last executing test programs: 28m38.292868798s ago: executing program 32 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) keyctl$session_to_parent(0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m58.264131723s ago: executing program 0 (id=138): syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) 27m54.868017127s ago: executing program 0 (id=146): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 27m54.198386285s ago: executing program 0 (id=147): mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000580)) socket$kcm(0x21, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000600)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000a40)}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 27m48.766679131s ago: executing program 0 (id=151): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x2}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000004}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb, 0x0, 0x1}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)="9f6f") io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 27m47.080642476s ago: executing program 0 (id=155): syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) 27m42.281649331s ago: executing program 0 (id=161): mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000580)) socket$kcm(0x21, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000600)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000a40)}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 27m27.127238717s ago: executing program 33 (id=161): mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000580)) socket$kcm(0x21, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000600)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000a40)}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x100, 0x2, 0x0, 0x7}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 23m56.167618044s ago: executing program 3 (id=441): open_tree(0xffffffffffffff9c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x8, &(0x7f0000000040)={0x3, "066822cbe73afaa5e95012b3b05ad00200"}}) 23m54.028072166s ago: executing program 3 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 23m52.4501072s ago: executing program 3 (id=448): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$caif_stream(0x25, 0x1, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x12) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$caif(r3, &(0x7f0000005b00)=@rfm={0x25, 0x1, "045b49844c0f565fc9e51537fe276ead"}, 0x18) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x200000, 0xd8, 0x10}, &(0x7f0000000080)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 23m50.423477631s ago: executing program 3 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 23m49.424027122s ago: executing program 3 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000011c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "8519e7", 0x10, 0x21, 0xff, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x4e20, 0x4e23, 0x4, 0x1, 0x6, 0x0, 0x0, 0xa, 0x1, "7612f3", 0x3, "c5db0d"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="93378e66cf9b48cb24f73793e9594b1061790c6a3302853a9fa89527996042ab", 0x20) 23m47.874371813s ago: executing program 3 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4008050) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x81004, 0x5, 0x94ea, 0xffffffff, 'syz0\x00'}, 0x6, 0x20, 0x5, 0x0, 0x0, 0xfffe, 'syz1\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) fanotify_init(0x23f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x1004, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r4, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) 23m30.547266501s ago: executing program 34 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4008050) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x81004, 0x5, 0x94ea, 0xffffffff, 'syz0\x00'}, 0x6, 0x20, 0x5, 0x0, 0x0, 0xfffe, 'syz1\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) fanotify_init(0x23f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x1004, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r4, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) 15m52.231052315s ago: executing program 7 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x38}}, 0x0) 15m52.048096837s ago: executing program 7 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x10) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m49.065129607s ago: executing program 7 (id=1197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) r1 = timerfd_create(0x0, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x3}) socket$isdn(0x22, 0x3, 0x11) syz_open_dev$vim2m(0x0, 0x8, 0x2) syz_io_uring_setup(0x1bf, &(0x7f00000005c0)={0x0, 0x108c778, 0x800, 0x8000000, 0x1d2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffe, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) 15m45.955002421s ago: executing program 7 (id=1204): syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "fa02c80a3a1e38dd031dd7504fe580963900"}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) munlockall() sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) 15m34.12606892s ago: executing program 7 (id=1226): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='!-\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x4}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd2a, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) r6 = fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x3, 0x1, 0x2, 0x7fffffff, 0x1, "d50704c03af66cd4e67e44f24a2c3223039646"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x1, 0xa, 0x0, {{0x11, 0x4, 0x2, 0x7, 0x44, 0x66, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, {[@lsrr={0x83, 0xf, 0x63, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_addr={0x44, 0x1c, 0x1d, 0x1, 0xf, [{@local, 0x8}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}, @noop, @end]}}}}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r7, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x1e) 15m32.866508834s ago: executing program 7 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) 15m17.269308342s ago: executing program 35 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) 13m35.536933447s ago: executing program 6 (id=1479): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) 13m35.245824779s ago: executing program 6 (id=1482): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x400) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) r8 = dup2(r7, r6) syz_fuse_handle_req(r8, &(0x7f0000001440)="be70bf88b3f1c736f78e8c30d17c394aaf135da8601ae19d5134c916ddc6aca5ff685ec8712af0efd797390259edf880a7d86ed9a57540ef42c934709a12d111a02f299dc8703cf12882bb0b03165e1a5e3ecc62959f22b42c67faa3d9ad49b3ee7015cdb363cffc083d840d2102c930db6d0b8f700bc6ab301bd331bb9f24d5d994e64202a398a821d9326b88270022ae6fefa4c8ee76c3c371a98999e8dd6b1193c1428eba7522f034f9ed929eefd0adea334cd14d3b2ed13553b1a3af696448c1a327ff4d16cf87b0d0468a48dfb62fe7aabe5ff786448f1420e0c701bf6318072ada994ad8602f134c0bfb3dc5b3aa02b1254289c4445d3c20679a3748abc34cececc54e614b0806268d126d603355daefba3eebc7bb143d3e0a5c0740c6fc51455ea909d7650524bcd56bedf98095017eb5a8e41cedaa690418965ece3b1960fbbb87b160fbd69c6eaa38afd95285a9b00df3dc99da5f0a7ecdf863147c2bdea59247b48b7b02e8ff0ab7917c05c72325a75656e7c16110c47359aef71dce733a498b01d0247ef231a6902b817aa4b838726eafa4375ffc60c655533fd8890cc8eac4e465bb78d4bc5f32223f9062c179e7f99219281d28be1b0ef972d012f5df5956c6d0ea01c1edde5104b682b724737bef2a80e08d6e86640ee85b0678910849e687db0aa1e5876fc745171d883dc4766a30e0200d23e8d9a92b1e2897603e0409a9774f29f8445dc7d1e21d16ecaacbfa8f12670e61de9541dd39b4325c03d008ac0e76268cc94a92cbb06349cb9b663ac0275280382935e64e1b4b412a8c10e4ac8e30a4d524db40f5f00a7f2745a8fda96c907b63aeffd2206098c2443164febb139169ec3b504a32adc38f888606ac2852ddb0ccfeddd064367b6e25eb96d14645be589a131d60522e9ef63c4de0beccf013edb363cbb8623c22aace5600e3aba1cdb91b0863ddb36e9d16556e5d8ae79892227277960c7cd62d00788f2c4bc98e2165a135e01ed8294e3e1e8550651d710105d5f3a97d76da90169e67751e88d3a2bac0da0e8c0f0b0a766735d0375d4a9e7c4b6f2157a5b129b04a7f5331e052d05507117b7799fccb12caad105145d849857da9e80d30352bdeb913aa18115f9a18dea769de2093699bdd1b62c78ef09d8b466d904b522fc86a74a635b012215765cd442572ab02c54df350ce9aa8f1ec6dc53cbe1388a1b4576c130af75ff47496a2f1c16c3253b572b1fe6f4fc67727cea8f698588af9aa15d4e6300f848d57026ca16acacae4cc7decda947bed34f0275db3a97c2e8d47fff1f8d5921ec8c7af5c5e9c7b92b4c2cb5bdb49dc7d8600d838e801c6f230997bbce8b61216629b7b227c2f2789829d51251fe583338af03229148f8e15f5f8c2786710513641eff4367b83d4fff17f484e11d624c3c0339f1a862f62cce794163e52fab59d18c27338aaa144973514ea293279e54a086ff913222074ea6a0ec1f22403d6222fda0b735bfbedc3b2ed4f513503d499f2ec089e43b6523a270bfaa42601eaa399928213b634d6626fb7052feb106590332e7b4da6ed5090d499268cf7597812f81ae5b122048ff5a5b7a002370e9a09c602d57538329ea6e785127582071c5d3c9db397f2896308ee4276b13a21f037d60e902ca188b9e51626f709fdbf40091ed8c54c39f39f6c390d6f449af57efeaf432b5e5b30bcdb2a7706fcbfda04ef0eefec1388323374b6bf2202c295de64f3126779ff4d935d04f0c33cbcf02cc9f2e38b454775e1bcb3eb34105926dd424a2fa3570234e611219c4d9e4ef481c590794ea77d64e3d169fde9859cdde24e303b35eaceb71e1ac5358c79567d42746b6d102ff441f89e39a82d