last executing test programs: 26m34.112677061s ago: executing program 0 (id=84): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peek(0x3, r0, &(0x7f0000000000)) 26m29.623100616s ago: executing program 0 (id=96): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26m29.050910807s ago: executing program 0 (id=100): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'hsr0\x00', 0x2}, 0x18) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102}, "d83ca001"}}}}}, 0x0) 26m28.149520882s ago: executing program 0 (id=104): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r0, &(0x7f0000000100)="732f64bd01d8958d", 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 26m27.878169775s ago: executing program 0 (id=108): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f00000000c0), 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r4, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1400) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 26m21.982757302s ago: executing program 0 (id=119): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x3ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 26m5.45604315s ago: executing program 32 (id=119): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x3ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 25m47.456122257s ago: executing program 1 (id=194): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) close(r0) 25m46.903781832s ago: executing program 1 (id=196): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 25m45.498827174s ago: executing program 1 (id=197): socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 25m45.223655471s ago: executing program 1 (id=198): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 25m44.934122713s ago: executing program 1 (id=199): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0x7, 0x4, 0x1, 0x5}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 25m43.638010451s ago: executing program 1 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 25m27.76207849s ago: executing program 33 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 25m27.709888116s ago: executing program 4 (id=220): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 25m26.306927787s ago: executing program 4 (id=222): process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x65, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 25m24.067651722s ago: executing program 4 (id=227): r0 = syz_clone(0xc1cdc240, 0x0, 0x1b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x2, 0x6, 0xf7, 0x200}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 25m19.683288705s ago: executing program 4 (id=231): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$9p_unix(&(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0xa0040, &(0x7f0000000780)=ANY=[]) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000004800000127bd7000ffdbdf250a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) 25m17.765382764s ago: executing program 4 (id=233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x20, 0x0, 0xfffff024}, {0x20, 0x0, 0x80}, {0x6}]}, 0x10) r2 = fsopen(&(0x7f0000000040)='exofs\x00', 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='{\x00', 0x0, r4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) timer_create(0x0, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f0000003840)={0x13, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]}) sendmmsg(r0, 0x0, 0x0, 0x0) 25m13.179554672s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xa}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 24m58.096586336s ago: executing program 34 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xa}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23m47.810207764s ago: executing program 2 (id=328): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 23m45.032786933s ago: executing program 2 (id=332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x62}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m43.644781782s ago: executing program 2 (id=334): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0480, 0x0) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 23m43.260146148s ago: executing program 2 (id=335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x20, 0x0, 0xfffff024}, {0x20, 0x0, 0x80}, {0x6}]}, 0x10) r2 = fsopen(&(0x7f0000000040)='exofs\x00', 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='{\x00', 0x0, r4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) timer_create(0x0, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f0000003840)={0x13, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]}) sendmmsg(r0, 0x0, 0x0, 0x0) 23m41.516390005s ago: executing program 2 (id=336): socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23m39.347360528s ago: executing program 2 (id=340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 23m23.814579073s ago: executing program 35 (id=340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 6m6.711476416s ago: executing program 3 (id=1375): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ppoll(&(0x7f0000000140)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[0x0]) syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 6m5.754803673s ago: executing program 3 (id=1376): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r5, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) 6m3.86572668s ago: executing program 3 (id=1377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 6m0.35285065s ago: executing program 3 (id=1381): timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r4, 0x3, 0x1) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 5m55.339495941s ago: executing program 3 (id=1386): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 5m52.351369444s ago: executing program 3 (id=1389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5m3.983957155s ago: executing program 6 (id=1451): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, r6, 0x25, 0x4, @void}, 0x10) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000080)={0xe000003, 0x0, 0x0, 0x6, 0xe0000}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0x8, 0xffdffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 5m2.704552683s ago: executing program 6 (id=1455): pipe2$watch_queue(&(0x7f0000000100), 0x80) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) prctl$PR_SET_PTRACER(0x59616d61, r5) 5m1.465893975s ago: executing program 6 (id=1457): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)={0x0, 0x1, 0x4, "56e90000"}, 0x0, 0x0, 0x0, 0x0}) 4m57.600126416s ago: executing program 6 (id=1462): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) 4m53.948185458s ago: executing program 6 (id=1465): socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 4m49.759789187s ago: executing program 6 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m34.496032565s ago: executing program 36 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23.872430957s ago: executing program 5 (id=1861): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 22.556996172s ago: executing program 5 (id=1864): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYBLOB="0029d3496e31c70000000000000000000000000000000010"], 0x48) 12.794888516s ago: executing program 5 (id=1873): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x5) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 10.894865935s ago: executing program 5 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac"], 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 9.552031314s ago: executing program 8 (id=1878): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0480, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 8.043548929s ago: executing program 8 (id=1880): r0 = timerfd_create(0x0, 0x800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.468241638s ago: executing program 7 (id=1883): syz_emit_ethernet(0x3b0, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 7.296049975s ago: executing program 7 (id=1884): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) 7.133326382s ago: executing program 8 (id=1885): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x5) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 6.939393226s ago: executing program 7 (id=1886): syz_open_dev$usbfs(0x0, 0x76, 0x101341) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x102, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000), 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 5.102525297s ago: executing program 8 (id=1887): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0xffffffffffffffec, 0x80800}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000), 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000800)}], 0x1) r8 = syz_open_dev$radio(0x0, 0x0, 0x2) dup2(r8, r8) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) 4.933511475s ago: executing program 7 (id=1888): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0480, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 4.932737763s ago: executing program 5 (id=1889): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg$unix(r1, 0x0, 0x0, 0x10102, 0x0) 3.102268055s ago: executing program 5 (id=1890): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x1, 0x132) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000060000000000000f020000000700000000000008030000000400000000000093080000000000302e5f30614f"], 0x0, 0x46}, 0x28) 2.024537647s ago: executing program 7 (id=1891): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x80, 0x800, 0x303}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x40106e80, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x5, 0x5a, 0x6000, 0x6c7, 0x9, 0x5, 0x5, 0x400}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.075686538s ago: executing program 8 (id=1892): syz_emit_ethernet(0x3b0, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 190.334884ms ago: executing program 7 (id=1893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fcntl$setstatus(r5, 0x4, 0x42800) getpid() fcntl$setownex(r5, 0xf, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c051}, 0x1) syz_genetlink_get_family_id$devlink(0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 8 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r3, 0x1, 0x200, 0x25dfdc01, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 9][ T37] audit: type=1326 audit(1767741936.903:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11731 comm="syz.3.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1232.942304][T11738] 9pnet_virtio: no channels available for device syz [ 1233.257854][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1233.407844][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1233.409905][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.409932][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1233.409970][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1233.409987][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.414958][ T43] usb 4-1: config 0 descriptor?? [ 1233.488458][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1233.658462][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1234.326887][T11745] random: crng reseeded on system resumption [ 1234.849159][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1235.000623][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1236.016784][ T43] usb 4-1: USB disconnect, device number 45 [ 1237.685391][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1237.901168][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1238.308595][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1238.310905][ T37] audit: type=1326 audit(1767741943.773:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.310969][ T37] audit: type=1326 audit(1767741943.773:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.311021][ T37] audit: type=1326 audit(1767741943.773:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.311342][ T37] audit: type=1326 audit(1767741943.773:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.311581][ T37] audit: type=1326 audit(1767741943.773:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.311893][ T37] audit: type=1326 audit(1767741943.773:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.312063][ T37] audit: type=1326 audit(1767741943.773:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.312241][ T37] audit: type=1326 audit(1767741943.773:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.312429][ T37] audit: type=1326 audit(1767741943.773:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1238.312689][ T37] audit: type=1326 audit(1767741943.773:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11754 comm="syz.3.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1239.975900][T11764] Zero length message leads to an empty skb [ 1240.808890][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1240.992651][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1243.019459][T11780] program syz.3.