ 1504.618274][T12422] bridge_slave_0: left promiscuous mode [ 1504.618569][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.674523][T12422] bridge_slave_1: left allmulticast mode [ 1504.674553][T12422] bridge_slave_1: left promiscuous mode [ 1504.674760][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.763975][T12422] bridge_slave_0: left allmulticast mode [ 1504.763995][T12422] bridge_slave_0: left promiscuous mode [ 1504.764166][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.344263][T15226] Bluetooth: hci3: command tx timeout [ 1506.314508][T12422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.467415][T12422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.565010][T12422] bond0 (unregistering): Released all slaves [ 1507.312924][T12422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.411561][T15226] Bluetooth: hci3: command tx timeout [ 1507.412765][T12422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.554378][T12422] bond0 (unregistering): Released all slaves [ 1507.648313][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.254291][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.505346][T15226] Bluetooth: hci3: command tx timeout [ 1510.445362][T16413] team0: Port device team_slave_0 added [ 1510.519917][T16413] team0: Port device team_slave_1 added [ 1510.584434][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1510.805004][T16309] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1511.021816][T12422] hsr_slave_0: left promiscuous mode [ 1511.041730][T12422] hsr_slave_1: left promiscuous mode [ 1511.045843][T12422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.094626][T12422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.271694][T12422] hsr_slave_0: left promiscuous mode [ 1511.312750][T12422] hsr_slave_1: left promiscuous mode [ 1511.313617][T12422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.436006][T12422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.562588][T12422] team0 (unregistering): Port device team_slave_1 removed [ 1517.842268][T12422] team0 (unregistering): Port device team_slave_0 removed [ 1520.477334][T12422] team0 (unregistering): Port device team_slave_1 removed [ 1521.495285][T12422] team0 (unregistering): Port device team_slave_0 removed [ 1521.610936][T16605] syz.5.3269 uses obsolete (PF_INET,SOCK_PACKET) [ 1523.101020][T16608] block device autoloading is deprecated and will be removed. [ 1523.382838][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.382857][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.382885][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.453372][T16309] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1523.535747][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.535770][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.535797][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.537054][T16309] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1524.385768][T16309] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1526.457522][T16413] hsr_slave_0: entered promiscuous mode [ 1526.460806][T16413] hsr_slave_1: entered promiscuous mode [ 1526.581195][T16481] chnl_net:caif_netlink_parms(): no params data found [ 1529.134456][T16481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.134595][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.134869][T16481] bridge_slave_0: entered allmulticast mode [ 1529.150998][T16481] bridge_slave_0: entered promiscuous mode [ 1529.234968][T16481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.235112][T16481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.235390][T16481] bridge_slave_1: entered allmulticast mode [ 1529.238441][T16481] bridge_slave_1: entered promiscuous mode [ 1530.641200][T16481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.737012][T16481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.859523][T16671] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1531.272366][T16481] team0: Port device team_slave_0 added [ 1531.280928][T16481] team0: Port device team_slave_1 added [ 1532.485259][T16481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.485280][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.485295][T16481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.551341][T16481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.551359][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.552197][T16481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.413103][T16695] ubi31: attaching mtd0 [ 1534.600396][T16695] ubi31: scanning is finished [ 1534.600423][T16695] ubi31: empty MTD device detected [ 1534.986553][T12425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1535.019394][T12425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1535.033953][T12425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1535.049892][T12425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1535.052609][T12425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1535.380063][T16695] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1535.380093][T16695] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1535.380110][T16695] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1535.380123][T16695] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1535.380137][T16695] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1535.380151][T16695] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1535.380165][T16695] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2088844573 [ 1535.380185][T16695] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1535.388438][T16706] ubi31: background thread "ubi_bgt31d" started, PID 16706 [ 1536.479310][T16713] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1536.557139][T16481] hsr_slave_0: entered promiscuous mode [ 1536.576161][T16481] hsr_slave_1: entered promiscuous mode [ 1536.581915][T16481] debugfs: 'hsr0' already exists in 'hsr' [ 1536.581944][T16481] Cannot create hsr debugfs directory [ 1537.091673][T15226] Bluetooth: hci5: command tx timeout [ 1537.883189][T16704] lo speed is unknown, defaulting to 1000 [ 1539.171651][T15226] Bluetooth: hci5: command tx timeout [ 1540.214691][T16413] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1540.813381][T16413] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1540.986109][T16413] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1541.109952][T16413] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1541.251491][T15226] Bluetooth: hci5: command tx timeout [ 1542.592012][ T3534] bridge_slave_1: left