46428a20472435affe1cd972c853c88cb7c7538ba83bacace3add0c55d449d7330755e5f354215ddf1340eda888b1f0285821cf1b76089358dc91e864c5ce764d39c499f505c7e988f9a3035c5218471b4ac5020f9a3dfe17ddf1752310f82622dd84a950dfbc8e421283ddb92d158b61ce7eb33128f3bdcd4511434bbab631947d8976731f68b9d020a4c7b4021907a834e9154737345e61d1fc8630f919d29056c0fa07c17dd98e3ace0bd2c1fcb940932d2196cbcf57f09e3c918772a81dc9dd037de60b91a403eefc3a36f04b2dd2de5eb44a50af98b01f37ec69ad3ecf728e82b7207c669b237a94457136ae5bad23baef344e9ab5db219f540a0b8165bac5fd9b0cd649e9725be8257ee96fc21955794c06237186b2b82f0d863479c169d8deb164bdbdac733120f9cacf15bdcc62a2afb78f7b54d889378a50f9c764934ff6766f9275a9c58ae3d09f05b1dda88d6736bce2a67f1f38a88f3e7b371d6a6b781e912e6ac7e253332517a3d0927892ec3ee2e9f7edb9a55ffa04b4ad788a12d4c7b67400b8982c1a2a40955d1f010a150a9604cdb3dc0069a4221f8c192b292e89a1b7649bb1f4fbd6e4a94a312ab0c886ddd19cb748a6c0fe9ab6f957dcf2a230af07b4c2220929dae2e9e218bd95c1141fd387f6679318f30dc7c73f7772264eaf4e83257e731af59f112d9e9b702ed1b80f7b37d3a6adcb90dd38de77d671a13e75651255dffad5345907b52179d8ba2a2b0efe3df9a9f3f0bdaca0c7abb34d70a91da6f6e606802f9ff943b65910eb1a7c52a824598f6e006aadbe178a30c782bb42da01c3fb2936a4428ef9fb142dcd2673889919aa7dc429989641c12f7bb8f03da660eccfc5047b03f289df9432925bf93902bf5f88f9617b13a9ce78ef830447d7010a82f872c6b4c5d0abe1e04dcf0769853a148ef01f0b9a48d5940a105dee46ad7f03b6063a569753f02b2e23efa58c69b36a2ef7ecdf7d0ebf6a19568a5feec9dc848a2ba0426b264ba5e359a2b57217335c6585992b7696371c4423788d68170c6adcf516df7f7450877d85e3acf5376b094bfeb8e3bdf55c7a369325e8f96291a2809d8d967961a4f8187d0ddd65b082618257ec66d19234f7beb5bbdf12dd3a33e0e43bdb7f8f26600d9e2041ddc63ec2703d5e6f7bd23900416771177612b8af00a4beb65ae1d27975162d712dfba1280524b80a0d44f78620f4070ff5d4814f195723eba1fbbb1d359f2a86f06e8ffa56097e4c7dcb589108f04ff87c6a33b91a581f1f37865c7e306f0e6910503894e3f24a2b4815c7225182c368dcf4790aa394a1fca427b00c50fcb6dcfd8f560e42314d47b102cc0ebc5c8eb787df9cd871c2d88f480ffaee4d034e68098429c6893ec918dc8e0b136c576a5b5dae315dacfae2b82c70ab31a248f13c597880b08cec71200a9892ea3934fa7f5eea3341ede548ea1e7ebde348083fed31a023904d4796e5736c03e5a71021dfff6eda6d547c39f52467634907824da236a5f62d31b8bb7b52e1a5751f4c2185b040d13461815afcfafc010ab840e2b8eb2cc0843feddd8d3e215373a7ea8b4fc6fdf6765c5e3c6d3b771da1b05c02f54def8e853fc6f3d4b35daef89deeacd18dd6651019e5f2c1f2c6ec43bb8542e82cc5f991c98505cd26b1c71400eba1d86ae45b51cb8844c9253339f4ef88064c01e69ee6dedd2d483e75573bb5513a6d3dea4f2b02cd353fc190970ea11855b7ba472f25d1d34dfc291688da61514b2569141722494fe39ee9886ffb612b5ec3e087c2b04dbc067cf0f214a552002747e9d87c46b6b73318840ab3c11e28ea76d912445239dab4b5e8ddd8c739d2581eb70e34bdbbed99f21bcf11e74f49d5a3e722bb4fe2fd97a08b5b73a77c801fa5c93310c32258882aefb37922faf2e916bd2b5a1d231a7518e2476637adee39ec1b7cdf4121cd7446eee3297bf0a5b7e0f0595f78ce48c50dff707edc576c2b15c288236f797ba26353d9bdbc96be208a97bc98e55d68557ea42bc72dbb3c9cc90ad564fa36783b60aef92b3c3a2e6ccfc40c0c50867392421e1cc96af8e687fc209325b83df2c8cf33e9828ccaefd82adbcdd495248109b30b2a21affee110c221edf0498de0e285727584b9497fca6b75a1a8fb14837b3bb4b0aab17e24943bb859926644ffa8aaa4b10e75a218dd24c74fe6ce87f3fef41b5009701d9ce0725675eab625025a0cc5e3bc25da883a6192d0d4bdec8506667016d27e3ea9a533421870684ad5a5c421369d25f07dbc791e49f39dafa38892b3729db257f5624800e06d38026bf48387902aae4fdddb6b9c4f1d1c88b8b2f7b2f2c8c08c1285a75fdab6b3e5083de97562c9766e951e51cbc8b5551824e6f555095ecd08b843e0cb78e10a66a865406aa5368f7e9de577e5cb59a4d804057982027cd326b57e23cdba8268aeb2e0ddb93bbe79b70bebd5ebaf18657f31d78c1ce2e2206b77c1560140ddee8b27430c79e76ddd2531d93d881b8fb9ce83ae193749998594eb48255fc1036483595c907eeeb59a397470a612574061436237d72ffbecb3c6dc761b0f166ae98bcd33c084b25eaa8863449ab975abbc9972fe73134ebe2d8725ada375ba032e0dd013ffeed00243999d7d95bb04d8ce14515296c645ebef2627c5a6519a90ba44e2cc0c9d7733abeb426c4b6a4542a712c721ed5160676470a7ec8269c0fcc8fa12aadeb6c4da181a61c66cca1b2aa9a17ca8c934e90a46068e4ad794dc8bd7bda05fd6a8de3c49cff1def11c15961414dbb14797c0ecd47da889f0f4b51c7b625c5af45cab7e6d88dea66e7d2d2350a173b0e05e381805e5e211be6e0f0e81d121a53b55daaf78de9bf25912aa262b56d095e73841151919c20ae412fd15b63209e45d026285c3b401bb0c315c2199e8259b7aad3849be80c1709139480f8e640c317bc0b278b7a3af0751d8d3bb9f6a95703eeab6624d9ba9257688b9cf299d8bf870e897f7f7ad419123552eb517a1791bc8b0999180683dc935ff5d7b1dbdbd0bf757c4bb8df8035c9ce6386918be43d6d75c96e75148cbb4c2b1450b77b96cd3e7c11d9641fcbb198f534e7ee94df0891ae5893318b1cf9518854a73657f4740ca0fd21f0ab3c2f75921986a3b8b363313594680844f2249efe1895d9870196f48e7c26f3ca24904164001c1953425441de7257c0a800e75f64923d11858ef5d264317ae76aaf443dd77136426b6c816fa34b4a7a831127ccdc203a48cd3bc20f09c6ed093b6ff49e0bf7c91fdca4783766f8f35ac89222578c6c3c4d04cc8f354a65bb200ba6ca76c3041bd8eb04b984e6eb2d2e42f65051892b6c246b6bd91ea265893978f74d6bd9208739dbd4b953fca722d9ce2e576e0e4688338710e198ab76623db04d8d3eb9d3fcebe8ff5942be33488826a7e1e6ba35111e4d5e2146b99bb417fc49d666e385d01a4eab7dfe7268f4b2d679a6e8f39566c8cc961e067faf7ccdcb63f55501d5e1887b6c1ee071febb14522796948f3b242bf1e4742c08a9cf27bd6bb7da4353420706f91f6c0a94f26efd49ecb7dd74cdacbb7def40ad2c13d966c466b400163dd7294f1b8921f5d5da4f4e5dbd8aa02eb11c706aecfd860fe679a101388e36817b96894f3b8c189434e3c30f03ea5cbf8044a253be021edecce7b2f90a295fa1466440db9518cbe61a7e2cc2b057b4ed38ea05576ee190e3ba17021ce17b2b8e219275ca4da3b4b71ad599a58e9aaa7cea5a7a1a8a7924045d19eadf1b83d15f27b6e1c78b6c2f114b49c857a0d339cbe32cab17154de5bec2c2171cff74f6ee08c8a46210f21fc08ed18ea03ff280786af20d338c88f2e86e87ef8cdb3adee7e1e05d53a90f19c88350a8f7544ad986bd644b2b935cbcb79b9488f065f715cdaf0f2f52eaf6771ee3b378b7e2ee930abe9dd3389c7ee4f81139aee1e2ecc563628cc30f9e99405e9ff56015ef09a84c94cc9d5cbb8643e581167fc4f0d71143e6657fa19f80668f54d99d3fff50240f097c2d7eddb7b20b5e5974047304077612c299e3323059de86cccf115d9d667026d559133fc693b350c9c26a99218df758a56c75fab92b0a66cc3fcef801b6745b5c5484d41390bdf289c937b08563ca598ed2b180826d7fccf03c426b87bf1e64f4451712f128501df2133e1aa5ee12b7e7e52ffd007a1401b91268a62ae01b5a74a2c305757b5839851ffa796079b9533fab612f33abcbb79ddf5d9b22c3126ff1c1f6fe20725679d1dde6b02847c56ebcbd8de9c7a545de42766eab9a09341a0e30760b85ab8f1a2c89df9b68bfae59691ad2aa047396ce8bdf97d578528d2ff9abca8f4e150d2903eab517c4ea30c800ea7dcdba425738a9ad13532cfb3c35cbd9aca948508d4cbf90778253932b16039c998872aa2108a8462ce1e8d2b3328fb2da905e4433454b33841273da3e9a76f0e235349c6e039f2780f53a503f13c80f587381c9128308cd785d2f83320be5ac8f11eca7c5a1b598cd220d45e40ffbe290b39f6039677ee9466bcb290682a5cfdb30ddd842ce49b4c495cf9326fdbc3e54118de3352c03d5f4e4d1b801adcf3fef67ba2c952ed22bae9423dc6413cd5a35da543708e4a17cfae16c82ebc850b94d622e32bd9f41287eb9eaf32af21ad3d3dbcf866807f55f75e2a28912fdbf7140682a453961a9cdc9d11be029a0679ca65b9cede11dbe17bbd2b460346e8d4c55daa817995ed2fa3ffff14ba795142c7eda8a72ddebc09a120b69f9ab4b651dc3a321673440c5767366165d51c8ea3c39186d6bbb5bb78a2918a74b3540f69f5173d1bce428a561228dbac06e0a37d2ac69781a1d8583631757067e37a4936aaed9d9101deb2148cdc9813e8daf38638a47c4f7061e15ba0cd2298357a6a8df14c10d7de706369047e3d23c4fdbdbb80ea1c391290c91b44ee523c6ebcc6932380e3d974a026bd2cdf69b46145e01541303f7771f1ff709dc34f8ee36f2e67fdab748d303f920e3e882a18ae6df0e67cb3f8b7e4fb0b3804323a8fcaa11d849d1d456e487211a5e059fc2bde4869f8376b6e3837fbf80a446294bd534694bc8ccda0668a47efc1cb2de96c7cf2630834b754cfe906a3bb8aa6747b6ba6452a216457fcf5020612e45ad159e14b97cdb28494eb08260caa411dc26c4b7bbe3bce63e8b033a473a4e60a26b347a2eebc02e9f89dfe6e8135a78e778eb896ff5b5a067abcf52c63396b7445343b4027d4014f72a665ddc7c99cb215cad55914cd2ecfcf1e500af65419cf4a4ddb6e6598370730540c33239bba2bbbe11d6c5ccbeed433d3295c83312a9883562dab4dbc2a5bad84f1b53d0e32ffc79cd52f90a9165ffaabd19d5b8c52ce979dcfd32d576337918813a82e2674fb3aba70c8caee997a917cd4d9964771612b7cff967502d5a5eb88c108af60e43d757c46bb3c58fea31e379b151ea2e386a05afe901c381a320120f4d46fbf7fd1e60818f20df7de67aa70a9ed293b972945b71a9d438267de6cbe7d74580d611e837279bd42bbd44538f88112c2e93762cbc50651e578a18832b6c21f85ff62114029fa3077b409ad6b6223db8e2535a693220809d9c738f2ad989bb136045a2213dfe8f191f41e3355f5ea72253ef00e17eae763fcd85ea5967ad40b7398e5a433fd91dac85aaf6412fea6969945b495d7c2c1c0e987827655d5ab7182c4b6ab0076c066e1e8a9c7ecaf63b3d9b9eadb03b077c8b5d94d929f6b1db2e90c597556dd083a611e93741f7008771122a4a22f0fa83e844bd8b5b3a40d9df4db35d39d9a29b6399893c98f6038e7b5cc404de1e6c226d08d992e1a80299a95bc76331583ca2cf819e39ebf315086e2ae4799ea947609e87aabc71f9f7ba5252d6dd1b910683811e09fad4ca5308f2a48676d4a51bae3b57a17328d60e4792d074bdc101f1b9b0e723651eebcfeb1d1411d5b7dbd2c5d38bc6b5e7d5478d79718dbba120ed84d33fb2b90efa29aa1c42a6f3b7bf52b80bf5488a32e6e1bf72c764cb26a6366959fcb4c3765da1f47b069930c578ba07086cb44a7f2116d27dc30c42c148059c11c338dfd335b021eaafe38fbdf3bb6f84ae3282c6e527d3b7d666bf0a5e9198c85d4a91ca0ff66041702cba3b3323b7dd29815c3d81bb33c12cb5e50834c6c04fa73200c88ed0090df2f73c929bb45677253f4314e811565f5f8cc17eab70652dfe6dd83d9fc1d8526e87b0dc0e556e7745b418516c2e98ebd579972446b5d30f871f53d43f47911fca68e894ea8a6dd3ae7967b360daddfe00e75dcd9811ce74cb41d256a2875f32c109dec271eaf37d328a44772e3916e714123035386bf2a45072415df273192033e4221613c9c1bcf9bd9885f6d26e2af3538e2bdf5b26e3c83a9b1abaf70eed063e9088760b55c1e41437eee27e9a537227ae33641bc28349078a01a15fcfb5d01e7675e1c9a339855263