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1245.776178][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.776403][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.776604][T11646] bridge_slave_0: entered allmulticast mode [ 1245.800981][T11646] bridge_slave_0: entered promiscuous mode [ 1245.805437][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.833207][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.836379][T11646] bridge_slave_1: entered allmulticast mode [ 1245.856313][T11646] bridge_slave_1: entered promiscuous mode [ 1245.889109][T11549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.279673][T11549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1247.718829][T11549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1247.910525][T11813] 9pnet_virtio: no channels available for device syz [ 1248.046923][T11646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.047404][T11667] chnl_net:caif_netlink_parms(): no params data found [ 1248.160147][T11549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1248.209728][T11646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.855538][T11646] team0: Port device team_slave_0 added [ 1248.887395][T11646] team0: Port device team_slave_1 added [ 1249.220323][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.220376][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.266230][T11828] capability: warning: `syz.3.1266' uses deprecated v2 capabilities in a way that may be insecure [ 1249.274150][T11828] program syz.3.1266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1249.411520][T11646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.411538][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.411565][T11646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.603270][T11646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.603290][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.603312][T11646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.603978][T11562] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1249.748720][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.749009][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.749273][T11667] bridge_slave_0: entered allmulticast mode [ 1249.752102][T11667] bridge_slave_0: entered promiscuous mode [ 1249.832918][T11562] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1249.879275][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.879417][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.879803][T11667] bridge_slave_1: entered allmulticast mode [ 1249.883013][T11667] bridge_slave_1: entered promiscuous mode [ 1249.897836][T11562] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1250.171202][T11562] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1250.459467][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.615379][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.634908][T11646] hsr_slave_0: entered promiscuous mode [ 1250.635947][T11646] hsr_slave_1: entered promiscuous mode [ 1251.034668][T11667] team0: Port device team_slave_0 added [ 1251.413662][T11667] team0: Port device team_slave_1 added [ 1251.815815][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.815835][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.815864][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.849394][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.849447][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.849530][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.063545][ T9478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1252.066434][ T9478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1252.079221][ T9478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1252.083150][ T9478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1252.084893][ T9478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1252.446788][T11667] hsr_slave_0: entered promiscuous mode [ 1252.457188][T11667] hsr_slave_1: entered promiscuous mode [ 1252.464124][T11667] debugfs: 'hsr0' already exists in 'hsr' [ 1252.464150][T11667] Cannot create hsr debugfs directory [ 1254.160703][ T5119] Bluetooth: hci3: command tx timeout [ 1254.478868][ T9478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1254.490727][ T9478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1254.507890][ T9478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1254.510866][ T9478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1254.515181][ T9478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1255.641269][T11646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1255.828341][T11646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1255.973128][T11646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1256.257674][ T5119] Bluetooth: hci3: command tx timeout [ 1256.390485][T11646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1256.637737][ T5119] Bluetooth: hci4: command tx timeout [ 1258.317692][ T5119] Bluetooth: hci3: command tx timeout [ 1259.498115][T11890] Device name cannot be null; rc = [-22] [ 1259.872199][ T5119] Bluetooth: hci4: command tx timeout [ 1260.397644][ T5119] Bluetooth: hci3: command tx timeout [ 1260.484987][T11851] chnl_net:caif_netlink_parms(): no params data found [ 1261.924751][ T5119] Bluetooth: hci4: command tx timeout [ 1263.213709][T11851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.213870][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.214079][T11851] bridge_slave_0: entered allmulticast mode [ 1263.215995][T11851] bridge_slave_0: entered promiscuous mode [ 1264.053860][ T5119] Bluetooth: hci4: command tx timeout [ 1264.322991][T11851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.323105][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.323280][T11851] bridge_slave_1: entered allmulticast mode [ 1264.325456][T11851] bridge_slave_1: entered promiscuous mode [ 1264.637800][T11667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1264.855918][T11667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1264.915612][T11851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.931152][T11667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1265.030327][T11851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.031041][T11667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1265.123954][T11865] chnl_net:caif_netlink_parms(): no params data found [ 1265.500745][T11851] team0: Port device team_slave_0 added [ 1265.592535][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 1265.592725][ T37] audit: type=1326 audit(1767741971.053:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1265.592780][ T37] audit: type=1326 audit(1767741971.053:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1265.593203][ T37] audit: type=1326 audit(1767741971.053:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1265.595295][ T37] audit: type=1326 audit(1767741971.053:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1265.595538][ T37] audit: type=1326 audit(1767741971.053:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1265.675911][ T37] audit: type=1326 audit(1767741971.133:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f01c2acf749 code=0x7ffc0000 [ 1265.698202][ T37] audit: type=1326 audit(1767741971.143:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.1281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1265.828248][T11851] team0: Port device team_slave_1 added [ 1268.797932][T11851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.797953][T11851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.797985][T11851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.763133][T11851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.763155][T11851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.763188][T11851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.145685][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.146410][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.146645][T11865] bridge_slave_0: entered allmulticast mode [ 1272.172071][T11865] bridge_slave_0: entered promiscuous mode [ 1272.184542][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.185360][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.185614][T11865] bridge_slave_1: entered allmulticast mode [ 1272.209698][T11865] bridge_slave_1: entered promiscuous mode [ 1273.823210][T11865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.853813][T11851] hsr_slave_0: entered promiscuous mode [ 1273.854874][T11851] hsr_slave_1: entered promiscuous mode [ 1273.855590][T11851] debugfs: 'hsr0' already exists in 'hsr' [ 1273.855608][T11851] Cannot create hsr debugfs directory [ 1273.906878][T11865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.357916][T11865] team0: Port device team_slave_0 added [ 1274.432584][T11865] team0: Port device team_slave_1 added [ 1274.610806][ T9478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1274.615202][ T9478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1274.616448][ T9478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1274.644893][ T9478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1274.646478][ T9478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1276.397168][T11865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.397189][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.397220][T11865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.456719][T11865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.456740][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.456770][T11865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.625430][ T6024] bridge_slave_1: left allmulticast mode [ 1276.625461][ T6024] bridge_slave_1: left promiscuous mode [ 1276.625725][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.699328][ T6024] bridge_slave_0: left allmulticast mode [ 1276.699362][ T6024] bridge_slave_0: left promiscuous mode [ 1276.699670][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.792621][ T6024] bridge_slave_1: left allmulticast mode [ 1276.792651][ T6024] bridge_slave_1: left promiscuous mode [ 1276.792912][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.040007][ T6024] bridge_slave_0: left allmulticast mode [ 1277.040042][ T6024] bridge_slave_0: left promiscuous mode [ 1277.040309][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.937302][ T6024] bridge_slave_1: left allmulticast mode [ 1277.937336][ T6024] bridge_slave_1: left promiscuous mode [ 1277.953807][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.157927][ T9478] Bluetooth: hci0: command tx timeout [ 1278.160297][ T6024] bridge_slave_0: left allmulticast mode [ 1278.160329][ T6024] bridge_slave_0: left promiscuous mode [ 1278.160616][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.071818][ T6024] bridge_slave_1: left allmulticast mode [ 1279.071843][ T6024] bridge_slave_1: left promiscuous mode [ 1279.072020][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.304550][ T9478] Bluetooth: hci0: command tx timeout [ 1280.590683][ T6024] bridge_slave_0: left allmulticast mode [ 1280.590717][ T6024] bridge_slave_0: left promiscuous mode [ 1280.590970][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.048549][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.138430][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.214656][ T6024] bond0 (unregistering): Released all slaves [ 1281.528525][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.638646][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.680083][ T6024] bond0 (unregistering): Released all slaves [ 1281.938471][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.018305][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.082672][ T6024] bond0 (unregistering): Released all slaves [ 1282.328332][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.697564][ T9478] Bluetooth: hci0: command tx timeout [ 1283.748164][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.812598][ T6024] bond0 (unregistering): Released all slaves [ 1283.889106][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1283.915122][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1283.916543][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1283.947886][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1283.974619][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1284.493173][T11865] hsr_slave_0: entered promiscuous mode [ 1284.494629][T11865] hsr_slave_1: entered promiscuous mode [ 1284.495595][T11865] debugfs: 'hsr0' already exists in 'hsr' [ 1284.495620][T11865] Cannot create hsr debugfs directory [ 1285.296700][T11995] vxcan1: entered promiscuous mode [ 1285.798127][ T5119] Bluetooth: hci0: command tx timeout [ 1286.011546][ T5119] Bluetooth: hci5: command tx timeout [ 1286.617866][ T6024] hsr_slave_0: left promiscuous mode [ 1286.634985][ T6024] hsr_slave_1: left promiscuous mode [ 1286.635784][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.679922][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.817838][ T6024] hsr_slave_0: left promiscuous mode [ 1286.837810][ T6024] hsr_slave_1: left promiscuous mode [ 1286.838924][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.888467][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.027912][ T6024] hsr_slave_0: left promiscuous mode [ 1287.067919][ T6024] hsr_slave_1: left promiscuous mode [ 1287.068991][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.092282][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.237976][ T6024] hsr_slave_0: left promiscuous mode [ 1287.257762][ T6024] hsr_slave_1: left promiscuous mode [ 1287.258580][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.299322][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.077877][ T5119] Bluetooth: hci5: command tx timeout [ 1289.661879][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1289.879804][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1290.157750][ T5119] Bluetooth: hci5: command tx timeout [ 1292.288988][ T5119] Bluetooth: hci5: command tx timeout [ 1294.250276][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1294.423155][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1299.268433][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1299.458534][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1301.846392][T12046] trusted_key: encrypted_key: insufficient parameters specified [ 1301.866863][T12046] Bluetooth: MGMT ver 1.23 [ 1304.569284][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1305.873006][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1310.875928][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.876035][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.976419][T11965] chnl_net:caif_netlink_parms(): no params data found [ 1311.418580][T11988] chnl_net:caif_netlink_parms(): no params data found [ 1313.366016][T11965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.366259][T11965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.366502][T11965] bridge_slave_0: entered allmulticast mode [ 1313.391159][T11965] bridge_slave_0: entered promiscuous mode [ 1313.446805][T11965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.446942][T11965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.447161][T11965] bridge_slave_1: entered allmulticast mode [ 1313.477655][T11965] bridge_slave_1: entered promiscuous mode [ 1313.855990][T11965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.020516][T11965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.020872][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.021100][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.021311][T11988] bridge_slave_0: entered allmulticast mode [ 1314.023266][T11988] bridge_slave_0: entered promiscuous mode [ 1314.218734][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.218895][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.219049][T11988] bridge_slave_1: entered allmulticast mode [ 1314.220953][T11988] bridge_slave_1: entered promiscuous mode [ 1314.583182][T11965] team0: Port device team_slave_0 added [ 1314.711705][T11965] team0: Port device team_slave_1 added [ 1314.742837][T11988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.833896][T11988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.199195][T11965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.199214][T11965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.199245][T11965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.136238][ T9478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1316.145290][ T9478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1316.152953][ T9478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1316.154354][ T9478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1316.156564][ T9478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1316.315505][T11965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.315524][T11965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.315552][T11965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.412587][T11988] team0: Port device team_slave_0 added [ 1316.452708][T11988] team0: Port device team_slave_1 added [ 1316.989615][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1316.995481][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.018607][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.020004][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.020904][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1317.929151][T11988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.929171][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.929202][T11988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.033906][ T5119] Bluetooth: hci2: command tx timeout [ 1319.037602][ T5119] Bluetooth: hci3: command tx timeout [ 1319.084267][T11988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.084286][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.084316][T11988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.321170][T11965] hsr_slave_0: entered promiscuous mode [ 1319.322664][T11965] hsr_slave_1: entered promiscuous mode [ 1319.323688][T11965] debugfs: 'hsr0' already exists in 'hsr' [ 1319.323714][T11965] Cannot create hsr debugfs directory [ 1319.765484][T11988] hsr_slave_0: entered promiscuous mode [ 1319.771732][T11988] hsr_slave_1: entered promiscuous mode [ 1319.797741][T11988] debugfs: 'hsr0' already exists in 'hsr' [ 1319.797764][T11988] Cannot create hsr debugfs directory [ 1320.721472][ T9478] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 1320.722331][ T9478] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 1321.037920][ T9478] Bluetooth: hci2: command tx timeout [ 1321.117834][ T9478] Bluetooth: hci3: command tx timeout [ 1322.529390][T12099] chnl_net:caif_netlink_parms(): no params data found [ 1323.091828][T12105] chnl_net:caif_netlink_parms(): no params data found [ 1323.117840][ T9478] Bluetooth: hci2: command tx timeout [ 1323.197864][ T9478] Bluetooth: hci3: command tx timeout [ 1323.761111][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.761296][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.761537][T12099] bridge_slave_0: entered allmulticast mode [ 1323.763658][T12099] bridge_slave_0: entered promiscuous mode [ 1323.799674][ T6009] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1323.846743][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.846892][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.847060][T12099] bridge_slave_1: entered allmulticast mode [ 1323.871721][T12099] bridge_slave_1: entered promiscuous mode [ 1323.947897][ T6009] usb 4-1: Using ep0 maxpacket: 16 [ 1323.964319][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.964352][ T6009] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1323.964396][ T6009] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1323.964421][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.017932][ T6009] usb 4-1: config 0 descriptor?? [ 1324.040572][ T6009] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1324.416345][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.702019][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.702584][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.702867][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.703035][T12105] bridge_slave_0: entered allmulticast mode [ 1324.705242][T12105] bridge_slave_0: entered promiscuous mode [ 1324.797858][ T9478] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1324.798256][ T9478] Bluetooth: hci1: Injecting HCI hardware error event [ 1324.801512][ T9478] Bluetooth: hci1: hardware error 0x00 [ 1324.929785][T12139] random: crng reseeded on system resumption [ 1325.010700][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.010893][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.011136][T12105] bridge_slave_1: entered allmulticast mode [ 1325.013371][T12105] bridge_slave_1: entered promiscuous mode [ 1325.197676][ T5119] Bluetooth: hci2: command tx timeout [ 1325.278001][ T5119] Bluetooth: hci3: command tx timeout [ 1325.343729][T12099] team0: Port device team_slave_0 added [ 1325.424952][T12099] team0: Port device team_slave_1 added [ 1325.483396][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.606841][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.862333][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.862352][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.862379][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.001121][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.001136][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.001157][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.005143][T12105] team0: Port device team_slave_0 added [ 1326.140634][T12105] team0: Port device team_slave_1 added [ 1326.504737][T12105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.504754][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.504779][T12105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.606527][ T43] usb 4-1: USB disconnect, device number 46 [ 1326.662953][T12105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.662968][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.662990][T12105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.723985][T12099] hsr_slave_0: entered promiscuous mode [ 1326.725276][T12099] hsr_slave_1: entered promiscuous mode [ 1326.726323][T12099] debugfs: 'hsr0' already exists in 'hsr' [ 1326.726347][T12099] Cannot create hsr debugfs directory [ 1326.802881][T11965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1326.855897][T11965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1326.877653][ T9478] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1328.020066][T11965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1328.197248][T11965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1328.482945][T12105] hsr_slave_0: entered promiscuous mode [ 1328.483901][T12105] hsr_slave_1: entered promiscuous mode [ 1328.484562][T12105] debugfs: 'hsr0' already exists in 'hsr' [ 1328.484580][T12105] Cannot create hsr debugfs directory [ 1329.036662][ T6024] bridge_slave_1: left allmulticast mode [ 1329.036693][ T6024] bridge_slave_1: left promiscuous mode [ 1329.036953][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.088824][ T6024] bridge_slave_0: left allmulticast mode [ 1329.088848][ T6024] bridge_slave_0: left promiscuous mode [ 1329.089081][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.172217][ T6024] bridge_slave_1: left allmulticast mode [ 1329.172240][ T6024] bridge_slave_1: left promiscuous mode [ 1329.172485][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.258817][ T6024] bridge_slave_0: left allmulticast mode [ 1329.258840][ T6024] bridge_slave_0: left promiscuous mode [ 1329.259104][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.322252][ T6024] bridge_slave_1: left allmulticast mode [ 1329.322277][ T6024] bridge_slave_1: left promiscuous mode [ 1329.322521][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.389279][ T6024] bridge_slave_0: left allmulticast mode [ 1329.389310][ T6024] bridge_slave_0: left promiscuous mode [ 1329.389603][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.462870][ T6024] bridge_slave_1: left allmulticast mode [ 1329.462902][ T6024] bridge_slave_1: left promiscuous mode [ 1329.463157][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.509531][ T6024] bridge_slave_0: left allmulticast mode [ 1329.509555][ T6024] bridge_slave_0: left promiscuous mode [ 1329.509754][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.887853][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1329.948344][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.029901][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.037758][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1330.053901][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.053939][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1330.053972][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1330.053988][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.063822][ T43] usb 4-1: config 0 descriptor?? [ 1330.113300][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1330.141558][ T6024] bond0 (unregistering): Released all slaves [ 1330.359958][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.469639][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.529691][ T6024] bond0 (unregistering): Released all slaves [ 1331.001790][T12165] random: crng reseeded on system resumption [ 1331.089186][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.168592][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.250168][ T6024] bond0 (unregistering): Released all slaves [ 1331.938522][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.030662][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.090222][ T6024] bond0 (unregistering): Released all slaves [ 1332.150919][T11988] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1332.362948][T11988] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1332.433022][T11988] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1332.501247][T11988] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1332.696558][ T6009] usb 4-1: USB disconnect, device number 47 [ 1333.307777][ T6024] hsr_slave_0: left promiscuous mode [ 1333.330096][ T6024] hsr_slave_1: left promiscuous mode [ 1333.330955][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.368924][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.507845][ T6024] hsr_slave_0: left promiscuous mode [ 1333.549491][ T6024] hsr_slave_1: left promiscuous mode [ 1333.551337][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.582557][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.927940][ T6024] hsr_slave_0: left promiscuous mode [ 1333.950627][ T6024] hsr_slave_1: left promiscuous mode [ 1333.964014][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.013439][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.225539][ T6024] hsr_slave_0: left promiscuous mode [ 1334.266971][ T6024] hsr_slave_1: left promiscuous mode [ 1334.273955][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.294679][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.242805][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1335.448786][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1336.766853][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1336.813861][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1336.815100][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1336.816416][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1336.818742][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.989441][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1338.960015][ T9478] Bluetooth: hci4: command tx timeout [ 1339.048671][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1339.737411][ T37] audit: type=1326 audit(1767742045.193:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.3.1338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1340.438478][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1340.598332][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1341.037717][ T9478] Bluetooth: hci4: command tx timeout [ 1342.202036][T12215] trusted_key: encrypted_key: insufficient parameters specified [ 1343.070118][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1343.117966][ T9478] Bluetooth: hci4: command tx timeout [ 1343.208453][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1344.991309][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1344.994763][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1345.011925][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1345.062802][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1345.065436][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1345.157759][ T37] audit: type=1326 audit(1767742050.613:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.3.1345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1345.197977][ T9478] Bluetooth: hci4: command tx timeout [ 1345.632446][T12186] chnl_net:caif_netlink_parms(): no params data found [ 1346.349553][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.349755][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.349976][T12186] bridge_slave_0: entered allmulticast mode [ 1346.352759][T12186] bridge_slave_0: entered promiscuous mode [ 1346.386049][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.386218][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.386465][T12186] bridge_slave_1: entered allmulticast mode [ 1346.409719][T12186] bridge_slave_1: entered promiscuous mode [ 1346.682861][T12186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.703367][T12186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.939987][T12186] team0: Port device team_slave_0 added [ 1346.945068][T12186] team0: Port device team_slave_1 added [ 1347.020770][T12239] rdma_op ffff888036672a70 conn xmit_rdma 0000000000000000 [ 1347.119767][ T9478] Bluetooth: hci0: command tx timeout [ 1347.237131][T12186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.237146][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.237168][T12186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.371859][T12186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.371878][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.371907][T12186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.672900][T12247] trusted_key: encrypted_key: insufficient parameters specified [ 1348.682768][T12186] hsr_slave_0: entered promiscuous mode [ 1348.683800][T12186] hsr_slave_1: entered promiscuous mode [ 1348.685255][T12226] chnl_net:caif_netlink_parms(): no params data found [ 1348.707613][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1348.747069][T12099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1348.860442][T12099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1348.867747][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1348.880706][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.880743][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.880760][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1348.880792][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1348.880809][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.885066][ T43] usb 4-1: config 0 descriptor?? [ 1349.104330][T12099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1349.198129][ T9478] Bluetooth: hci0: command tx timeout [ 1349.249240][T12099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1349.569629][T12251] random: crng reseeded on system resumption [ 1349.597800][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 1349.597931][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1349.643448][ T43] usb 4-1: USB disconnect, device number 48 [ 1349.951080][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.951254][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.951414][T12226] bridge_slave_0: entered allmulticast mode [ 1349.953336][T12226] bridge_slave_0: entered promiscuous mode [ 1350.018764][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.018926][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.019183][T12226] bridge_slave_1: entered allmulticast mode [ 1350.022124][T12226] bridge_slave_1: entered promiscuous mode [ 1350.235033][ T37] audit: type=1326 audit(1767742055.693:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12263 