allmulticast mode [ 1542.592043][ T3534] bridge_slave_1: left promiscuous mode [ 1542.592296][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.630677][T16759] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1542.682449][ T3534] bridge_slave_0: left allmulticast mode [ 1542.682470][ T3534] bridge_slave_0: left promiscuous mode [ 1542.682651][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.331653][T15226] Bluetooth: hci5: command tx timeout [ 1543.336164][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.431948][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.505984][ T3534] bond0 (unregistering): Released all slaves [ 1544.373233][ T3534] hsr_slave_0: left promiscuous mode [ 1544.391793][ T3534] hsr_slave_1: left promiscuous mode [ 1544.392485][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.430513][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.138726][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.138773][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.216101][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1547.513794][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1547.755467][T16785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1552.106163][T16704] chnl_net:caif_netlink_parms(): no params data found [ 1552.943208][T12425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1553.033646][T12425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1553.045501][T12425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1553.079397][T12425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1553.086137][T12425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1553.559415][T16704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.559588][T16704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.559860][T16704] bridge_slave_0: entered allmulticast mode [ 1553.565740][T16704] bridge_slave_0: entered promiscuous mode [ 1553.571322][T16704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.572524][T16704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.572801][T16704] bridge_slave_1: entered allmulticast mode [ 1553.579410][T16704] bridge_slave_1: entered promiscuous mode [ 1555.105341][T16704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.144591][T16704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.251628][T15226] Bluetooth: hci0: command tx timeout [ 1555.438266][T16814] lo speed is unknown, defaulting to 1000 [ 1555.448299][T16704] team0: Port device team_slave_0 added [ 1555.470521][T16704] team0: Port device team_slave_1 added [ 1555.822661][T16704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.822679][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.822699][T16704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.825728][T16481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1555.840363][ T983] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1555.901089][T16704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.901101][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.901116][T16704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.915848][T16481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1556.024364][ T983] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.024393][ T983] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1556.024440][ T983] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1556.024454][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.027761][ T983] usb 6-1: config 0 descriptor?? [ 1556.042326][ T983] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1556.042360][ T983] dvb-usb: bulk message failed: -22 (3/0) [ 1556.090669][ T983] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1556.091275][ T983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1556.091309][ T983] usb 6-1: media controller created [ 1556.098585][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1556.119358][ T983] dvb-usb: bulk message failed: -22 (6/0) [ 1556.119442][ T983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1556.126910][ T983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 1556.130547][ T983] dvb-usb: schedule remote query interval to 150 msecs. [ 1556.130568][ T983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1556.240042][T16830] dvb-usb: bulk message failed: -22 (2/0) [ 1556.241948][T11990] usb 6-1: USB disconnect, device number 32 [ 1556.302673][T11990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1556.316993][T16481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1556.360705][T16481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1556.431624][ T5946] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1556.583676][ T5946] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.583702][ T5946] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1556.584930][ T5946] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1556.584959][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1556.584979][ T5946] usb 8-1: SerialNumber: syz [ 1556.824885][ T5946] usb 8-1: 0:2 : does not exist [ 1556.824984][ T5946] usb 8-1: unit 5 not found! [ 1556.865968][ T5946] usb 8-1: USB disconnect, device number 16 [ 1557.332002][T15226] Bluetooth: hci0: command tx timeout [ 1557.393812][T16704] hsr_slave_0: entered promiscuous mode [ 1557.395502][T16704] hsr_slave_1: entered promiscuous mode [ 1557.397220][T16704] debugfs: 'hsr0' already exists in 'hsr' [ 1557.397249][T16704] Cannot create hsr debugfs directory [ 1559.421559][T15226] Bluetooth: hci0: command tx timeout [ 1560.279695][T16814] chnl_net:caif_netlink_parms(): no params data found [ 1561.350806][T12425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1561.366514][T12425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1561.368733][T12425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1561.402532][T12425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1561.408837][T12425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1561.506678][T15226] Bluetooth: hci0: command tx timeout [ 1562.615210][T16877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.661589][T12425] Bluetooth: hci2: command tx timeout [ 1563.812610][T16814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.812758][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.813061][T16814] bridge_slave_0: entered allmulticast mode [ 1563.823049][T16814] bridge_slave_0: entered promiscuous mode [ 1563.837509][T16814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.841566][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.841839][T16814] bridge_slave_1: entered allmulticast mode [ 1563.852472][T16814] bridge_slave_1: entered promiscuous mode [ 1563.953141][T16873] lo speed is unknown, defaulting to 1000 [ 1564.001700][ T5875] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1564.182941][ T5875] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1564.182970][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.186606][ T5875] usb 6-1: config 0 descriptor?? [ 1564.284000][T16814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.320099][T16814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.532451][T16814] team0: Port device team_slave_0 added [ 1564.558754][T16814] team0: Port device team_slave_1 added [ 1564.724350][ T3534] bridge_slave_1: left allmulticast mode [ 1564.724434][ T3534] bridge_slave_1: left promiscuous mode [ 1564.724892][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.784234][ T3534] bridge_slave_0: left allmulticast mode [ 1564.784266][ T3534] bridge_slave_0: left promiscuous mode [ 1564.784505][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.866479][ T3534] bridge_slave_1: left allmulticast mode [ 1564.866517][ T3534] bridge_slave_1: left promiscuous mode [ 1564.866792][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.934619][ T3534] bridge_slave_0: left allmulticast mode [ 1564.934701][ T3534] bridge_slave_0: left promiscuous mode [ 1564.935072][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.971942][T16895] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3345'. [ 1565.202560][ T5875] pegasus 6-1:0.0: probe with driver pegasus failed with error -121 [ 1565.808643][T12425] Bluetooth: hci2: command tx timeout [ 1565.848788][ T5875] usb 6-1: USB disconnect, device number 33 [ 1566.112377][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1566.192881][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.259539][ T3534] bond0 (unregistering): Released all slaves [ 1566.519298][T16908] ubi: mtd0 is already attached to ubi31 [ 1567.442315][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.522655][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.590102][ T3534] bond0 (unregistering): Released all slaves [ 1567.842588][T12425] Bluetooth: hci2: command tx timeout [ 1569.233447][T16814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.233466][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.233497][T16814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.315817][T16928] vlan2: entered allmulticast mode [ 1569.421747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.892093][T12425] Bluetooth: hci2: command tx timeout [ 1570.351763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.352771][T16814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.352787][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.352816][T16814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.548089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.841508][ T3534] hsr_slave_0: left promiscuous mode [ 1570.870581][ T3534] hsr_slave_1: left promiscuous mode [ 1570.872516][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.912342][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.096656][ T3534] hsr_slave_0: left promiscuous mode [ 1571.133184][ T3534] hsr_slave_1: left promiscuous mode [ 1571.135566][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.177592][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.170240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.333055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.420219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.447283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.529264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.602271][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1573.679825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.764454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.962275][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1574.031132][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.124350][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.367315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.882084][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1579.870466][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1582.006564][T16814] hsr_slave_0: entered promiscuous mode [ 1582.007721][T16814] hsr_slave_1: entered promiscuous mode [ 1582.366311][T16704] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1582.417049][T16704] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1582.827288][T16704] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1584.648781][T16704] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1585.856338][T16873] chnl_net:caif_netlink_parms(): no params data found [ 1588.604333][T16873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.604479][T16873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.604775][T16873] bridge_slave_0: entered allmulticast mode [ 1588.607693][T16873] bridge_slave_0: entered promiscuous mode [ 1590.173024][T16873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.173489][T16873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.174408][T16873] bridge_slave_1: entered allmulticast mode [ 1590.251883][T16873] bridge_slave_1: entered promiscuous mode [ 1591.308345][T16873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.316998][T16873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.287846][T16873] team0: Port device team_slave_0 added [ 1593.303912][T16873] team0: Port device team_slave_1 added [ 1593.652290][T16873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.652307][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.652327][T16873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.206136][T16873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.206154][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.206178][T16873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.751194][T15226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1595.791255][T15226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1595.795435][T15226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1595.797011][T15226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1595.798417][T15226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1596.605094][T16873] hsr_slave_0: entered promiscuous mode [ 1596.654654][T16873] hsr_slave_1: entered promiscuous mode [ 1596.715288][T16873] debugfs: 'hsr0' already exists in 'hsr' [ 1596.720837][T16873] Cannot create hsr debugfs