b85df0c381305105cdbc83d58ec69268e1248c4a26a7d6483eb8d4d0664e48a4f9774fad9acfcb6ff91550cf3d871fc38c27eb24c71c7512613550d458c7ce985d2345e835585da843ffa2227501c2be0d0b234ef1fd0d3cfd8628fbc3c1d797cfee7bf0681705dc1ead91fb80617df50f52f49faa15209c881fc99e18cc127b8e141826dfd327a2c23785ed075cea115db6ef563ac305c57c39bb7ed74d5d237b593b30baf9243b37ff13b9741b6b75378d37a740cb8eb0d97c99097a4e0de43a55adc56bf611ffb31c964be0c6f49163d8ffc413b1692734468d967e853c6272280289df61c300927930bc3ce5493323bece9bae6547de8a052aee4e4affef5f482fd941428bc09762659ce3ec3f615ee1070c06282409c420748fcad751c44ec3e4ff118b72fcee74222dcd1a11be019b6ccbb4330090e8b41d593cf1d29ee5a3fa68e8d45f375a67d2629791a7a2cd0d44309719e81a9cfe6e27d1a88388a335dfdb2558bc179a8e1ef1590e53a2a6c54fbc6194d1411042646e2402beba77ca85b6cc5ffb29d04ee018454acddb095e1e2619d60fba3e768efd13469ffff96f0c4eb6c6848471ec9fe87c45259bc23d328e9f41aa01498c6d8bff2933bde26625237cb963b3f78f50a8919aa2e12381e6cd8fd4dfa6ea3d8a6af9592ea7f23db6fec5fa0e37c045150161c0589304fa87344ae84086717d6dadeec629c0625dd4b6b0c1967c17f5f8ce3fc08b5ce1d3614f0c2664a1d360242296a084c4573050320059b64fe82046575704736b7f46d1d105501cfb73fac9e312e15200a18035bf3ddbe233f50376a0a2447bd3404472af39064ad518230a0ce8eaf560ffbdd1c561e91eb6d71fd3fdee641065ad30800582fca0fad06f5f853fa2b24c1af673e98b2c04cb576012a2f643c54be162ef4cd342715c5f212338e014e32afe4f46537f767f52b9e19903fed505ad0b1dbefe4cc303810a9ae863aa54dcf48a3d2e9aa6a41ec9aeda88eeec7c1e430fd705cf389d56ebd2c02e6975a41630f63ca8c5a0b776a1dd702b91c6e46a8b5de294f0c1cabf8a717bc3ec4ebfe3d3ed402b422e6f2477858537e1c8593b604d990415813e716ff9b1ff721d4da4c5b28f98cd451d2517be6aab04e98a32e89d57f564e36a81eb9575b7c5dd9467e59381cfb033c850ae75a3b705c85b1576bf701ce42584ba6c391ff2c5eaa133db1c6f1db4f1c4c7e1387ec0edf8274b534207cad7ee86f2e3d64bae9ed43f295f28912f9291f5f88f6ff29c2c9f5161b3e786c1271d8bbdec7f74b94f93c8e2abeedbcbd7203279ccc33283bbca87b6b0384280de6d67911b5128086bac825ea8e3eaf8e35609da9e0f298c4271fdf783bad9f9902f77e62e0c1349acf0ab36960e958dd22f33c6273ab2d973b3427f1f8e1462c19caf71b5186b6d3fd866e464fb6a314ab7454f317711634031745aa6111fceca83d8706d04f310370afb171ec772bc81cfe5f169ff4a59900dc02ec846995c28a225c3105548d4a55d173225255355ba5ef2a14131ab77198535276be01bb51a99734ec12ce250a5ccf21c77d39326cca5bb01d16131ee328575fe15ae7dbe2ada55669a425ca1568d7deca3849239cb31a4d5db041da306a348aaa8a5f96335e2adf16c8a38d6af0ef15103341d46ff03ffbfb2f0f6155c930f9c22f0618b04de6b0892f0cd3e6ba5bfe7b66e0a08e2c78c1e683b2525f6d0bde70cd963f07bdff604aa0d6eaecce5234a117a2ec285bd33433d8f1eb540f0b5f618f9fde16014a19025485eebb988976d7d6fd568e2381c022b96b26f6b14dd14ef81b9687d0dbac659cb60740d950e69e4e440b9746fa2a11e488ce1fcb3293f27f5cc42f51e25d0c4292eb3cf3423f02404ef5ffce019c7a18081da9a8ac8a39007b94416851e7d13bdf497c6d8680914ac0b5de389bdebd44663c319ff08536911d7a9a80b172bfb8260a40c7f2a3bb0a4474b0448006d2505ee618ae1c06589fa79f71d35b2906b50bbe2809b0a2e3e2975aa96fd325b6610413e9f0a2368107350016b84bd6bf8d2e2bb00fdc6ebb8910d157cc9a54d4010b1ba3693f11229bd39e1f668ba6ff4b4e9c4fa36f91c109e09f58170d885739daa9a4e1d46d731973c55e0117a20c3b1496d4808d260e4f4c4d502938d6d5357cb19b6413e47a6c0efb3d549c93854539f1e1bee7386f7da799dbe86e758d68357a3e60b8c9223beded0e9ec55d1ad329239d1a7eabf4dbc829e7129e44c0b7703a16712b3437f3967b1fcac51cee00dedc0b3016f2c9efa3803fb5bd44ff5242035c93a330f1a347bd6e1bcfa2befc7579ace1516261adccd58788dfd802b45dcf1b1ccadf2824a0170ed2a0b10c36dd994bfa114e58add4f33550fd7f4c117c8d467b6c2750e59de8f44094cf4884960e60a91269a3ba49a1ca726858ecd2ac1144176fbdb99365038efd22f408f9db20848b3809496bcf704139b3e95731158f06742e0a1c20a013ed82e614510ac7359a83f6f490b4fdd3b59dfd12d10b9c7a50158a5f551467fc9b36d9b205e219637bf7529f5b6b0c9d27b616732737a7896eed9d6805f5bcaf47db58a9266443123880a559d0c5281638d1c2f9260cce7d229879e03b84a9ee3b312b90a946963bc2afe7f31b254a149e918af7c64927c59d591155fad5763b611b5222e1b55992ecad7a418f35bedf045845e19737ca8534ef7543d1ce61ec3769d5ec2aa59f9ac25d5bdd2f771a9fe5006f1ad904548741f8744a4ed442165b9738ceab2b6ae8eadcfbfd7221ab7c21902f5203bec0c7ae612e490ab134d4328be5181112ecece946bb1ac80e1815580ef4054467efe3ce909180a8f10b31439c62baae62ff3d98b71711fca37b4983b0a8ac85551ea1364cca87fbc5b5048bf164aca00f375c7a3c8435d875e5cfc9259bbdc300fdccccbb18853b2ef92bf3a35d15ce75d3e73cce8f6e61e69514c65553bfe2f10df7f41cee1873448a76175083df344a93a30dbfce883f87d20a07641800d62608319fe694626f2a2077693b25003cf03b1984749170d3927f5223df90ef8b172f97f395669c8d7d12bd6dc9b550b4b06b579fb38b7a1fa9f8590ec5bea6939adfb60bed9183c0b5f22a5aaa2d5d1ba7e05fb758eb4e39f25481cc18ec2820fd2eb78c9e1dfda0b9df0997e132de4e79287db8ffd39fe6c796b", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x3554000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 13m31.684152226s ago: executing program 6 (id=1488): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf04c}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0), 0x7ffffffffffffcb, 0x405d4d0) 13m31.365245157s ago: executing program 6 (id=1490): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @pic={0x0, 0x2, 0x0, 0x7f, 0x0, 0xe8, 0x9, 0xe, 0x80, 0x10, 0x2, 0x61, 0x2, 0x40, 0x4, 0xb5}}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m31.127739444s ago: executing program 6 (id=1492): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0xffff, 0xb, @mcast2, 0x9}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendto$inet6(r1, &(0x7f0000000080)="eb0000000000ff47", 0x8, 0x20044c54, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{0x7, 0x6, 0xb, 0x7}, {0xd, 0x9, 0x3, 0x1ff}]}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000000)={0x9, 0x9}) 13m30.631574286s ago: executing program 6 (id=1493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 13m17.062344396s ago: executing program 1 (id=1515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x403, 0x0, 0x35dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40881}, 0x10) 13m15.86810237s ago: executing program 1 (id=1519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 13m15.357340301s ago: executing program 36 (id=1493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 13m15.329587465s ago: executing program 1 (id=1522): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000240), 0xffffffffffffffff, 0x0) 13m13.711873654s ago: executing program 1 (id=1524): syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) munlockall() sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) 13m13.515406845s ago: executing program 1 (id=1526): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='!-\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 13m12.314769452s ago: executing program 1 (id=1530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f00000000c0)={&(0x7f0000001740)=""/4118, 0x0, 0xfffffffffffffe7e}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) wait4(r3, 0x0, 0x40000000, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) socket$netlink(0x10, 0x3, 0x0) gettid() 12m54.68381257s ago: executing program 37 (id=1530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f00000000c0)={&(0x7f0000001740)=""/4118, 0x0, 0xfffffffffffffe7e}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) wait4(r3, 0x0, 0x40000000, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) socket$netlink(0x10, 0x3, 0x0) gettid() 1m36.282406301s ago: executing program 5 (id=2507): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x23, 0x2, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1) socket$kcm(0x2d, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 1m35.162191708s ago: executing program 5 (id=2510): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)=0x1) 1m34.148784873s ago: executing program 5 (id=2514): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m33.179967227s ago: executing program 5 (id=2517): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x2, "fa02c80a3a1e38dd031dd7504fe580963900"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, &(0x7f0000000240)) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_emit_ethernet(0xa2, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb86dd607f00ef006c3c00fe8000000000000000000000000000bb0000000000000000000000000000000100000400000000000000000000649078020000000000000000000000f279da0a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa086420815f3fd27b60b8c69746126e0d966f0c3e56fc14dae18465161ec18b9e3b9589a839e395132418126d939bc090001004a40d488fa56645904447ffa429c4baf01b3cd5401b69ba7ac54f731a28f183454a6abdf"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$security_evm(r2, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000400)={0x2, "5660359c3245d1c42b17afad7d48ed5100000000000000010000000000000008"}) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1m31.996899398s ago: executing program 5 (id=2519): r0 = syz_usb_connect$hid(0x4, 0x4a, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESDEC], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x804) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x625, 0x4c1, 0xc1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80201) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733", 0x5}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x203905) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065cc}, 0xc) 1m30.300706526s