comm="syz.3.1352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1350.382787][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.398411][T12105] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1350.435213][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.451156][T12105] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1350.581537][T12105] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1350.698971][T12105] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1350.763804][T12226] team0: Port device team_slave_0 added [ 1350.777227][T12226] team0: Port device team_slave_1 added [ 1351.278100][ T9478] Bluetooth: hci0: command tx timeout [ 1351.630899][T12226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.630913][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.630935][T12226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.635520][T12226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.635534][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.635554][T12226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.009985][T12276] No control pipe specified [ 1352.471704][T12283] trusted_key: encrypted_key: insufficient parameters specified [ 1353.298770][T12226] hsr_slave_0: entered promiscuous mode [ 1353.300297][T12226] hsr_slave_1: entered promiscuous mode [ 1353.301344][T12226] debugfs: 'hsr0' already exists in 'hsr' [ 1353.301369][T12226] Cannot create hsr debugfs directory [ 1353.400173][ T9478] Bluetooth: hci0: command tx timeout [ 1354.629629][ T941] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1354.777794][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 1354.779989][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.780022][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.780048][ T941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1354.780080][ T941] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1354.780097][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.784426][ T941] usb 4-1: config 0 descriptor?? [ 1355.217716][ T941] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 1355.256818][ T941] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 1355.276439][ T941] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1355.406317][ T5995] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1355.406904][ T8829] usb 4-1: USB disconnect, device number 49 [ 1355.424715][ T5995] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1355.424795][ T5995] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1355.424863][ T5995] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1355.860532][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.861424][T12186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1355.905404][T12186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1356.011200][ T37] audit: type=1326 audit(1767742061.473:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.3.1359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1356.152887][T12186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1356.205188][T12186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1356.293910][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.312895][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.350503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.350722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.419759][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.419914][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.496423][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.626846][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.626997][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.683487][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.696973][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.852054][ T6024] bridge_slave_1: left allmulticast mode [ 1356.852089][ T6024] bridge_slave_1: left promiscuous mode [ 1356.852400][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.920996][ T6024] bridge_slave_0: left allmulticast mode [ 1356.921028][ T6024] bridge_slave_0: left promiscuous mode [ 1356.921299][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.011284][ T6024] bridge_slave_1: left allmulticast mode [ 1357.011319][ T6024] bridge_slave_1: left promiscuous mode [ 1357.011502][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.079403][ T6024] bridge_slave_0: left allmulticast mode [ 1357.079429][ T6024] bridge_slave_0: left promiscuous mode [ 1357.079609][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.729909][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.828329][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.900098][ T6024] bond0 (unregistering): Released all slaves [ 1358.198365][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.260160][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.320160][ T6024] bond0 (unregistering): Released all slaves [ 1359.232465][T12318] trusted_key: encrypted_key: insufficient parameters specified [ 1360.047707][ T6024] hsr_slave_0: left promiscuous mode [ 1360.087775][ T6024] hsr_slave_1: left promiscuous mode [ 1360.088573][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.131067][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.287914][ T6024] hsr_slave_0: left promiscuous mode [ 1361.307719][ T6024] hsr_slave_1: left promiscuous mode [ 1361.308566][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.350782][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.387760][ T5978] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1361.540457][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 1361.543276][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.543310][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.543326][ T5978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1361.543356][ T5978] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1361.543372][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.581720][ T5978] usb 4-1: config 0 descriptor?? [ 1362.055815][ T5978] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 1362.149977][ T5978] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 1362.150396][ T5978] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1362.220127][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1362.220720][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1362.221255][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1362.221591][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1362.224403][ T43] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1362.289192][ T5978] usb 4-1: USB disconnect, device number 50 [ 1362.428345][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1362.839429][ T37] audit: type=1326 audit(1767742068.293:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12327 comm="syz.3.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1363.838431][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1363.989047][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1364.829971][T12186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.003851][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.064004][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.067375][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.098130][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.156050][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.156290][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.278797][T12344] trusted_key: encrypted_key: insufficient parameters specified [ 1366.626113][T12226] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1367.017162][T12226] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1367.127141][T12371] trusted_key: encrypted_key: insufficient parameters specified [ 1367.144024][T12371] Bluetooth: MGMT ver 1.23 [ 1367.789235][T12226] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1367.960920][T12226] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1368.088505][ T37] audit: type=1326 audit(1767742073.543:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.3.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c2acf749 code=0x0 [ 1368.093215][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.234500][T12099] veth0_vlan: entered promiscuous mode [ 1368.297943][T12099] veth1_vlan: entered promiscuous mode [ 1368.693719][T12099] veth0_macvtap: entered promiscuous mode [ 1368.748083][T12099] veth1_macvtap: entered promiscuous mode [ 1368.907261][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.973769][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.029824][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.131606][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.175049][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.227279][ T3509] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.234483][ T3509] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.237223][ T3509] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.253956][ T3509] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.302559][ T2167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.302801][ T2167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.382478][ T2167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.395047][ T2167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.634899][T12105] veth0_vlan: entered promiscuous mode [ 1369.912315][T12105] veth1_vlan: entered promiscuous mode [ 1370.025994][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.026018][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.043136][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.043162][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.086740][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.086817][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.122443][T12105] veth0_macvtap: entered promiscuous mode [ 1372.133575][T12186] veth0_vlan: entered promiscuous mode [ 1372.167872][T12105] veth1_macvtap: entered promiscuous mode [ 1372.236347][T12186] veth1_vlan: entered promiscuous mode [ 1372.300864][T12105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.361407][T12105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.442547][ T1301] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.443234][ T1301] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.444343][ T1301] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.444615][ T1301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.675086][T12186] veth0_macvtap: entered promiscuous mode [ 1372.811740][T12186] veth1_macvtap: entered promiscuous mode [ 1373.137651][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.179248][T12186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.190384][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.190413][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.275006][T12186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.377665][ T6258] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.434332][ T1301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.466656][ T1301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.488454][T11652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.488476][T11652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.490409][ T6024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.335684][T12459] trusted_key: encrypted_key: insufficient parameters specified [ 1375.167472][T12461] trusted_key: encrypted_key: insufficient parameters specified [ 1376.409184][ T37] audit: type=1326 audit(1767742081.873:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12465 comm="syz.6.1380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f170adff749 code=0x0 [ 1376.447954][ T1354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.447972][ T1354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.751703][T12476] Bluetooth: MGMT ver 1.23 [ 1377.075177][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.075202][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.444832][T12226] veth0_vlan: entered promiscuous mode [ 1377.549130][T12226] veth1_vlan: entered promiscuous mode [ 1377.763496][T12226] veth0_macvtap: entered promiscuous mode [ 1377.795861][T12226] veth1_macvtap: entered promiscuous mode [ 1377.902795][T12226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.968987][T12226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.025030][ T6024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.026613][ T6024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.026661][ T6024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.026701][ T6024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.754577][T11652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.754600][T11652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.128763][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.128786][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.005913][T12511] trusted_key: encrypted_key: insufficient parameters specified [ 1386.037242][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1386.060666][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1386.062031][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1386.091451][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1386.095032][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1390.423087][T12534] Bluetooth: hci5: command tx timeout [ 1391.888465][T12551] trusted_key: encrypted_key: insufficient parameters specified [ 1392.478452][T12534] Bluetooth: hci5: command tx timeout [ 1392.941890][T12554] warning: `syz.5.1399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1392.942249][T12523] chnl_net:caif_netlink_parms(): no params data found [ 1394.579379][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1395'. [ 1394.924397][T12534] Bluetooth: hci5: command tx timeout [ 1396.958351][T12534] Bluetooth: hci5: command tx timeout [ 1397.690388][T12592] trusted_key: encrypted_key: insufficient parameters specified [ 1399.745137][T11652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.007537][T12538] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1400.157600][T12538] usb 7-1: Using ep0 maxpacket: 32 [ 1400.160233][T12538] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1400.163889][T12538] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1400.163920][T12538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.163942][T12538] usb 7-1: Product: syz [ 1400.163959][T12538] usb 7-1: Manufacturer: syz [ 1400.163975][T12538] usb 7-1: SerialNumber: syz [ 1400.229300][T12538] usb 7-1: config 0 descriptor?? [ 1400.252027][T12538] gs_usb 7-1:0.0: Required endpoints not found [ 1400.296377][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1417'. [ 1402.173464][T11652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.077763][ T43] usb 7-1: USB disconnect, device number 2 [ 1407.941798][T11652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.502691][T11652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.600935][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.601336][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.601657][T12523] bridge_slave_0: entered allmulticast mode [ 1410.605659][T12523] bridge_slave_0: entered promiscuous mode [ 1410.645155][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.645305][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.645558][T12523] bridge_slave_1: entered allmulticast mode [ 1410.670243][T12523] bridge_slave_1: entered promiscuous mode [ 1411.334564][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.340327][T12644] trusted_key: encrypted_key: insufficient parameters specified [ 1411.435226][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.082138][T12650] 9pnet_virtio: no channels available for device syz [ 1414.063159][T12523] team0: Port device team_slave_0 added [ 1414.079843][T12523] team0: Port device team_slave_1 added [ 1416.113069][ T8830] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1416.280465][ T8830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.280500][ T8830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.280533][ T8830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1416.280578][ T8830] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1416.280603][ T8830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.286170][ T8830] usb 7-1: config 0 descriptor?? [ 1416.418210][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.418228][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.418258][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.429368][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.429386][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.429414][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.834940][ T8830] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1418.654595][ T5978] usb 7-1: USB disconnect, device number 3 [ 1418.744317][T12523] hsr_slave_0: entered promiscuous mode [ 1418.745780][T12523] hsr_slave_1: entered promiscuous mode [ 1418.746739][T12523] debugfs: 'hsr0' already exists in 'hsr' [ 1418.746763][T12523] Cannot create hsr debugfs directory [ 1420.839273][T11652] bridge_slave_1: left allmulticast mode [ 1420.839304][T11652] bridge_slave_1: left promiscuous mode [ 1420.839555][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.009302][T11652] bridge_slave_0: left allmulticast mode [ 1421.009335][T11652] bridge_slave_0: left promiscuous mode [ 1421.011850][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.808221][T11589] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1422.127567][T11589] usb 9-1: Using ep0 maxpacket: 32 [ 1422.171371][T11589] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1422.173911][T11589] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1422.173940][T11589] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.173960][T11589] usb 9-1: Product: syz [ 1422.173975][T11589] usb 9-1: Manufacturer: syz [ 1422.173991][T11589] usb 9-1: SerialNumber: syz [ 1423.115657][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1439'. [ 1423.229598][T11589] usb 9-1: config 0 descriptor?? [ 1423.239373][T11589] gs_usb 9-1:0.0: Required endpoints not found [ 1423.452814][T12688] trusted_key: encrypted_key: insufficient parameters specified [ 1425.292263][ T5978] usb 9-1: USB disconnect, device number 2 [ 1425.798329][ T8829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1425.992382][ T8829] usb 7-1: Using ep0 maxpacket: 32 [ 1425.998209][ T8829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.998255][ T8829] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1425.998279][ T8829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.025765][ T8829] usb 7-1: config 0 descriptor?? [ 1427.617667][ T5978] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1427.638747][ T8829] hub 7-1:0.0: bad descriptor, ignoring hub [ 1427.638792][ T8829] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1427.642347][ T8829] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1427.787662][ T5978] usb 9-1: Using ep0 maxpacket: 32 [ 1427.805435][ T5978] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1427.805467][ T5978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.870919][ T5978] usb 9-1: config 0 descriptor?? [ 1428.097660][ T5978] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1428.305678][ T5978] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1428.305702][ T5978] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1430.148665][ T8829] usb 7-1: USB disconnect, device number 4 [ 1432.509714][T12734] trusted_key: encrypted_key: insufficient parameters specified [ 1432.587600][T12507] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1432.784881][T12507] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.784919][T12507] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.784936][T12507] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1432.784967][T12507] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1432.784990][T12507] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.793973][T12507] usb 8-1: config 0 descriptor?? [ 1433.546271][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.546348][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.556472][T12507] usbhid 8-1:0.0: can't add hid device: -71 [ 1433.556619][T12507] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1433.586664][T12507] usb 8-1: USB disconnect, device number 2 [ 1434.383155][T12695] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1434.538019][T12695] usb 6-1: Using ep0 maxpacket: 32 [ 1434.542055][T12695] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1434.542126][T12695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.546818][T12695] usb 6-1: config 0 descriptor?? [ 1434.618310][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.647647][T12538] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1434.701092][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.839054][T11652] bond0 (unregistering): Released all slaves [ 1435.009171][T12538] usb 7-1: Using ep0 maxpacket: 32 [ 1435.029946][T12538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.029999][T12538] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1435.030024][T12538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.034528][T12695] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1435.215406][T12750] vxcan1: entered promiscuous mode [ 1435.936934][T12538] usb 7-1: config 0 descriptor?? [ 1435.969819][T12538] hub 7-1:0.0: bad descriptor, ignoring hub [ 1435.971889][T12538] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1435.985351][T12538] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1436.012230][T11652] tipc: Disabling bearer [ 1436.119013][T11652] tipc: Left network mode [ 1440.137784][ T8829] usb 7-1: USB disconnect, device number 5 [ 1442.081390][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1442.173710][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1442.808376][T12783] fuse: Unknown parameter '0x0000000000000003' [ 1445.296290][T11652] hsr_slave_0: left promiscuous mode [ 1445.617563][T11652] hsr_slave_1: left promiscuous mode [ 1445.618558][T11652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.618584][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.718882][T11652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.718914][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.740020][T12793] trusted_key: encrypted_key: insufficient parameters specified [ 1446.007813][ T9478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1446.036428][ T9478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1446.045500][ T9478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1446.058010][ T9478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1446.067100][ T9478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1446.069201][T11652] veth1_macvtap: left promiscuous mode [ 1446.086227][T11652] veth0_macvtap: left promiscuous mode [ 1446.086477][T11652] veth1_vlan: left promiscuous mode [ 1446.086629][T11652] veth0_vlan: left promiscuous mode [ 1448.358182][T12534] Bluetooth: hci1: command tx timeout [ 1450.398521][T12534] Bluetooth: hci1: command tx timeout [ 1452.088999][T12825] fuse: Unknown parameter '0x0000000000000003' [ 1452.487610][T12534] Bluetooth: hci1: command tx timeout [ 1454.170104][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1455.931533][T12534] Bluetooth: hci1: command tx timeout [ 1456.008190][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1457.825724][T12845] syz.5.1483 (12845) used greatest stack depth: 18064 bytes left [ 1461.601015][ T9478] Bluetooth: hci4: command 0x0406 tx timeout [ 1461.778910][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1461.799736][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1461.801159][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1461.804693][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1461.805619][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1463.389562][T12874] 9pnet_virtio: no channels available for device syz [ 1463.448903][T12801] vxcan1: entered promiscuous mode [ 1463.931389][T12534] Bluetooth: hci5: command tx timeout [ 1465.997820][T12534] Bluetooth: hci5: command tx timeout [ 1466.342915][T12796] chnl_net:caif_netlink_parms(): no params data found [ 1467.390891][T12859] chnl_net:caif_netlink_parms(): no params data found [ 1467.869750][T11652] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.077768][ T5826] Bluetooth: hci5: command tx timeout [ 1468.299040][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.299375][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.299524][T12796] bridge_slave_0: entered allmulticast mode [ 1468.301775][T12796] bridge_slave_0: entered promiscuous mode [ 1468.501565][T11652] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.299468][T12534] Bluetooth: hci5: command tx timeout [ 1470.379459][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.379673][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.379919][T12796] bridge_slave_1: entered allmulticast mode [ 1470.384071][T12796] bridge_slave_1: entered promiscuous mode [ 1471.515042][T11652] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.565801][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.696814][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.700982][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.701537][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.702444][T12859] bridge_slave_0: entered allmulticast mode [ 1471.728157][T12859] bridge_slave_0: entered promiscuous mode [ 1473.760567][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 1474.027089][T11652] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.085822][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.085961][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.086220][T12859] bridge_slave_1: entered allmulticast mode [ 1474.089290][T12859] bridge_slave_1: entered promiscuous mode [ 1476.192493][T12796] team0: Port device team_slave_0 added [ 1476.298722][T12796] team0: Port device team_slave_1 added [ 1476.302832][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.353157][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.870893][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.870912][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.870941][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.976231][T12859] team0: Port device team_slave_0 added [ 1476.977305][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.977322][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.007570][ T6609] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1477.024441][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.043437][T12859] team0: Port device team_slave_1 added [ 1477.157559][ T6609] usb 8-1: Using ep0 maxpacket: 32 [ 1477.159494][ T6609] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.159527][ T6609] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.159569][ T6609] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1477.159593][ T6609] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.165122][ T6609] usb 8-1: config 0 descriptor?? [ 1477.241337][ T6609] hub 8-1:0.0: USB hub found [ 1477.247103][ T37] audit: type=1326 audit(1767742182.703:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12938 comm="syz.8.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aedbf749 code=0x7ffc0000 [ 1477.285201][ T37] audit: type=1326 audit(1767742182.703:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12938 comm="syz.8.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aedbf749 code=0x7ffc0000 [ 1477.285593][ T37] audit: type=1326 audit(1767742182.743:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12938 comm="syz.8.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f38aedbf749 code=0x7ffc0000 [ 1477.286092][ T37] audit: type=1326 audit(1767742182.743:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12938 comm="syz.8.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aedbf749 code=0x7ffc0000 [ 1477.446756][ T6609] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1477.682964][ T6609] usbhid 8-1:0.0: can't add hid device: -71 [ 1477.683103][ T6609] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1477.719300][ T6609] usb 8-1: USB disconnect, device number 3 [ 1478.023377][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.023396][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.023424][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.264307][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.264327][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.264358][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.720971][T12796] hsr_slave_0: entered promiscuous mode [ 1478.741728][T12796] hsr_slave_1: entered promiscuous mode [ 1478.742431][T12796] debugfs: 'hsr0' already exists in 'hsr' [ 1478.742463][T12796] Cannot create hsr debugfs directory [ 1478.744818][T11652] bridge_slave_1: left allmulticast mode [ 1478.744846][T11652] bridge_slave_1: left promiscuous mode [ 1478.745086][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.121963][T11652] bridge_slave_0: left allmulticast mode [ 1479.121996][T11652] bridge_slave_0: left promiscuous mode [ 1479.122270][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.255081][T11652] bridge_slave_1: left allmulticast mode [ 1479.255114][T11652] bridge_slave_1: left promiscuous mode [ 1479.255381][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.318058][T12729] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1479.369233][T11652] bridge_slave_0: left allmulticast mode [ 1479.369265][T11652] bridge_slave_0: left promiscuous mode [ 1479.369530][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.413000][T12970] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1479.413031][T12970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1479.415870][T12970] vhci_hcd vhci_hcd.0: Device attached [ 1479.477984][T12729] usb 8-1: Using ep0 maxpacket: 16 [ 1480.068229][T12729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.068257][T12729] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1480.068294][T12729] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1480.068313][T12729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.073362][T12729] usb 8-1: config 0 descriptor?? [ 1480.141846][T12729] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1480.230236][ T6609] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1480.288766][T12971] vhci_hcd: connection reset by peer [ 1480.291142][T12537] vhci_hcd vhci_hcd.8: stop threads [ 1480.291168][T12537] vhci_hcd vhci_hcd.8: release socket [ 1480.291460][T12537] vhci_hcd vhci_hcd.8: disconnect device [ 1481.831137][T12821] usb 8-1: USB disconnect, device number 4 [ 1486.657798][ T6609] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1486.896512][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.989068][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.060620][T11652] bond0 (unregistering): Released all slaves [ 1487.828477][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.041097][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.140544][T11652] bond0 (unregistering): Released all slaves [ 1490.308748][T12695] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1490.308889][T12695] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1490.324348][ T5978] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1490.324433][ T5978] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1490.423865][T12695] usb 6-1: USB disconnect, device number 2 [ 1490.437570][ T5978] usb 9-1: USB disconnect, device number 3 [ 1491.597543][T12859] hsr_slave_0: entered promiscuous mode [ 1491.628143][T12859] hsr_slave_1: entered promiscuous mode [ 1491.629147][T12859] debugfs: 'hsr0' already exists in 'hsr' [ 1491.629174][T12859] Cannot create hsr debugfs directory [ 1492.867036][T12774] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1493.028430][T12774] usb 8-1: Using ep0 maxpacket: 32 [ 1493.030475][T12774] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.030499][T12774] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.030527][T12774] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1493.030544][T12774] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.105444][T12774] usb 8-1: config 0 descriptor?? [ 1493.149302][T12774] hub 8-1:0.0: USB hub found [ 1493.533707][T12774] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1493.760375][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1493.760751][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1493.761114][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1493.761240][T12774] usbhid 8-1:0.0: can't add hid device: -32 [ 1493.761329][T12774] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1493.853736][T12774] usb 8-1: USB disconnect, device number 5 [ 1494.197930][T11652] hsr_slave_0: left promiscuous mode [ 1494.277928][T11652] hsr_slave_1: left promiscuous mode [ 1494.279873][T11652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.279900][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.358614][T11652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.358644][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.570278][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.570354][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.225453][T11652] hsr_slave_0: left promiscuous mode [ 1497.377558][T11652] hsr_slave_1: left promiscuous mode [ 1497.378696][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.450948][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.037781][T11652] veth1_macvtap: left promiscuous mode [ 1499.037900][T11652] veth0_macvtap: left promiscuous mode [ 1499.038182][T11652] veth1_vlan: left promiscuous mode [ 1499.038391][T11652] veth0_vlan: left promiscuous mode [ 1499.899293][ T5819] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1500.047631][ T5819] usb 9-1: Using ep0 maxpacket: 32 [ 1500.049799][ T5819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.049833][ T5819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.049874][ T5819] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1500.049898][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.056664][ T5819] usb 9-1: config 0 descriptor?? [ 1500.125460][ T5819] hub 9-1:0.0: USB hub found [ 1500.569981][ T5819] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 1500.791784][ T5819] usbhid 9-1:0.0: can't add hid device: -71 [ 1500.791897][ T5819] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1500.812184][ T5819] usb 9-1: USB disconnect, device number 5 [ 1507.251777][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1507.255019][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1507.299402][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1507.308940][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1507.326167][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1509.440006][T12534] Bluetooth: hci2: command tx timeout [ 1511.798376][T12534] Bluetooth: hci2: command tx timeout [ 1513.956719][T12534] Bluetooth: hci2: command tx timeout [ 1514.062160][T13118] trusted_key: encrypted_key: insufficient parameters specified [ 1515.058585][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1515.989488][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1515.997659][T12534] Bluetooth: hci2: command tx timeout [ 1517.988486][T13143] trusted_key: encrypted_key: insufficient parameters specified [ 1522.772780][T13165] trusted_key: encrypted_key: insufficient parameters specified [ 1523.008771][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1523.047850][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1523.077801][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1523.097031][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1523.111129][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1525.197501][T12534] Bluetooth: hci6: command tx timeout [ 1525.587574][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1525.753504][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.753559][ T43] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1525.753594][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.805072][ T43] usb 8-1: config 0 descriptor?? [ 1527.109636][ T43] steelseries 0003:1038:12B6.0007: item fetching failed at offset 5/7 [ 1527.110558][ T43] steelseries 0003:1038:12B6.0007: probe with driver steelseries failed with error -22 [ 1527.137210][ T43] usb 8-1: USB disconnect, device number 6 [ 1527.302605][T12534] Bluetooth: hci6: command tx timeout [ 1529.738438][T12534] Bluetooth: hci6: command tx timeout [ 1532.308629][T12534] Bluetooth: hci6: command tx timeout [ 1532.861592][T12507] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1533.043754][T12507] usb 6-1: Using ep0 maxpacket: 32 [ 1533.058934][T12507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1533.081585][T12507] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1533.081620][T12507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.081642][T12507] usb 6-1: Product: syz [ 1533.081658][T12507] usb 6-1: Manufacturer: syz [ 1533.081674][T12507] usb 6-1: SerialNumber: syz [ 1533.147297][T12507] usb 6-1: config 0 descriptor?? [ 1533.168867][T12507] gs_usb 6-1:0.0: Required endpoints not found [ 1533.525951][T12763] usb 6-1: USB disconnect, device number 3 [ 1535.956843][T13238] trusted_key: encrypted_key: insufficient parameters specified [ 1539.098890][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1541.147493][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1541.153368][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1541.175257][T13270] trusted_key: encrypted_key: insufficient parameters specified [ 1541.357887][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1541.370727][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1541.383976][ T43] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1541.384008][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.384028][ T43] usb 6-1: Product: syz [ 1541.384043][ T43] usb 6-1: Manufacturer: syz [ 1541.384056][ T43] usb 6-1: SerialNumber: syz [ 1541.454670][ T43] usb 6-1: config 0 descriptor?? [ 1541.497055][ T43] gs_usb 6-1:0.0: Required endpoints not found [ 1541.691263][T12695] usb 6-1: USB disconnect, device number 4 [ 1543.347401][T13288] 9pnet_virtio: no channels available for device syz [ 1545.861307][T13304] trusted_key: encrypted_key: insufficient parameters specified [ 1546.977913][T12695] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1547.127518][T12695] usb 8-1: Using ep0 maxpacket: 32 [ 1547.156077][T12695] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1547.156109][T12695] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.184176][T12821] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1547.224641][T12695] usb 8-1: config 0 descriptor?? [ 1547.328301][T12821] usb 9-1: Using ep0 maxpacket: 32 [ 1547.332453][T12821] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1547.356293][T12821] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1547.356384][T12821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.356408][T12821] usb 9-1: Product: syz [ 1547.356424][T12821] usb 9-1: Manufacturer: syz [ 1547.356439][T12821] usb 9-1: SerialNumber: syz [ 1547.453525][T12695] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1547.499792][T12821] usb 9-1: config 0 descriptor?? [ 1547.535381][T12695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1547.590497][T12695] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1547.590572][T12695] usb 8-1: media controller created [ 1547.658631][T12821] gs_usb 9-1:0.0: Required endpoints not found [ 1547.684862][T12695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1547.778247][T12821] usb 9-1: USB disconnect, device number 6 [ 1547.854585][T13082] chnl_net:caif_netlink_parms(): no params data found [ 1548.046025][T12695] az6027: usb out operation failed. (-71) [ 1548.050465][T12695] az6027: usb out operation failed. (-71) [ 1548.050484][T12695] stb0899_attach: Driver disabled by Kconfig [ 1548.050494][T12695] az6027: no front-end attached [ 1548.050494][T12695] [ 1548.052092][T12695] az6027: usb out operation failed. (-71) [ 1548.052110][T12695] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1548.060832][T12695] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12 [ 1548.160833][T12695] dvb-usb: schedule remote query interval to 400 msecs. [ 1548.160858][T12695] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1548.256440][T12695] usb 8-1: USB disconnect, device number 7 [ 1550.003414][T13346] 9pnet_virtio: no channels available for device syz [ 1550.541183][T12695] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1550.791741][T13168] chnl_net:caif_netlink_parms(): no params data found [ 1550.931530][T13355] trusted_key: encrypted_key: insufficient parameters specified [ 1551.320293][T13082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.320482][T13082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.320747][T13082] bridge_slave_0: entered allmulticast mode [ 1551.323313][T13082] bridge_slave_0: entered promiscuous mode [ 1551.364213][T13082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.364388][T13082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.364639][T13082] bridge_slave_1: entered allmulticast mode [ 1551.394112][T13082] bridge_slave_1: entered promiscuous mode [ 1551.478153][T12763] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1551.657653][T12763] usb 6-1: Using ep0 maxpacket: 32 [ 1551.755762][T12763] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1551.755796][T12763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.856747][T12763] usb 6-1: config 0 descriptor?? [ 1552.598247][T12763] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1552.609817][T12763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1552.627605][T12763] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1552.627668][T12763] usb 6-1: media controller created [ 1554.294329][T12763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1554.428315][T12763] az6027: usb out operation failed. (-71) [ 1554.428816][T12763] az6027: usb out operation failed. (-71) [ 1554.428834][T12763] stb0899_attach: Driver disabled by Kconfig [ 1554.428846][T12763] az6027: no front-end attached [ 1554.428846][T12763] [ 1554.429310][T12763] az6027: usb out operation failed. (-71) [ 1554.429335][T12763] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1554.433970][T12763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 1554.496717][T12763] dvb-usb: schedule remote query interval to 400 msecs. [ 1554.496742][T12763] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1554.521118][T12763] usb 6-1: USB disconnect, device number 5 [ 1554.588166][T13082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.701404][T12763] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1554.732138][T13082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.890231][T13168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.901061][T13168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.901787][T13168] bridge_slave_0: entered allmulticast mode [ 1554.928350][T13168] bridge_slave_0: entered promiscuous mode [ 1555.324940][T13168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.325118][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.325319][T13168] bridge_slave_1: entered allmulticast mode [ 1555.344379][T13168] bridge_slave_1: entered promiscuous mode [ 1556.448476][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.448557][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.476544][T13402] trusted_key: encrypted_key: insufficient parameters specified [ 1556.642827][T13082] team0: Port device team_slave_0 added [ 1556.849686][T13082] team0: Port device team_slave_1 added [ 1556.849970][T11652] bridge_slave_1: left allmulticast mode [ 1556.849995][T11652] bridge_slave_1: left promiscuous mode [ 1556.850249][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.949307][T11652] bridge_slave_0: left allmulticast mode [ 1556.949341][T11652] bridge_slave_0: left promiscuous mode [ 1556.949634][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.072385][T11652] bridge_slave_1: left allmulticast mode [ 1557.072418][T11652] bridge_slave_1: left promiscuous mode [ 1557.072677][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.409634][T11652] bridge_slave_0: left allmulticast mode [ 1557.409668][T11652] bridge_slave_0: left promiscuous mode [ 1557.413683][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.368207][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.468318][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.551413][T11652] bond0 (unregistering): Released all slaves [ 1560.641342][T12821] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1560.818201][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.828535][T12821] usb 9-1: Using ep0 maxpacket: 32 [ 1560.830974][T12821] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1560.831005][T12821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.863064][T12821] usb 9-1: config 0 descriptor?? [ 1560.985252][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.069842][T11652] bond0 (unregistering): Released all slaves [ 1561.087500][T12821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1561.105705][T12821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1561.107001][T12821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1561.107066][T12821] usb 9-1: media controller created [ 1561.278843][T12821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1561.319292][T12821] az6027: usb out operation failed. (-71) [ 1561.319725][T12821] az6027: usb out operation failed. (-71) [ 1561.319740][T12821] stb0899_attach: Driver disabled by Kconfig [ 1561.319752][T12821] az6027: no front-end attached [ 1561.319752][T12821] [ 1561.322111][T12821] az6027: usb out operation failed. (-71) [ 1561.322216][T12821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1561.375822][T12821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input14 [ 1561.445072][T12821] dvb-usb: schedule remote query interval to 400 msecs. [ 1561.445118][T12821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1561.468480][T12821] usb 9-1: USB disconnect, device number 7 [ 1561.698642][T12821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1561.752344][T13168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.926669][T13168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.927873][T13082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.927890][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.927921][T13082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.124805][T13082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.124826][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.124856][T13082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.926879][T11652] hsr_slave_0: left promiscuous mode [ 1566.215541][T11652] hsr_slave_1: left promiscuous mode [ 1566.216626][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.139867][T13466] trusted_key: encrypted_key: insufficient parameters specified [ 1567.238815][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.032962][T11652] hsr_slave_0: left promiscuous mode [ 1568.105749][T11652] hsr_slave_1: left promiscuous mode [ 1568.106821][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.213066][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.227517][ T941] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1568.350545][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1568.359077][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1568.372171][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1568.384794][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1568.385677][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1568.388848][ T941] usb 9-1: Using ep0 maxpacket: 32 [ 1568.418835][ T941] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1568.418876][ T941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.489970][ T941] usb 9-1: config 0 descriptor?? [ 1568.721324][ T941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1568.752096][ T941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1568.762721][ T941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1568.762818][ T941] usb 9-1: media controller created [ 1568.864055][ T941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1568.988933][ T941] az6027: usb out operation failed. (-71) [ 1568.989605][ T941] az6027: usb out operation failed. (-71) [ 1568.989623][ T941] stb0899_attach: Driver disabled by Kconfig [ 1568.989634][ T941] az6027: no front-end attached [ 1568.989634][ T941] [ 1568.990056][ T941] az6027: usb out operation failed. (-71) [ 1568.990071][ T941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1569.009847][ T941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input15 [ 1569.088966][ T941] dvb-usb: schedule remote query interval to 400 msecs. [ 1569.088995][ T941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1569.117681][ T941] usb 9-1: USB disconnect, device number 8 [ 1569.670847][ T941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1570.570875][T12534] Bluetooth: hci1: command tx timeout [ 1571.814051][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1571.959582][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1572.429228][T13518] trusted_key: encrypted_key: insufficient parameters specified [ 1572.830024][T12534] Bluetooth: hci1: command tx timeout [ 1574.896403][T12534] Bluetooth: hci1: command tx timeout [ 1575.238216][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1575.404920][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1576.421057][T13168] team0: Port device team_slave_0 added [ 1576.957693][T12534] Bluetooth: hci1: command tx timeout [ 1577.350103][T13168] team0: Port device team_slave_1 added [ 1578.615392][T13552] trusted_key: encrypted_key: insufficient parameters specified [ 1579.579840][T13168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.579861][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.579893][T13168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.582550][T13168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.582569][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.582600][T13168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.457069][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1584.485824][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1584.810362][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1584.865327][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1584.866114][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1585.400006][T13599] trusted_key: encrypted_key: insufficient parameters specified [ 1587.037887][T12534] Bluetooth: hci2: command tx timeout [ 1589.117672][T12534] Bluetooth: hci2: command tx timeout [ 1589.802989][T13655] trusted_key: encrypted_key: insufficient parameters specified [ 1591.834073][T12534] Bluetooth: hci2: command tx timeout [ 1591.929673][T13476] chnl_net:caif_netlink_parms(): no params data found [ 1592.943600][T13587] chnl_net:caif_netlink_parms(): no params data found [ 1593.837524][T12534] Bluetooth: hci2: command tx timeout [ 1595.391226][T11652] bridge_slave_1: left allmulticast mode [ 1595.391262][T11652] bridge_slave_1: left promiscuous mode [ 1595.391574][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.468711][T11652] bridge_slave_0: left allmulticast mode [ 1595.468737][T11652] bridge_slave_0: left promiscuous mode [ 1595.505790][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.589567][T11652] bridge_slave_1: left allmulticast mode [ 1595.589594][T11652] bridge_slave_1: left promiscuous mode [ 1595.589854][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.661537][T11652] bridge_slave_0: left allmulticast mode [ 1595.661562][T11652] bridge_slave_0: left promiscuous mode [ 1595.661749][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.589039][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.528387][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.816679][T11652] bond0 (unregistering): Released all slaves [ 1597.892089][T13706] trusted_key: encrypted_key: insufficient parameters specified [ 1602.120813][T11652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.588445][T11652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.880756][T11652] bond0 (unregistering): Released all slaves [ 1603.969756][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.969899][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.970165][T13476] bridge_slave_0: entered allmulticast mode [ 1603.998436][T13476] bridge_slave_0: entered promiscuous mode [ 1604.046833][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.046951][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.047142][T13476] bridge_slave_1: entered allmulticast mode [ 1604.071251][T13476] bridge_slave_1: entered promiscuous mode [ 1605.083355][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.083961][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.229231][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.323462][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.580476][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.681594][T13736] trusted_key: encrypted_key: insufficient parameters specified [ 1608.208125][ T5889] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1608.359490][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.359536][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1608.359567][ T5889] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1608.359584][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.372736][ T5889] usb 8-1: config 0 descriptor?? [ 1608.483194][ T5889] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1609.252273][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1609.601429][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1610.576902][ T5889] usb 8-1: USB disconnect, device number 8 [ 1616.564897][T11652] team0 (unregistering): Port device team_slave_1 removed [ 1616.889218][T11652] team0 (unregistering): Port device team_slave_0 removed [ 1617.852203][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.852256][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.310435][T13587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.310890][T13587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.311143][T13587] bridge_slave_0: entered allmulticast mode [ 1620.314035][T13587] bridge_slave_0: entered promiscuous mode [ 1620.497602][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.624495][T13587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.624754][T13587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.624929][T13587] bridge_slave_1: entered allmulticast mode [ 1620.626829][T13587] bridge_slave_1: entered promiscuous mode [ 1622.749861][T13799] trusted_key: encrypted_key: insufficient parameters specified [ 1625.342041][T13476] team0: Port device team_slave_0 added [ 1625.405969][T13587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.462037][T13476] team0: Port device team_slave_1 added [ 1625.488576][T13587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.933036][ T37] audit: type=1804 audit(1767742331.313:211): pid=13811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1753" name="bus" dev="ramfs" ino=59374 res=1 errno=0 [ 1625.963421][ T37] audit: type=1804 audit(1767742331.423:212): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.1753" name="bus" dev="ramfs" ino=59374 res=1 errno=0 [ 1626.288542][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.288558][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.288579][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.291826][T13587] team0: Port device team_slave_0 added [ 1626.292730][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.292746][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.292776][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.295817][T13587] team0: Port device team_slave_1 added [ 1626.861309][T13587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.861330][T13587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.861363][T13587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.864075][T13587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.864093][T13587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.864137][T13587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.807613][T12774] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1629.909402][T13587] hsr_slave_0: entered promiscuous mode [ 1629.910991][T13587] hsr_slave_1: entered promiscuous mode [ 1629.912184][T13587] debugfs: 'hsr0' already exists in 'hsr' [ 1629.912214][T13587] Cannot create hsr debugfs directory [ 1629.970054][T12774] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1629.971690][T12774] usb 8-1: config 3 has an invalid interface number: 212 but max is 0 [ 1629.971721][T12774] usb 8-1: config 3 has no interface number 0 [ 1629.971758][T12774] usb 8-1: config 3 interface 212 has no altsetting 0 [ 1629.974890][T12774] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=2a.65 [ 1629.974923][T12774] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.974945][T12774] usb 8-1: Product: syz [ 1629.974962][T12774] usb 8-1: Manufacturer: syz [ 1629.974978][T12774] usb 8-1: SerialNumber: syz [ 1630.321941][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1630.343634][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1630.354918][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1630.363197][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1630.381519][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1630.440261][T12774] usb 8-1: USB disconnect, device number 9 [ 1633.398113][T12534] Bluetooth: hci5: command tx timeout [ 1633.753882][T12771] bridge_slave_1: left allmulticast mode [ 1633.753998][T12771] bridge_slave_1: left promiscuous mode [ 1633.754167][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.971154][T12771] bridge_slave_0: left allmulticast mode [ 1633.971179][T12771] bridge_slave_0: left promiscuous mode [ 1633.971370][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.447435][T12534] Bluetooth: hci5: command tx timeout [ 1636.282414][T12771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.378723][T12771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.498322][T12771] bond0 (unregistering): Released all slaves [ 1637.091772][T12771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.165547][T12771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.235987][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1764'. [ 1637.521722][T12534] Bluetooth: hci5: command tx timeout [ 1639.837042][T12534] Bluetooth: hci5: command tx timeout [ 1641.122421][T12771] team0 (unregistering): Port device team_slave_1 removed [ 1641.609530][T12771] team0 (unregistering): Port device team_slave_0 removed [ 1645.345284][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1645.364116][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1645.400131][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1645.408570][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1645.427031][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1647.803704][ T5826] Bluetooth: hci1: command tx timeout [ 1649.302408][T13917] trusted_key: encrypted_key: insufficient parameters specified [ 1650.111055][ T5826] Bluetooth: hci1: command tx timeout [ 1651.064326][T13835] chnl_net:caif_netlink_parms(): no params data found [ 1652.157751][ T5826] Bluetooth: hci1: command tx timeout [ 1654.590903][ T5826] Bluetooth: hci1: command tx timeout [ 1663.440226][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.440465][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.440685][T13835] bridge_slave_0: entered allmulticast mode [ 1663.479890][T13835] bridge_slave_0: entered promiscuous mode [ 1663.518377][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.518614][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.518873][T13835] bridge_slave_1: entered allmulticast mode [ 1663.523492][T13835] bridge_slave_1: entered promiscuous mode [ 1664.563694][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.566811][T13898] chnl_net:caif_netlink_parms(): no params data found [ 1666.324554][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.500794][T13835] team0: Port device team_slave_0 added [ 1671.553444][T13835] team0: Port device team_slave_1 added [ 