directory [ 1597.813208][T15226] Bluetooth: hci3: command tx timeout [ 1598.423425][T17142] lo speed is unknown, defaulting to 1000 [ 1598.532991][T16814] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1598.619435][T16814] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1598.682851][T16814] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1598.788711][T16814] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1599.891563][T15226] Bluetooth: hci3: command tx timeout [ 1600.098465][ T3534] bridge_slave_1: left allmulticast mode [ 1600.098497][ T3534] bridge_slave_1: left promiscuous mode [ 1600.099269][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.182624][ T3534] bridge_slave_0: left allmulticast mode [ 1600.182645][ T3534] bridge_slave_0: left promiscuous mode [ 1600.182831][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.332315][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.971591][T15226] Bluetooth: hci3: command tx timeout [ 1602.242314][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.313557][ T3534] bond0 (unregistering): Released all slaves [ 1602.981555][ T3534] hsr_slave_0: left promiscuous mode [ 1603.022004][ T3534] hsr_slave_1: left promiscuous mode [ 1603.024158][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.046203][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.062173][T15226] Bluetooth: hci3: command tx timeout [ 1606.382451][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1606.559010][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1607.500555][T17142] chnl_net:caif_netlink_parms(): no params data found [ 1607.581356][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.581531][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.893444][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.893595][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.893875][T17142] bridge_slave_0: entered allmulticast mode [ 1609.896580][T17142] bridge_slave_0: entered promiscuous mode [ 1609.935472][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.935709][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.935972][T17142] bridge_slave_1: entered allmulticast mode [ 1609.937713][T17142] bridge_slave_1: entered promiscuous mode [ 1610.310054][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.382590][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.765257][T17142] team0: Port device team_slave_0 added [ 1610.816803][T17142] team0: Port device team_slave_1 added [ 1611.509830][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.509843][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.509857][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.577442][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.577454][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.577470][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.805192][T16873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1611.957542][T16814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.832075][T16873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1612.881192][T16873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1614.848870][T16873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1614.969556][T17300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1614.986696][T12425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1614.988305][T12425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1614.996225][T12425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1614.997491][T12425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1615.245798][T17142] hsr_slave_0: entered promiscuous mode [ 1615.246875][T17142] hsr_slave_1: entered promiscuous mode [ 1615.247551][T17142] debugfs: 'hsr0' already exists in 'hsr' [ 1615.247570][T17142] Cannot create hsr debugfs directory [ 1615.846333][T17311] fuse: Bad value for 'fd' [ 1616.259277][T17298] lo speed is unknown, defaulting to 1000 [ 1617.004069][T16873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.053372][T16873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.081139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.090223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.098467][T12425] Bluetooth: hci0: command tx timeout [ 1617.144514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.146014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.315075][T17298] chnl_net:caif_netlink_parms(): no params data found [ 1619.542585][T12425] Bluetooth: hci0: command tx timeout [ 1620.924345][ T3534] bridge_slave_1: left allmulticast mode [ 1620.924374][ T3534] bridge_slave_1: left promiscuous mode [ 1620.925464][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.013097][ T3534] bridge_slave_0: left allmulticast mode [ 1621.013119][ T3534] bridge_slave_0: left promiscuous mode [ 1621.013298][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.571748][T15226] Bluetooth: hci0: command tx timeout [ 1622.225111][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.278373][T12425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1622.300392][T12425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1622.309817][T12425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1622.325304][T12425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1622.328404][T12425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1622.393964][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.478334][ T3534] bond0 (unregistering): Released all slaves [ 1622.528444][T17298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.528526][T17298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.528720][T17298] bridge_slave_0: entered allmulticast mode [ 1622.540758][T17298] bridge_slave_0: entered promiscuous mode [ 1622.913582][T17298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.913836][T17298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.914264][T17298] bridge_slave_1: entered allmulticast mode [ 1622.917466][T17298] bridge_slave_1: entered promiscuous mode [ 1623.657585][T15226] Bluetooth: hci0: command tx timeout [ 1624.047396][T17298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.359356][ T3534] hsr_slave_0: left promiscuous mode [ 1624.440176][ T3534] hsr_slave_1: left promiscuous mode [ 1624.447840][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.470062][T15226] Bluetooth: hci5: command tx timeout [ 1624.522790][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.531622][T15226] Bluetooth: hci5: command tx timeout [ 