ago: executing program 5 (id=2521): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg0\x00'}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000005640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10044040}, 0x20004881) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) unshare(0x42000000) 1m15.217609821s ago: executing program 38 (id=2521): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg0\x00'}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000005640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10044040}, 0x20004881) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) unshare(0x42000000) 15.007814893s ago: executing program 4 (id=2656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @sliced={0xf, [0x1, 0x800, 0x3c, 0x1, 0x6, 0x6, 0x1, 0x2, 0x9, 0xf8ae, 0x40, 0x3ff, 0x1, 0x9, 0x3, 0x3, 0x6b99, 0x8, 0x200, 0xf, 0x4, 0x9, 0xff, 0x9, 0x7, 0x7, 0x2, 0x9, 0x0, 0xb3, 0x3, 0x88, 0x3ff, 0x7, 0x4, 0x4, 0x200, 0x7, 0x4, 0x0, 0xfffb, 0x9000, 0xa, 0x0, 0xe, 0x9, 0x6ad2, 0x3], 0x800}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x4, 0x5, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x80, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 13.219959733s ago: executing program 4 (id=2657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/172) syz_usb_connect(0x5, 0x24, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000180)=""/135) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) 10.343941854s ago: executing program 2 (id=2659): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@local, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x2, 0x2, 0x4, 0x0, 0xc0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet6(0xa, 0x5, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r6 = getpgrp(0xffffffffffffffff) sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x1f) 9.689433821s ago: executing program 4 (id=2660): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x48840, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1001, 0x10, 0xf, "24669c7026b3551c6a8882e0c0020035265a02"}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010200000000000000000100000440000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b00000073797a30000000000900010073797a300000000004000380140000001000010000000000000000000000000a"], 0xac}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) write$sndseq(r2, &(0x7f0000000040)=[{0x6, 0x1, 0x9, 0x4, @time={0xa, 0xffff}, {0x0, 0xfc}, {0x81, 0xa0}, @time=@tick=0x7}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) 9.289485665s ago: executing program 4 (id=2661): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x400) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) r8 = dup2(r7, r6) syz_fuse_handle_req(r8, &(0x7f0000001440)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x3554000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 6.166275712s ago: executing program 4 (id=2662): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x41, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) linkat(r3, &(0x7f00000003c0)='./bus\x00', r3, &(0x7f0000000400)='./bus\x00', 0x1400) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffa6, 0x0, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180)) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r11, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) 5.382773653s ago: executing program 2 (id=2663): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x741}}, 0x30) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000009c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006}) close_range(r0, 0xffffffffffffffff, 0x0) 4.180118471s ago: executing program 2 (id=2664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @sliced={0xf, [0x1, 0x800, 0x3c, 0x1, 0x6, 0x6, 0x1, 0x2, 0x9, 0xf8ae, 0x40, 0x3ff, 0x1, 0x9, 0x3, 0x3, 0x6b99, 0x8, 0x200, 0xf, 0x4, 0x9, 0xff, 0x9, 0x7, 0x7, 0x2, 0x9, 0x0, 0xb3, 0x3, 0x88, 0x3ff, 0x7, 0x4, 0x4, 0x200, 0x7, 0x4, 0x0, 0xfffb, 0x9000, 0xa, 0x0, 0xe, 0x9, 0x6ad2, 0x3], 0x800}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x4, 0x5, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x80, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 2.867195251s ago: executing program 2 (id=2665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)='+', 0x1}], 0x1) 2.705426996s ago: executing program 4 (id=2666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, 0x0, 0x0) exit(0xfe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000140)) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='decod'], 0xd) ptrace(0x10, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) keyctl$setperm(0x5, r5, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) 2.632339902s ago: executing program 2 (id=2667): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d80"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) shutdown(r4, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x220700) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000240)={0x1, 0xd, 0x6, &(0x7f0000000200)={0x1a, "6c8b205d3c4511aa9917ea9457a123e7ab5997c39c6642c015de144034ea6ac5f3"}}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="a924a06cc5b0200d349d5f22205d4061d2ec0c360000000000b35de8d910e0287a7fb2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000faff66000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=2668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): 500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.710191][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.882448][T13359] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1326.014932][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.016040][T13359] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1326.078438][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.078626][T13359] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1326.288790][T13359] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1326.560542][T13456] hsr_slave_0: entered promiscuous mode [ 1326.561982][T13456] hsr_slave_1: entered promiscuous mode [ 1326.583584][T13537] team0: Port device team_slave_0 added [ 1326.599233][T13537] team0: Port device team_slave_1 added [ 1327.761873][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.761921][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.761980][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.540455][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.540474][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.540503][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.543146][T13362] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1328.662879][T13627] overlayfs: failed to clone upperpath [ 1328.734488][T13362] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1328.853357][T13362] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1328.903282][T13362] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1330.505216][T13537] hsr_slave_0: entered promiscuous mode [ 1330.506226][T13537] hsr_slave_1: entered promiscuous mode [ 1330.506897][T13537] debugfs: 'hsr0' already exists in 'hsr' [ 1330.506916][T13537] Cannot create hsr debugfs directory [ 1330.508965][T13362] kthread_run failed with err -4 [ 1331.105536][ T9754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1331.120169][ T9754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1331.136637][ T9754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1331.151540][ T9754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1331.152354][ T9754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1332.275545][ T9754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1332.280612][ T9754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1332.288643][ T9754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1332.289926][ T9754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1332.290764][ T9754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1333.197688][ T5115] Bluetooth: hci0: command tx timeout [ 1334.317890][ T5115] Bluetooth: hci3: command tx timeout [ 1335.277869][ T5115] Bluetooth: hci0: command tx timeout [ 1335.362134][ T3901] bridge_slave_1: left allmulticast mode [ 1335.362165][ T3901] bridge_slave_1: left promiscuous mode [ 1335.365204][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.419582][ T3901] bridge_slave_0: left allmulticast mode [ 1335.419607][ T3901] bridge_slave_0: left promiscuous mode [ 1335.419803][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.511784][ T3901] bridge_slave_1: left allmulticast mode [ 1335.511809][ T3901] bridge_slave_1: left promiscuous mode [ 1335.511981][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.578552][ T3901] bridge_slave_0: left allmulticast mode [ 1335.578576][ T3901] bridge_slave_0: left promiscuous mode [ 1335.578758][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.397570][ T5115] Bluetooth: hci3: command tx timeout [ 1337.357552][ T5115] Bluetooth: hci0: command tx timeout [ 1337.658194][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.504651][ T5115] Bluetooth: hci3: command tx timeout [ 1338.628365][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.690113][ T3901] bond0 (unregistering): Released all slaves [ 1339.437759][ T5115] Bluetooth: hci0: command tx timeout [ 1340.557715][ T5115] Bluetooth: hci3: command tx timeout [ 1341.048141][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.108480][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.133437][ T3901] bond0 (unregistering): Released all slaves [ 1341.510957][T13638] chnl_net:caif_netlink_parms(): no params data found [ 1341.822485][T13645] chnl_net:caif_netlink_parms(): no params data found [ 1342.167804][ T3901] hsr_slave_0: left promiscuous mode [ 1342.985892][ T3901] hsr_slave_1: left promiscuous mode [ 1342.988967][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.053226][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.227690][ T3901] hsr_slave_0: left promiscuous mode [ 1343.457888][ T3901] hsr_slave_1: left promiscuous mode [ 1343.458711][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.958132][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.138209][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1345.278373][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1346.993892][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1349.069225][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1351.675227][ T9754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1351.680079][ T9754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1351.736821][ T9754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1351.746824][ T9754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1351.775465][ T9754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1354.077496][ T9754] Bluetooth: hci2: command tx timeout [ 1355.026150][T13765] netlink: 'syz.4.1862': attribute type 3 has an invalid length. [ 1356.290057][ T9754] Bluetooth: hci2: command tx timeout [ 1357.663199][T13638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.663411][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.663610][T13638] bridge_slave_0: entered allmulticast mode [ 1357.666424][T13638] bridge_slave_0: entered promiscuous mode [ 1357.759450][T13638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.759554][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.759764][T13638] bridge_slave_1: entered allmulticast mode [ 1357.765990][T13638] bridge_slave_1: entered promiscuous mode [ 1358.317519][ T9754] Bluetooth: hci2: command tx timeout [ 1359.556495][T13638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.566217][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.566342][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.566525][T13645] bridge_slave_0: entered allmulticast mode [ 1359.570356][T13645] bridge_slave_0: entered promiscuous mode [ 1359.598169][T13638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.638588][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.638816][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.639047][T13645] bridge_slave_1: entered allmulticast mode [ 1359.642058][T13645] bridge_slave_1: entered promiscuous mode [ 1360.171756][T13638] team0: Port device team_slave_0 added [ 1360.243949][T13645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.337769][T13638] team0: Port device team_slave_1 added [ 1360.355161][T13645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.399022][ T9754] Bluetooth: hci2: command tx timeout [ 1361.372029][T13825] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 1362.466097][T13638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.466116][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.466145][T13638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.825078][T13645] team0: Port device team_slave_0 added [ 1362.842833][T13638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.842851][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.842881][T13638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.845705][T13645] team0: Port device team_slave_1 added [ 1363.173655][T13645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.173669][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.173689][T13645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.270498][T13645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.270516][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.270545][T13645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.812827][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 1364.062128][T13638] hsr_slave_0: entered promiscuous mode [ 1364.067064][T13638] hsr_slave_1: entered promiscuous mode [ 1364.070657][T13638] debugfs: 'hsr0' already exists in 'hsr' [ 1364.070687][T13638] Cannot create hsr debugfs directory [ 1364.329926][T13537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1364.713195][T13537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1364.813515][T13645] hsr_slave_0: entered promiscuous mode [ 1364.815013][T13645] hsr_slave_1: entered promiscuous mode [ 1364.816051][T13645] debugfs: 'hsr0' already exists in 'hsr' [ 1364.816076][T13645] Cannot create hsr debugfs directory [ 1364.868511][T13537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1365.101132][T13537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1367.085478][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.085988][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.466264][T13742] chnl_net:caif_netlink_parms(): no params data found [ 1367.556998][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1875'. [ 1368.875310][T13742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.875586][T13742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.882838][T13742] bridge_slave_0: entered allmulticast mode [ 1368.892218][T13742] bridge_slave_0: entered promiscuous mode [ 1368.953645][T13742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.953753][T13742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.953916][T13742] bridge_slave_1: entered allmulticast mode [ 1368.960893][T13742] bridge_slave_1: entered promiscuous mode [ 1369.783787][T13742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.209259][T13742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.265663][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1373.278174][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1373.286416][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1373.301457][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1373.302701][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1374.238559][T13742] team0: Port device team_slave_0 added [ 1374.717811][T14042] netlink: 'syz.4.1882': attribute type 3 has an invalid length. [ 1375.369195][ T5115] Bluetooth: hci4: command tx timeout [ 1376.200712][T13742] team0: Port device team_slave_1 added [ 1376.836330][T13742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.836349][T13742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.836379][T13742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.869885][T13742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.869906][T13742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.869940][T13742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.437445][ T5115] Bluetooth: hci4: command tx timeout [ 1377.723106][ T37] audit: type=1326 audit(1761594220.843:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14075 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1377.723161][ T37] audit: type=1326 audit(1761594220.843:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14075 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1377.913109][T13742] hsr_slave_0: entered promiscuous mode [ 1377.914601][T13742] hsr_slave_1: entered promiscuous mode [ 1377.915601][T13742] debugfs: 'hsr0' already exists in 'hsr' [ 1377.915626][T13742] Cannot create hsr debugfs directory [ 1379.517533][ T5115] Bluetooth: hci4: command tx timeout [ 1381.328244][ T3901] bridge_slave_1: left allmulticast mode [ 1381.328273][ T3901] bridge_slave_1: left promiscuous mode [ 1381.328513][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.418983][ T3901] bridge_slave_0: left allmulticast mode [ 1381.419014][ T3901] bridge_slave_0: left promiscuous mode [ 1381.419282][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.481296][ T3901] bridge_slave_1: left allmulticast mode [ 1381.481328][ T3901] bridge_slave_1: left promiscuous mode [ 1381.500447][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.790055][ T5115] Bluetooth: hci4: command tx timeout [ 1381.796875][ T3901] bridge_slave_0: left allmulticast mode [ 1381.796900][ T3901] bridge_slave_0: left promiscuous mode [ 1381.797083][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.939506][T14141] netlink: 'syz.4.1890': attribute type 3 has an invalid length. [ 1382.912914][ T3901] bridge_slave_1: left allmulticast mode [ 1382.912945][ T3901] bridge_slave_1: left promiscuous mode [ 1382.913187][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.507405][ T3901] bridge_slave_0: left allmulticast mode [ 1383.507437][ T3901] bridge_slave_0: left promiscuous mode [ 1383.507694][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.858514][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.938161][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.999787][ T3901] bond0 (unregistering): Released all slaves [ 1384.318214][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.413278][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.472748][ T3901] bond0 (unregistering): Released all slaves [ 1384.708230][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.768182][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.840424][ T3901] bond0 (unregistering): Released all slaves [ 1385.163236][T14015] chnl_net:caif_netlink_parms(): no params data found [ 1385.246963][T13638] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1385.467024][T14150] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1893'. [ 1385.467125][T14150] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1893'. [ 1385.711976][T13638] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1385.796981][T13638] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1385.922340][T13638] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1386.332118][T14015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.332335][T14015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.332565][T14015] bridge_slave_0: entered allmulticast mode [ 1386.344160][T14015] bridge_slave_0: entered promiscuous mode [ 1386.477834][ T3901] hsr_slave_0: left promiscuous mode [ 1386.517717][ T3901] hsr_slave_1: left promiscuous mode [ 1386.524315][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.550249][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.733875][ T3901] hsr_slave_0: left promiscuous mode [ 1386.773860][ T3901] hsr_slave_1: left promiscuous mode [ 1386.774643][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.798201][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.137452][ T3901] hsr_slave_0: left promiscuous mode [ 1387.227654][ T3901] hsr_slave_1: left promiscuous mode [ 1387.230704][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.278316][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.358342][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1389.498149][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1390.898062][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1391.069058][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1391.812868][ T9754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1391.832727][ T9754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1391.837171][ T9754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1391.839295][ T9754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1391.840303][ T9754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1392.514040][ T9754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1392.526380][ T9754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1392.530787][ T9754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1392.536600][ T9754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1392.539467][ T9754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1392.562344][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1392.728045][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1393.917666][ T5115] Bluetooth: hci5: command tx timeout [ 1394.340505][T14015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.340668][T14015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.340857][T14015] bridge_slave_1: entered allmulticast mode [ 1394.344034][T14015] bridge_slave_1: entered promiscuous mode [ 1394.557571][ T5115] Bluetooth: hci6: command tx timeout [ 1394.683698][T14015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.695401][T14015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.940838][T14015] team0: Port device team_slave_0 added [ 1395.997476][ T5115] Bluetooth: hci5: command tx timeout [ 1396.036306][T14015] team0: Port device team_slave_1 added [ 1396.449235][T14015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.449255][T14015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.449285][T14015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.537172][T14015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.537189][T14015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.537218][T14015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.637721][ T5115] Bluetooth: hci6: command tx timeout [ 1397.360151][T14015] hsr_slave_0: entered promiscuous mode [ 1397.361625][T14015] hsr_slave_1: entered promiscuous mode [ 1398.077508][ T5115] Bluetooth: hci5: command tx timeout [ 1398.717822][ T5115] Bluetooth: hci6: command tx timeout [ 1398.724605][T13742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1398.766917][T14203] chnl_net:caif_netlink_parms(): no params data found [ 1398.783349][T13742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1398.816704][T14198] chnl_net:caif_netlink_parms(): no params data found [ 1398.877792][T13742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1398.997822][T13742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1399.950599][T14203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.950755][T14203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.950983][T14203] bridge_slave_0: entered allmulticast mode [ 1399.953317][T14203] bridge_slave_0: entered promiscuous mode [ 1399.956616][T14198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.956771][T14198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.956943][T14198] bridge_slave_0: entered allmulticast mode [ 1399.962622][T14198] bridge_slave_0: entered promiscuous mode [ 1399.969687][T14203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.969835][T14203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.970068][T14203] bridge_slave_1: entered allmulticast mode [ 1399.973766][T14203] bridge_slave_1: entered promiscuous mode [ 1400.167579][ T9754] Bluetooth: hci5: command tx timeout [ 1400.170479][T14198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.170617][T14198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.170879][T14198] bridge_slave_1: entered allmulticast mode [ 1400.174250][T14198] bridge_slave_1: entered promiscuous mode [ 1400.792055][T14203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.797639][ T9754] Bluetooth: hci6: command tx timeout [ 1400.862613][T14198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.872912][T14203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.992246][T14198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.574918][T14203] team0: Port device team_slave_0 added [ 1401.695524][T14198] team0: Port device team_slave_0 added [ 1401.708651][T14203] team0: Port device team_slave_1 added [ 1401.735858][T14198] team0: Port device team_slave_1 added [ 1402.411787][T14203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.411801][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.411821][T14203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.542282][T14198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.542301][T14198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.542329][T14198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.543550][T14203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.543563][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.543590][T14203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.633272][T14198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.633292][T14198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.633327][T14198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.982645][T14015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1403.159488][T14015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1403.213100][T14203] hsr_slave_0: entered promiscuous mode [ 1403.214260][T14203] hsr_slave_1: entered promiscuous mode [ 1403.214941][T14203] debugfs: 'hsr0' already exists in 'hsr' [ 1403.214959][T14203] Cannot create hsr debugfs directory [ 1403.228219][T14198] hsr_slave_0: entered promiscuous mode [ 1403.229804][T14198] hsr_slave_1: entered promiscuous mode [ 1403.230866][T14198] debugfs: 'hsr0' already exists in 'hsr' [ 1403.230894][T14198] Cannot create hsr debugfs directory [ 1403.231137][T14015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1403.273180][T14015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1404.917741][T13742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.341577][T13742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.531256][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.531577][T10618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.595862][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.596048][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.704235][T14015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.784692][T14015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.857422][T14015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1406.857448][T14015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1406.949301][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.949531][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.953033][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.953176][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.703420][T13742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.856772][T14015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.861129][ T3901] bridge_slave_1: left allmulticast mode [ 1407.861189][ T3901] bridge_slave_1: left promiscuous mode [ 1407.861478][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.949530][ T3901] bridge_slave_0: left allmulticast mode [ 1407.949561][ T3901] bridge_slave_0: left promiscuous mode [ 1407.949837][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.045009][ T3901] bridge_slave_1: left allmulticast mode [ 1408.045090][ T3901] bridge_slave_1: left promiscuous mode [ 1408.045367][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.130707][ T3901] bridge_slave_0: left allmulticast mode [ 1408.130738][ T3901] bridge_slave_0: left promiscuous mode [ 1408.130986][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.210824][ T3901] bridge_slave_1: left allmulticast mode [ 1408.210849][ T3901] bridge_slave_1: left promiscuous mode [ 1408.211032][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.273618][ T3901] bridge_slave_0: left allmulticast mode [ 1408.273664][ T3901] bridge_slave_0: left promiscuous mode [ 1408.273953][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.543401][T14388] overlayfs: failed to clone lowerpath [ 1408.688341][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.759681][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.823327][ T3901] bond0 (unregistering): Released all slaves [ 1409.219961][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.279575][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.340079][ T3901] bond0 (unregistering): Released all slaves [ 1409.898379][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.998208][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.059990][ T3901] bond0 (unregistering): Released all slaves [ 1410.637954][T13742] veth0_vlan: entered promiscuous mode [ 1410.707035][T13742] veth1_vlan: entered promiscuous mode [ 1410.715725][T14015] veth0_vlan: entered promiscuous mode [ 1410.761707][T14015] veth1_vlan: entered promiscuous mode [ 1410.948052][T14401] netlink: 'syz.4.1919': attribute type 3 has an invalid length. [ 1411.725262][T13742] veth0_macvtap: entered promiscuous mode [ 1412.167620][ T3901] hsr_slave_0: left promiscuous mode [ 1412.217755][ T3901] hsr_slave_1: left promiscuous mode [ 1412.218719][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.253258][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.448989][ T3901] hsr_slave_0: left promiscuous mode [ 1412.504556][ T3901] hsr_slave_1: left promiscuous mode [ 1412.505589][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.538814][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.720344][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1412.724684][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1412.725927][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1412.727147][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1412.748324][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1412.768498][ T3901] hsr_slave_0: left promiscuous mode [ 1412.807554][ T3901] hsr_slave_1: left promiscuous mode [ 1412.808551][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.851461][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.738317][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1414.801139][ T9754] Bluetooth: hci0: command tx timeout [ 1414.948181][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1416.258138][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1416.409721][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1416.877862][ T9754] Bluetooth: hci0: command tx timeout [ 1417.730686][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1417.902715][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1418.343476][T14431] netlink: 'syz.4.1927': attribute type 3 has an invalid length. [ 1419.181278][ T9754] Bluetooth: hci0: command tx timeout [ 1419.684819][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 1420.378644][T14015] veth0_macvtap: entered promiscuous mode [ 1420.427951][T14015] veth1_macvtap: entered promiscuous mode [ 1420.573091][T14015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.608963][T14015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.667876][ T6832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.696217][ T6832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.708162][ T6832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.725579][ T6832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.211680][ T9754] Bluetooth: hci0: command tx timeout [ 1421.544695][T14203] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1421.617100][T14203] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1421.622569][ T6334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.622592][ T6334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.682788][T14203] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1421.773697][T14203] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1422.091592][T14407] chnl_net:caif_netlink_parms(): no params data found [ 1422.111277][ T8532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.111299][ T8532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.897067][T14198] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1423.865314][T14198] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1423.889330][ T37] audit: type=1326 audit(1761594267.013:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14464 comm="syz.5.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f836efc9 code=0x7ffc0000 [ 1423.889550][ T37] audit: type=1326 audit(1761594267.013:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14464 comm="syz.5.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f836efc9 code=0x7ffc0000 [ 1424.026646][T14198] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1424.198390][T14198] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1424.481952][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.482985][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.483222][T14407] bridge_slave_0: entered allmulticast mode [ 1424.492626][T14407] bridge_slave_0: entered promiscuous mode [ 1424.791605][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.791863][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.792108][T14407] bridge_slave_1: entered allmulticast mode [ 1424.796667][T14407] bridge_slave_1: entered promiscuous mode [ 1425.326186][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.345783][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.489118][T14484] netlink: 'syz.4.1935': attribute type 3 has an invalid length. [ 1426.947523][T14478] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1427.107476][T14478] usb 6-1: Using ep0 maxpacket: 16 [ 1427.813972][T14478] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1427.814002][T14478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1427.844314][T14478] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1427.844347][T14478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.844369][T14478] usb 6-1: Product: syz [ 1427.844384][T14478] usb 6-1: Manufacturer: syz [ 1427.844399][T14478] usb 6-1: SerialNumber: syz [ 1428.163956][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.164188][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.177116][T14407] team0: Port device team_slave_0 added [ 1428.177945][T14486] smc: net device bond0 applied user defined pnetid SYZ2 [ 1428.181868][T14486] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1936'. [ 1428.250711][T14495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.255107][T14495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.279260][ T37] audit: type=1326 audit(1761594273.383:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14500 comm="syz.4.