1673.648504][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.648525][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.648564][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.821549][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.821568][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.821599][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.824683][T13898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.824919][T13898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.825146][T13898] bridge_slave_0: entered allmulticast mode [ 1674.930292][T13898] bridge_slave_0: entered promiscuous mode [ 1675.158561][T13898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.158722][T13898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.158982][T13898] bridge_slave_1: entered allmulticast mode [ 1675.162137][T13898] bridge_slave_1: entered promiscuous mode [ 1675.954724][T13898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.019908][T13835] hsr_slave_0: entered promiscuous mode [ 1676.024738][T13835] hsr_slave_1: entered promiscuous mode [ 1676.039840][T13835] debugfs: 'hsr0' already exists in 'hsr' [ 1676.040007][T13835] Cannot create hsr debugfs directory [ 1676.045145][T13898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.417678][T12774] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1676.571635][T12774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.571671][T12774] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1676.571717][T12774] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1676.571743][T12774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.639031][T12774] usb 6-1: config 0 descriptor?? [ 1676.670120][T12774] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1678.861594][T13898] team0: Port device team_slave_0 added [ 1678.896754][T13898] team0: Port device team_slave_1 added [ 1679.245314][ T5889] usb 6-1: USB disconnect, device number 6 [ 1679.286488][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.286543][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.408220][T13898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.408242][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.408274][T13898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.512718][T13898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.512737][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.512762][T13898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.602824][ T3465] bridge_slave_1: left allmulticast mode [ 1679.602857][ T3465] bridge_slave_1: left promiscuous mode [ 1679.603119][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.721557][ T3465] bridge_slave_0: left allmulticast mode [ 1679.721589][ T3465] bridge_slave_0: left promiscuous mode [ 1679.726391][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.978239][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.271424][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.377766][ T3465] bond0 (unregistering): Released all slaves [ 1684.953226][T14147] trusted_key: encrypted_key: insufficient parameters specified [ 1687.657859][ T3465] hsr_slave_0: left promiscuous mode [ 1687.677893][ T3465] hsr_slave_1: left promiscuous mode [ 1687.678715][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.830461][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.051981][T14179] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1822'. [ 1692.119210][T14213] trusted_key: encrypted_key: insufficient parameters specified [ 1692.839370][T12534] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1692.865860][T12534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1692.897675][T12534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1692.899145][T12534] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1692.900029][T12534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1694.324000][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 1694.728050][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 1695.096354][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1836'. [ 1695.101311][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1836'. [ 1695.264367][T12534] Bluetooth: hci2: command tx timeout [ 1697.278407][T12534] Bluetooth: hci2: command tx timeout [ 1697.355780][T13898] hsr_slave_0: entered promiscuous mode [ 1697.375717][T13898] hsr_slave_1: entered promiscuous mode [ 1697.384700][T13898] debugfs: 'hsr0' already exists in 'hsr' [ 1697.384735][T13898] Cannot create hsr debugfs directory [ 1698.645099][T14280] trusted_key: encrypted_key: insufficient parameters specified [ 1698.877030][T14282] trusted_key: encrypted_key: insufficient parameters specified [ 1699.617079][T12534] Bluetooth: hci2: command tx timeout [ 1701.712327][T12534] Bluetooth: hci2: command tx timeout [ 1703.878740][ T3465] bridge_slave_1: left allmulticast mode [ 1703.878773][ T3465] bridge_slave_1: left promiscuous mode [ 1703.879045][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.939216][ T3465] bridge_slave_0: left allmulticast mode [ 1703.939251][ T3465] bridge_slave_0: left promiscuous mode [ 1703.939552][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.011715][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1706.015542][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1706.042407][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1706.043732][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1706.045298][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1706.270325][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.422391][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.480879][ T3465] bond0 (unregistering): Released all slaves [ 1707.871382][ T3465] hsr_slave_0: left promiscuous mode [ 1707.964310][ T3465] hsr_slave_1: left promiscuous mode [ 1708.006099][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.164036][T12534] Bluetooth: hci5: command tx timeout [ 1711.157375][ T5826] Bluetooth: hci5: command tx timeout [ 1711.694259][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.200864][T12534] Bluetooth: hci5: command tx timeout [ 1715.333225][T12534] Bluetooth: hci5: command tx timeout [ 1719.475034][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 1720.397423][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 1727.795089][T14209] chnl_net:caif_netlink_parms(): no params data found [ 1728.735243][T14419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1877'. [ 1736.294151][T14457] ------------[ cut here ]------------ [ 1736.294167][T14457] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 1736.294227][T14457] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.7.1893/14457 [ 1736.294389][T14457] Modules linked in: [ 1736.294432][T14457] CPU: 1 UID: 0 PID: 14457 Comm: syz.7.1893 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1736.294459][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1736.294480][T14457] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 1736.294517][T14457] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 1736.294540][T14457] RSP: 0018:ffffc90005a76ed0 EFLAGS: 00010246 [ 1736.294560][T14457] RAX: dffffc0000000000 RBX: 1ffff11007a23c4a RCX: 00000000ffffdfcd [ 1736.294579][T14457] RDX: ffffffff8af1d3e0 RSI: ffffffff8af25be0 RDI: ffffffff8edf0500 [ 1736.294597][T14457] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 1736.294616][T14457] R10: ffff88803d11e358 R11: 1ffff11007a23c50 R12: ffff88803d11e250 [ 1736.294634][T14457] R13: 00000000ffffdfcd R14: 1ffff11007a23c49 R15: 00000000ffffdfcc [ 1736.294651][T14457] FS: 00007fe0cda8c6c0(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1736.294673][T14457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1736.294689][T14457] CR2: 0000000000000000 CR3: 0000000099354000 CR4: 00000000003526f0 [ 1736.294709][T14457] Call Trace: [ 1736.294723][T14457] [ 1736.294768][T14457] reg_set_min_max+0x264/0x340 [ 1736.294814][T14457] check_cond_jmp_op+0x19c6/0x2e20 [ 1736.294867][T14457] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1736.294910][T14457] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 1736.294960][T14457] ? incomplete_read_marks+0x143/0x1f0 [ 1736.294997][T14457] do_check+0x58f5/0xeba0 [ 1736.295072][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.295253][T14457] ? __pfx_do_check+0x10/0x10 [ 1736.295290][T14457] ? init_func_state+0x1ab2/0x28d0 [ 1736.295331][T14457] do_check_common+0x19cc/0x25b0 [ 1736.295380][T14457] bpf_check+0x5e87/0x1c300 [ 1736.295414][T14457] ? finish_task_switch+0x162/0x940 [ 1736.295466][T14457] ? lock_acquire+0x107/0x340 [ 1736.295520][T14457] ? lockdep_hardirqs_on+0x7b/0x110 [ 1736.295555][T14457] ? __schedule+0x1475/0x5070 [ 1736.295628][T14457] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1736.295676][T14457] ? lockdep_hardirqs_on+0x7b/0x110 [ 1736.295708][T14457] ? __pfx_bpf_check+0x10/0x10 [ 1736.295729][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.295756][T14457] ? ktime_get_with_offset+0x93/0x2a0 [ 1736.295816][T14457] ? ktime_get_with_offset+0x93/0x2a0 [ 1736.295852][T14457] ? __asan_memset+0x22/0x50 [ 1736.295910][T14457] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1736.295933][T14457] ? security_bpf_prog_load+0x125/0x3f0 [ 1736.296060][T14457] bpf_prog_load+0x13ba/0x1a10 [ 1736.296104][T14457] ? __pfx_bpf_prog_load+0x10/0x10 [ 1736.296130][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.296175][T14457] ? __sanitizer_cov_trace_pc+0x29/0x80 [ 1736.296210][T14457] ? security_bpf+0x7e/0x300 [ 1736.296250][T14457] __sys_bpf+0x507/0x860 [ 1736.296287][T14457] ? __pfx___sys_bpf+0x10/0x10 [ 1736.296338][T14457] ? rcu_is_watching+0x15/0xb0 [ 1736.296372][T14457] __x64_sys_bpf+0x7c/0x90 [ 1736.296397][T14457] do_syscall_64+0xec/0xf80 [ 1736.296441][T14457] ? rcu_is_watching+0x15/0xb0 [ 1736.296463][T14457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.296509][T14457] ? clear_bhb_loop+0x60/0xb0 [ 1736.296540][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.296564][T14457] RIP: 0033:0x7fe0cf86f749 [ 1736.296589][T14457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.296611][T14457] RSP: 002b:00007fe0cda8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1736.296635][T14457] RAX: ffffffffffffffda RBX: 00007fe0cfac6180 RCX: 00007fe0cf86f749 [ 1736.296653][T14457] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1736.296669][T14457] RBP: 00007fe0cf8f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1736.296685][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.296699][T14457] R13: 00007fe0cfac6218 R14: 00007fe0cfac6180 R15: 00007fff22e087f8 [ 1736.296737][T14457] [ 1736.296757][T14457] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1736.296775][T14457] CPU: 1 UID: 0 PID: 14457 Comm: syz.7.1893 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1736.296802][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1736.296817][T14457] Call Trace: [ 1736.296828][T14457] [ 1736.296838][T14457] vpanic+0x1e0/0x670 [ 1736.296894][T14457] panic+0xb9/0xc0 [ 1736.296928][T14457] ? __pfx_panic+0x10/0x10 [ 1736.296982][T14457] __warn+0x317/0x4b0 [ 1736.297016][T14457] ? reg_bounds_sanity_check+0x201/0xc30 [ 1736.297057][T14457] ? reg_bounds_sanity_check+0x201/0xc30 [ 1736.297094][T14457] __report_bug+0x288/0x500 [ 1736.297190][T14457] ? reg_bounds_sanity_check+0x201/0xc30 [ 1736.297234][T14457] ? __pfx___report_bug+0x10/0x10 [ 1736.297277][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.297308][T14457] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 1736.297343][T14457] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 1736.297390][T14457] report_bug_entry+0x19a/0x290 [ 1736.297429][T14457] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 1736.297464][T14457] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 1736.297501][T14457] handle_bug+0xca/0x200 [ 1736.297530][T14457] exc_invalid_op+0x1a/0x50 [ 1736.297559][T14457] asm_exc_invalid_op+0x1a/0x20 [ 1736.297582][T14457] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 1736.297618][T14457] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 1736.297640][T14457] RSP: 0018:ffffc90005a76ed0 EFLAGS: 00010246 [ 1736.297661][T14457] RAX: dffffc0000000000 RBX: 1ffff11007a23c4a RCX: 00000000ffffdfcd [ 1736.297680][T14457] RDX: ffffffff8af1d3e0 RSI: ffffffff8af25be0 RDI: ffffffff8edf0500 [ 1736.297699][T14457] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 1736.297718][T14457] R10: ffff88803d11e358 R11: 1ffff11007a23c50 R12: ffff88803d11e250 [ 1736.297737][T14457] R13: 00000000ffffdfcd R14: 1ffff11007a23c49 R15: 00000000ffffdfcc [ 1736.297807][T14457] reg_set_min_max+0x264/0x340 [ 1736.297850][T14457] check_cond_jmp_op+0x19c6/0x2e20 [ 1736.297909][T14457] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1736.297952][T14457] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 1736.297990][T14457] ? incomplete_read_marks+0x143/0x1f0 [ 1736.298027][T14457] do_check+0x58f5/0xeba0 [ 1736.298102][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.298153][T14457] ? __pfx_do_check+0x10/0x10 [ 1736.298183][T14457] ? init_func_state+0x1ab2/0x28d0 [ 1736.298224][T14457] do_check_common+0x19cc/0x25b0 [ 1736.298281][T14457] bpf_check+0x5e87/0x1c300 [ 1736.298315][T14457] ? finish_task_switch+0x162/0x940 [ 1736.298350][T14457] ? lock_acquire+0x107/0x340 [ 1736.298400][T14457] ? lockdep_hardirqs_on+0x7b/0x110 [ 1736.298434][T14457] ? __schedule+0x1475/0x5070 [ 1736.298506][T14457] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1736.298532][T14457] ? lockdep_hardirqs_on+0x7b/0x110 [ 1736.298563][T14457] ? __pfx_bpf_check+0x10/0x10 [ 1736.298584][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.298612][T14457] ? ktime_get_with_offset+0x93/0x2a0 [ 1736.298654][T14457] ? ktime_get_with_offset+0x93/0x2a0 [ 1736.298689][T14457] ? __asan_memset+0x22/0x50 [ 1736.298722][T14457] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1736.298743][T14457] ? security_bpf_prog_load+0x125/0x3f0 [ 1736.298788][T14457] bpf_prog_load+0x13ba/0x1a10 [ 1736.298831][T14457] ? __pfx_bpf_prog_load+0x10/0x10 [ 1736.298864][T14457] ? irqentry_exit+0x5e8/0x670 [ 1736.298908][T14457] ? __sanitizer_cov_trace_pc+0x29/0x80 [ 1736.298936][T14457] ? security_bpf+0x7e/0x300 [ 1736.298976][T14457] __sys_bpf+0x507/0x860 [ 1736.299011][T14457] ? __pfx___sys_bpf+0x10/0x10 [ 1736.299062][T14457] ? rcu_is_watching+0x15/0xb0 [ 1736.299095][T14457] __x64_sys_bpf+0x7c/0x90 [ 1736.299121][T14457] do_syscall_64+0xec/0xf80 [ 1736.299144][T14457] ? rcu_is_watching+0x15/0xb0 [ 1736.299164][T14457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.299189][T14457] ? clear_bhb_loop+0x60/0xb0 [ 1736.299220][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.299245][T14457] RIP: 0033:0x7fe0cf86f749 [ 1736.299270][T14457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.299292][T14457] RSP: 002b:00007fe0cda8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1736.299315][T14457] RAX: ffffffffffffffda RBX: 00007fe0cfac6180 RCX: 00007fe0cf86f749 [ 1736.299334][T14457] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1736.299350][T14457] RBP: 00007fe0cf8f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1736.299365][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.299380][T14457] R13: 00007fe0cfac6218 R14: 00007fe0cfac6180 R15: 00007fff22e087f8 [ 1736.299416][T14457] [ 1736.300019][T14457] Kernel Offset: disabled