1627.992124][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1628.113367][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1628.619288][T15226] Bluetooth: hci5: command tx timeout [ 1628.741231][T17298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.824926][T17360] lo speed is unknown, defaulting to 1000 [ 1629.826230][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3493'. [ 1630.003869][T17298] team0: Port device team_slave_0 added [ 1630.760909][T15226] Bluetooth: hci5: command tx timeout [ 1630.977351][T17298] team0: Port device team_slave_1 added [ 1631.050131][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1631.718043][T17298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.718062][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.718090][T17298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.784033][T17298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.784051][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.784079][T17298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.630579][T17298] hsr_slave_0: entered promiscuous mode [ 1633.640380][T17298] hsr_slave_1: entered promiscuous mode [ 1633.648776][T17298] debugfs: 'hsr0' already exists in 'hsr' [ 1633.648804][T17298] Cannot create hsr debugfs directory [ 1634.103720][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3502'. [ 1636.889822][T17142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1637.373292][T17142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1637.889401][T17142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1638.072300][T17142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1639.076978][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3512'. [ 1639.137325][T17360] chnl_net:caif_netlink_parms(): no params data found [ 1645.295522][T17498] ubi: mtd0 is already attached to ubi31 [ 1645.305859][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3521'. [ 1648.688630][T17360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.688776][T17360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.689039][T17360] bridge_slave_0: entered allmulticast mode [ 1648.701244][T17360] bridge_slave_0: entered promiscuous mode [ 1650.112291][T17360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.112373][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.112575][T17360] bridge_slave_1: entered allmulticast mode [ 1650.114308][T17360] bridge_slave_1: entered promiscuous mode [ 1650.885924][T17360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.367715][T17535] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3532'. [ 1652.380983][T17360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.116480][T17360] team0: Port device team_slave_0 added [ 1654.268753][T17360] team0: Port device team_slave_1 added [ 1654.519298][T17360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.519326][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.519353][T17360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.542586][T17360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.542605][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.542632][T17360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.702310][T17298] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1654.744492][ T3534] bridge_slave_1: left allmulticast mode [ 1654.744520][ T3534] bridge_slave_1: left promiscuous mode [ 1654.744757][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.930072][ T3534] bridge_slave_0: left allmulticast mode [ 1654.930100][ T3534] bridge_slave_0: left promiscuous mode [ 1654.930357][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.958066][T17561] ubi: mtd0 is already attached to ubi31 [ 1655.030089][ T3534] bridge_slave_1: left allmulticast mode [ 1655.030122][ T3534] bridge_slave_1: left promiscuous mode [ 1655.030369][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.107434][ T3534] bridge_slave_0: left allmulticast mode [ 1655.107465][ T3534] bridge_slave_0: left promiscuous mode [ 1655.107717][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.336817][T12425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1655.359530][T12425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1655.363529][T12425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1655.386028][T12425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1655.401723][T12425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1657.584963][T15226] Bluetooth: hci2: command tx timeout [ 1659.654054][T15226] Bluetooth: hci2: command tx timeout [ 1661.731669][T15226] Bluetooth: hci2: command tx timeout [ 1663.974261][T15226] Bluetooth: hci2: command tx timeout [ 1664.825555][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.938843][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.958913][ T3534] bond0 (unregistering): Released all slaves [ 1666.027248][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3568'. [ 1667.763034][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.842349][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1667.913556][ T3534] bond0 (unregistering): Released all slaves [ 1668.154575][T17298] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1669.015584][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.015627][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.337702][T17360] hsr_slave_0: entered promiscuous mode [ 1670.339194][T17360] hsr_slave_1: entered promiscuous mode [ 1670.340212][T17360] debugfs: 'hsr0' already exists in 'hsr' [ 1670.340235][T17360] Cannot create hsr debugfs directory [ 1670.340499][T17298] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1671.191639][T17298] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1671.451543][ T5875] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1671.493550][ T3534] hsr_slave_0: left promiscuous mode [ 1671.522138][ T3534] hsr_slave_1: left promiscuous mode [ 1671.524564][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.562639][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.602745][ T5875] usb 8-1: no configurations [ 1671.602766][ T5875] usb 8-1: can't read configurations, error -22 [ 1671.741523][ T5875] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1671.761613][ T3534] hsr_slave_0: left promiscuous mode [ 1671.802144][ T3534] hsr_slave_1: left promiscuous mode [ 1671.803232][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.852406][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.912870][ T5875] usb 8-1: no configurations [ 1671.912891][ T5875] usb 8-1: can't read configurations, error -22 [ 1671.913283][ T5875] usb usb8-port1: attempt power cycle [ 1672.298746][ T5875] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1672.328323][ T5875] usb 8-1: no configurations [ 1672.328590][ T5875] usb 8-1: can't read configurations, error -22 [ 1672.522083][ T5875] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1672.590869][ T5875] usb 8-1: no configurations [ 1672.590933][ T5875] usb 8-1: can't read configurations, error -22 [ 1672.612093][ T5875] usb usb8-port1: unable to enumerate USB device [ 1674.142075][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1674.422298][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1674.968617][T12425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1674.989850][T12425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1674.993166][T12425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1675.044416][T12425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1675.045611][T12425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1677.134343][T15226] Bluetooth: hci3: command tx timeout [ 1678.335551][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 1678.494850][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 1679.181749][T15226] Bluetooth: hci3: command tx timeout [ 1679.233820][T17298] kthread_run failed with err -4 [ 1679.479171][T17565] lo speed is unknown, defaulting to 1000 [ 1679.801622][ T5882] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1679.976748][ T5882] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1679.976779][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.004854][ T5882] usb 8-1: config 0 descriptor?? [ 1680.403846][T17691] lo speed is unknown, defaulting to 1000 [ 1681.050394][ T5882] pegasus 8-1:0.0: probe with driver pegasus failed with error -32 [ 1681.069075][ T5882] usb 8-1: USB disconnect, device number 21 [ 1681.354354][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1681.366327][T17735] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1681.972803][T15226] Bluetooth: hci3: command tx timeout [ 1682.169820][T17565] chnl_net:caif_netlink_parms(): no params data found [ 1682.535723][T17691] chnl_net:caif_netlink_parms(): no params data found [ 1682.981724][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.981886][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.982182][T17565] bridge_slave_0: entered allmulticast mode [ 1682.985017][T17565] bridge_slave_0: entered promiscuous mode [ 1683.064668][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.064824][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.065077][T17565] bridge_slave_1: entered allmulticast mode [ 1683.069337][T17565] bridge_slave_1: entered promiscuous mode [ 1683.362674][T15226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1683.366156][T15226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1683.367562][T15226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1683.369185][T15226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1683.370596][T15226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1683.941088][T13371] IPVS: starting estimator thread 0... [ 1684.021942][T17756] IPVS: using max 9 ests per chain, 21600 per kthread [ 1684.051629][T12425] Bluetooth: hci3: command tx timeout [ 1685.267940][T17753] team0 (unregistering): Port device team_slave_0 removed [ 1685.307555][T17753] team0 (unregistering): Port device team_slave_1 removed [ 1685.342678][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3599'. [ 1686.210408][T12425] Bluetooth: hci0: command tx timeout [ 1687.226105][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.338413][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.351690][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.351904][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.352274][T17691] bridge_slave_0: entered allmulticast mode [ 1687.357907][T17691] bridge_slave_0: entered promiscuous mode [ 1687.465358][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.465566][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.465810][T17691] bridge_slave_1: entered allmulticast mode [ 1687.468729][T17691] bridge_slave_1: entered promiscuous mode [ 1687.677571][T17565] team0: Port device team_slave_0 added [ 1688.082574][T17565] team0: Port device team_slave_1 added [ 1688.083251][T17750] lo speed is unknown, defaulting to 1000 [ 1688.119202][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.225535][T17786] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1688.425678][T17787] overlayfs: missing 'lowerdir' [ 1688.432399][T12425] Bluetooth: hci0: command tx timeout [ 1690.451485][T12425] Bluetooth: hci0: command tx timeout [ 1690.703651][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.754431][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.754444][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.754459][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.992564][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.992580][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.992601][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.012082][T17691] team0: Port device team_slave_0 added [ 1692.073926][T17691] team0: Port device team_slave_1 added [ 1692.531468][T12425] Bluetooth: hci0: command tx timeout [ 1693.307591][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.307603][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.307617][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.778275][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.778287][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.778302][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.889815][T17565] hsr_slave_0: entered promiscuous mode [ 1693.890744][T17565] hsr_slave_1: entered promiscuous mode [ 1696.123977][T17691] hsr_slave_0: entered promiscuous mode [ 1696.125485][T17691] hsr_slave_1: entered promiscuous mode [ 1696.126523][T17691] debugfs: 'hsr0' already exists in 'hsr' [ 1696.126548][T17691] Cannot create hsr debugfs directory [ 1698.449564][T17750] chnl_net:caif_netlink_parms(): no params data found [ 1699.859523][T17860] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1703.035728][T17750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.035865][T17750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.036162][T17750] bridge_slave_0: entered allmulticast mode [ 1703.038057][T17750] bridge_slave_0: entered promiscuous mode [ 1703.040447][T17750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.041654][T17750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.085601][T17750] bridge_slave_1: entered allmulticast mode [ 1703.090615][T17750] bridge_slave_1: entered promiscuous mode [ 1704.952338][T17881] ubi: mtd0 is already attached to ubi31 [ 1705.613796][T17750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.644937][T17750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.932048][T17750] team0: Port device team_slave_0 added [ 1705.954045][T17750] team0: Port device team_slave_1 added [ 1706.424063][T17890] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3639'. [ 1708.349571][T17750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.349589][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.349616][T17750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.367646][T17750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.367664][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.367690][T17750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.339127][T17750] hsr_slave_0: entered promiscuous mode [ 1709.350998][T17750] hsr_slave_1: entered promiscuous mode [ 1709.352686][T17750] debugfs: 'hsr0' already exists in 'hsr' [ 1709.352713][T17750] Cannot create hsr debugfs directory [ 1710.751846][T17909] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1710.957662][ T3534] bridge_slave_1: left allmulticast mode [ 1710.957695][ T3534] bridge_slave_1: left promiscuous mode [ 1710.957980][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.303526][ T3534] bridge_slave_0: left allmulticast mode [ 1711.303558][ T3534] bridge_slave_0: left promiscuous mode [ 1711.303871][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.433871][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3646'. [ 1712.317202][ T3534] bridge_slave_1: left allmulticast mode [ 1712.317234][ T3534] bridge_slave_1: left promiscuous mode [ 1712.317477][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.393132][ T3534] bridge_slave_0: left allmulticast mode [ 1712.393162][ T3534] bridge_slave_0: left promiscuous mode [ 1712.393435][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.489871][ T3534] bridge_slave_1: left allmulticast mode [ 1712.489900][ T3534] bridge_slave_1: left promiscuous mode [ 1712.490143][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.573919][ T3534] bridge_slave_0: left allmulticast mode [ 1712.573967][ T3534] bridge_slave_0: left promiscuous mode [ 1712.574243][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.006932][T17927] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3650'. [ 1713.212299][T17659] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1713.941567][T17659] usb 8-1: Using ep0 maxpacket: 8 [ 1713.944326][T17659] usb 8-1: config 199 has an invalid interface number: 2 but max is 0 [ 1713.944352][T17659] usb 8-1: config 199 has no interface number 0 [ 1713.944402][T17659] usb 8-1: config 199 interface 2 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1713.944430][T17659] usb 8-1: config 199 interface 2 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1713.944452][T17659] usb 8-1: config 199 interface 2 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1713.944479][T17659] usb 8-1: config 199 interface 2 has no altsetting 0 [ 1713.948083][T17659] usb 8-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e1.c7 [ 1713.948117][T17659] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.948138][T17659] usb 8-1: Product: syz [ 1713.948153][T17659] usb 8-1: Manufacturer: syz [ 1713.948168][T17659] usb 8-1: SerialNumber: syz [ 1715.132548][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.165272][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1715.185637][T17659] usb 8-1: USB disconnect, device number 22 [ 1715.190205][T17659] ================================================================== [ 1715.190217][T17659] BUG: KASAN: use-after-free in hdm_disconnect+0x10d/0x1c0 [ 1715.190372][T17659] Read of size 8 at addr ffff888037ada0d0 by task kworker/1:1/17659 [ 1715.190383][T17659] [ 1715.190398][T17659] CPU: 1 UID: 0 PID: 17659 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1715.190412][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1715.190419][T17659] Workqueue: usb_hub_wq hub_event [ 1715.190488][T17659] Call Trace: [ 1715.190496][T17659] [ 1715.190502][T17659] dump_stack_lvl+0x189/0x250 [ 1715.190545][T17659] ? __kasan_check_byte+0x12/0x40 [ 1715.190602][T17659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.190614][T17659] ? lock_release+0x4b/0x3e0 [ 1715.190641][T17659] ? __virt_addr_valid+0x4a5/0x5c0 [ 1715.190665][T17659] print_report+0xca/0x240 [ 1715.190679][T17659] ? hdm_disconnect+0x10d/0x1c0 [ 1715.190689][T17659] kasan_report+0x118/0x150 [ 1715.190701][T17659] ? hdm_disconnect+0x10d/0x1c0 [ 1715.190712][T17659] hdm_disconnect+0x10d/0x1c0 [ 1715.190722][T17659] usb_unbind_interface+0x26e/0x910 [ 1715.190755][T17659] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1715.190767][T17659] device_release_driver_internal+0x4d9/0x800 [ 1715.190845][T17659] bus_remove_device+0x355/0x420 [ 1715.190856][T17659] device_del+0x515/0x8e0 [ 1715.190891][T17659] ? kobject_put+0x270/0x480 [ 1715.190964][T17659] ? __pfx_device_del+0x10/0x10 [ 1715.190977][T17659] ? kobject_put+0x446/0x480 [ 1715.190989][T17659] usb_disable_device+0x3e9/0x8a0 [ 1715.191002][T17659] usb_disconnect+0x316/0x940 [ 1715.191038][T17659] hub_event+0x1cf5/0x4a20 [ 1715.191054][T17659] ? do_raw_spin_lock+0x121/0x290 [ 1715.191070][T17659] ? register_lock_class+0x51/0x320 [ 1715.191084][T17659] ? __pfx_hub_event+0x10/0x10 [ 1715.191094][T17659] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.191121][T17659] ? _raw_spin_unlock_irq+0x23/0x50 [ 1715.191187][T17659] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.191202][T17659] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.191218][T17659] process_scheduled_works+0xae1/0x17b0 [ 1715.191245][T17659] ? __pfx_process_scheduled_works+0x10/0x10 [ 1715.191265][T17659] worker_thread+0x8a0/0xda0 [ 1715.191275][T17659] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1715.191293][T17659] ? __kthread_parkme+0x7b/0x200 [ 1715.191307][T17659] kthread+0x711/0x8a0 [ 1715.191319][T17659] ? __pfx_worker_thread+0x10/0x10 [ 1715.191329][T17659] ? __pfx_kthread+0x10/0x10 [ 1715.191339][T17659] ? rt_spin_unlock+0x150/0x200 [ 1715.191354][T17659] ? rt_spin_unlock+0x161/0x200 [ 1715.191375][T17659] ? __pfx_kthread+0x10/0x10 [ 1715.191394][T17659] ret_from_fork+0x4bc/0x870 [ 1715.191428][T17659] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.191451][T17659] ? __switch_to_asm+0x39/0x70 [ 1715.191464][T17659] ? __switch_to_asm+0x33/0x70 [ 1715.191477][T17659] ? __pfx_kthread+0x10/0x10 [ 1715.191488][T17659] ret_from_fork_asm+0x1a/0x30 [ 1715.191506][T17659] [ 1715.191510][T17659] [ 1715.191513][T17659] The buggy address belongs to the physical page: [ 1715.191526][T17659] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37ada [ 1715.191537][T17659] flags: 0x80000000000000(node=0|zone=1) [ 1715.191555][T17659] raw: 0080000000000000 0000000000000000 ffffea0000deb690 0000000000000000 [ 1715.191564][T17659] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1715.191569][T17659] page dumped because: kasan: bad access detected [ 1715.191577][T17659] page_owner tracks the page as freed [ 1715.191582][T17659] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 17659, tgid 17659 (kworker/1:1), ts 1715169862744, free_ts 1715190153259 [ 1715.191600][T17659] post_alloc_hook+0x240/0x2a0 [ 1715.191617][T17659] get_page_from_freelist+0x28c0/0x2960 [ 1715.191629][T17659] __alloc_frozen_pages_noprof+0x181/0x370 [ 1715.191640][T17659] alloc_pages_mpol+0xd1/0x380 [ 1715.191651][T17659] ___kmalloc_large_node+0x5f/0x1b0 [ 1715.191660][T17659] __kmalloc_large_noprof+0x1a/0x90 [ 1715.191669][T17659] hdm_probe+0x71/0x13f0 [ 1715.191678][T17659] usb_probe_interface+0x668/0xc30 [ 1715.191688][T17659] really_probe+0x26d/0x9e0 [ 1715.191702][T17659] __driver_probe_device+0x18c/0x2f0 [ 1715.191714][T17659] driver_probe_device+0x4f/0x430 [ 1715.191726][T17659] __device_attach_driver+0x2ce/0x530 [ 1715.191739][T17659] bus_for_each_drv+0x254/0x2e0 [ 1715.191748][T17659] __device_attach+0x2bb/0x400 [ 1715.191759][T17659] bus_probe_device+0x188/0x260 [ 1715.191768][T17659] device_add+0x7b6/0xb50 [ 1715.191778][T17659] page last free pid 17659 tgid 17659 stack trace: [ 1715.191784][T17659] __free_frozen_pages+0xfb6/0x1140 [ 1715.191794][T17659] free_large_kmalloc+0x13a/0x1f0 [ 1715.191804][T17659] device_release+0x9c/0x1c0 [ 1715.191818][T17659] kobject_put+0x22b/0x480 [ 1715.191827][T17659] hdm_disconnect+0xf3/0x1c0 [ 1715.191835][T17659] usb_unbind_interface+0x26e/0x910 [ 1715.191845][T17659] device_release_driver_internal+0x4d9/0x800 [ 1715.191857][T17659] bus_remove_device+0x355/0x420 [ 1715.191866][T17659] device_del+0x515/0x8e0 [ 1715.191877][T17659] usb_disable_device+0x3e9/0x8a0 [ 1715.191885][T17659] usb_disconnect+0x316/0x940 [ 1715.191912][T17659] hub_event+0x1cf5/0x4a20 [ 1715.191921][T17659] process_scheduled_works+0xae1/0x17b0 [ 1715.191935][T17659] worker_thread+0x8a0/0xda0 [ 1715.191944][T17659] kthread+0x711/0x8a0 [ 1715.191954][T17659] ret_from_fork+0x4bc/0x870 [ 1715.191967][T17659] [ 1715.191970][T17659] Memory state around the buggy address: [ 1715.191977][T17659] ffff888037ad9f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1715.191984][T17659] ffff888037ada000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1715.191991][T17659] >ffff888037ada080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1715.191999][T17659] ^ [ 1715.192005][T17659] ffff888037ada100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1715.192012][T17659] ffff888037ada180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1715.192017][T17659] ================================================================== [ 1715.192197][T17659] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1715.192215][T17659] CPU: 1 UID: 0 PID: 17659 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1715.192269][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1715.192284][T17659] Workqueue: usb_hub_wq hub_event [ 1715.192302][T17659] Call Trace: [ 1715.192309][T17659] [ 1715.192317][T17659] dump_stack_lvl+0x99/0x250 [ 1715.192341][T17659] ? __asan_memcpy+0x40/0x70 [ 1715.192367][T17659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.192387][T17659] ? __pfx__printk+0x10/0x10 [ 1715.192414][T17659] vpanic+0x237/0x6d0 [ 1715.192445][T17659] ? __pfx_vpanic+0x10/0x10 [ 1715.192462][T17659] ? preempt_schedule+0xae/0xc0 [ 1715.192526][T17659] ? __pfx_preempt_schedule+0x10/0x10 [ 1715.192553][T17659] panic+0xb9/0xc0 [ 1715.192571][T17659] ? __pfx_panic+0x10/0x10 [ 1715.192590][T17659] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1715.192621][T17659] ? hdm_disconnect+0x10d/0x1c0 [ 1715.192639][T17659] check_panic_on_warn+0x89/0xb0 [ 1715.192663][T17659] ? hdm_disconnect+0x10d/0x1c0 [ 1715.192681][T17659] end_report+0x78/0x160 [ 1715.192701][T17659] kasan_report+0x129/0x150 [ 1715.192723][T17659] ? hdm_disconnect+0x10d/0x1c0 [ 1715.192745][T17659] hdm_disconnect+0x10d/0x1c0 [ 1715.192765][T17659] usb_unbind_interface+0x26e/0x910 [ 1715.192790][T17659] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1715.192811][T17659] device_release_driver_internal+0x4d9/0x800 [ 1715.192842][T17659] bus_remove_device+0x355/0x420 [ 1715.192866][T17659] device_del+0x515/0x8e0 [ 1715.192891][T17659] ? kobject_put+0x270/0x480 [ 1715.192911][T17659] ? __pfx_device_del+0x10/0x10 [ 1715.192933][T17659] ? kobject_put+0x446/0x480 [ 1715.192957][T17659] usb_disable_device+0x3e9/0x8a0 [ 1715.192980][T17659] usb_disconnect+0x316/0x940 [ 1715.193008][T17659] hub_event+0x1cf5/0x4a20 [ 1715.193040][T17659] ? do_raw_spin_lock+0x121/0x290 [ 1715.193068][T17659] ? register_lock_class+0x51/0x320 [ 1715.193096][T17659] ? __pfx_hub_event+0x10/0x10 [ 1715.193114][T17659] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.193146][T17659] ? _raw_spin_unlock_irq+0x23/0x50 [ 1715.193174][T17659] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.193201][T17659] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.193230][T17659] process_scheduled_works+0xae1/0x17b0 [ 1715.193280][T17659] ? __pfx_process_scheduled_works+0x10/0x10 [ 1715.193317][T17659] worker_thread+0x8a0/0xda0 [ 1715.193337][T17659] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1715.193370][T17659] ? __kthread_parkme+0x7b/0x200 [ 1715.193394][T17659] kthread+0x711/0x8a0 [ 1715.193418][T17659] ? __pfx_worker_thread+0x10/0x10 [ 1715.193436][T17659] ? __pfx_kthread+0x10/0x10 [ 1715.193456][T17659] ? rt_spin_unlock+0x150/0x200 [ 1715.193482][T17659] ? rt_spin_unlock+0x161/0x200 [ 1715.193505][T17659] ? __pfx_kthread+0x10/0x10 [ 1715.193527][T17659] ret_from_fork+0x4bc/0x870 [ 1715.193556][T17659] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.193586][T17659] ? __switch_to_asm+0x39/0x70 [ 1715.193611][T17659] ? __switch_to_asm+0x33/0x70 [ 1715.193646][T17659] ? __pfx_kthread+0x10/0x10 [ 1715.193676][T17659] ret_from_fork_asm+0x1a/0x30 [ 1715.193719][T17659] [ 1715.194117][T17659] Kernel Offset: disabled