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1430.443680][T14486] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1430.479921][T14486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.563256][T14486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.643574][T14486] bond0 (unregistering): Released all slaves [ 1430.738945][T14407] team0: Port device team_slave_1 added [ 1430.895757][T14478] usb 6-1: 0:2 : does not exist [ 1430.910176][T14478] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1430.930926][T14478] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1430.937056][T14478] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1430.962930][T14478] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1431.025986][T14478] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1431.046352][T14478] usb 6-1: USB disconnect, device number 11 [ 1431.137820][T14440] udevd[14440]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.175013][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.175028][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.175053][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.243978][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.243997][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.244026][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.654237][T14407] hsr_slave_0: entered promiscuous mode [ 1431.655561][T14407] hsr_slave_1: entered promiscuous mode [ 1431.656474][T14407] debugfs: 'hsr0' already exists in 'hsr' [ 1431.656498][T14407] Cannot create hsr debugfs directory [ 1432.090112][T14517] netlink: 'syz.5.1944': attribute type 3 has an invalid length. [ 1433.133906][T14521] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1945'. [ 1433.134013][T14521] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1945'. [ 1434.092889][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.508612][T14534] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1950'. [ 1435.508636][T14534] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1436.025404][T14543] netlink: 'syz.5.1953': attribute type 3 has an invalid length. [ 1437.102836][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 1437.886100][T14203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.080721][T14556] wg2 speed is unknown, defaulting to 1000 [ 1439.085463][T14198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.085769][T14556] wg2 speed is unknown, defaulting to 1000 [ 1439.087223][T14556] wg2 speed is unknown, defaulting to 1000 [ 1439.136817][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.137206][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.174067][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.174276][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.306376][T14556] infiniband syz2: set active [ 1439.306394][T14556] infiniband syz2: added wg2 [ 1439.307077][T14556] syz2: rxe_create_cq: returned err = -12 [ 1439.307123][T14556] infiniband syz2: Couldn't create ib_mad CQ [ 1439.307223][T14556] infiniband syz2: Couldn't open port 1 [ 1439.347107][T14556] RDS/IB: syz2: added [ 1439.347211][T14556] smc: adding ib device syz2 with port count 1 [ 1439.347255][T14556] smc: ib device syz2 port 1 has no pnetid [ 1439.353079][T12251] wg2 speed is unknown, defaulting to 1000 [ 1439.356097][T14556] wg2 speed is unknown, defaulting to 1000 [ 1439.624348][ T31] wg2 speed is unknown, defaulting to 1000 [ 1439.625484][T14556] wg2 speed is unknown, defaulting to 1000 [ 1439.839310][T14556] wg2 speed is unknown, defaulting to 1000 [ 1440.048665][T14556] wg2 speed is unknown, defaulting to 1000 [ 1440.251360][T14556] wg2 speed is unknown, defaulting to 1000 [ 1440.457363][T14556] wg2 speed is unknown, defaulting to 1000 [ 1440.872499][T14198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.931810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.932038][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.219217][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.219446][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.872801][ T3901] bridge_slave_1: left allmulticast mode [ 1442.872830][ T3901] bridge_slave_1: left promiscuous mode [ 1442.873092][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.921691][ T3901] bridge_slave_0: left allmulticast mode [ 1442.921723][ T3901] bridge_slave_0: left promiscuous mode [ 1442.922024][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.077438][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1443.207711][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1443.494649][ T5919] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1443.619051][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1443.729636][ T5919] usb usb6-port1: attempt power cycle [ 1444.087521][ T5919] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1444.108223][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1444.347499][ T5919] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1444.368513][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1444.488897][ T5919] usb usb6-port1: unable to enumerate USB device [ 1445.198373][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.260029][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.280137][ T3901] bond0 (unregistering): Released all slaves [ 1446.118311][T14593] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1964'. [ 1446.118416][T14593] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.1964'. [ 1446.267468][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1446.321763][T14203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.421159][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.421189][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1446.422492][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1446.422520][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1446.422541][ T10] usb 6-1: SerialNumber: syz [ 1446.645115][T14198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.862494][ T10] usb 6-1: 0:2 : does not exist [ 1446.862585][ T10] usb 6-1: unit 5 not found! [ 1447.103621][ T10] usb 6-1: USB disconnect, device number 16 [ 1447.222528][T14440] udevd[14440]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.367591][ T3901] hsr_slave_0: left promiscuous mode [ 1447.398431][ T3901] hsr_slave_1: left promiscuous mode [ 1447.399641][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.485750][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.578205][ T3901] veth0_macvtap: left promiscuous mode [ 1447.578516][ T3901] veth1_vlan: left promiscuous mode [ 1447.578701][ T3901] veth0_vlan: left promiscuous mode [ 1447.737603][ T5919] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1447.894158][ T5919] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1447.894180][ T5919] usb 6-1: config 0 has no interface number 0 [ 1447.894216][ T5919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.894235][ T5919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.894251][ T5919] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1447.894280][ T5919] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1447.894296][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.904751][ T5919] usb 6-1: config 0 descriptor?? [ 1448.200471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.636610][ T5919] uclogic 0003:28BD:0042.001D: failed retrieving string descriptor #100: -71 [ 1448.636676][ T5919] uclogic 0003:28BD:0042.001D: failed retrieving pen parameters: -71 [ 1448.636695][ T5919] uclogic 0003:28BD:0042.001D: pen probing failed: -71 [ 1448.636712][ T5919] uclogic 0003:28BD:0042.001D: failed probing parameters: -71 [ 1448.636817][ T5919] uclogic 0003:28BD:0042.001D: probe with driver uclogic failed with error -71 [ 1448.649064][ T5919] usb 6-1: USB disconnect, device number 17 [ 1448.853180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.917552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.161827][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.648398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.613218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.669731][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.714386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1451.128638][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1451.401084][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1453.100712][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1453.103919][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1453.106513][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1453.129533][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1453.130330][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1454.774505][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1455.025239][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1455.187908][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1455.249395][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1455.250273][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.487894][ T5115] Bluetooth: hci2: command tx timeout [ 1457.447449][T13581] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1457.447584][ T5115] Bluetooth: hci3: command tx timeout [ 1457.527562][ T5115] Bluetooth: hci2: command tx timeout [ 1457.533472][T14645] wg2 speed is unknown, defaulting to 1000 [ 1457.577548][T13581] usb 6-1: device descriptor read/64, error -71 [ 1457.691146][T14407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1457.747086][T14407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1457.850905][T13581] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1457.867377][T14407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1457.949343][T14407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1457.987552][T13581] usb 6-1: device descriptor read/64, error -71 [ 1458.119477][T13581] usb usb6-port1: attempt power cycle [ 1458.494593][T13581] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1458.508823][T13581] usb 6-1: device descriptor read/8, error -71 [ 1458.787455][T13581] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1458.808273][T13581] usb 6-1: device descriptor read/8, error -71 [ 1458.861980][T14632] wg2 speed is unknown, defaulting to 1000 [ 1458.925284][T13581] usb usb6-port1: unable to enumerate USB device [ 1459.539865][ T5115] Bluetooth: hci3: command tx timeout [ 1459.597604][ T5115] Bluetooth: hci2: command tx timeout [ 1459.656097][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.930726][T14645] chnl_net:caif_netlink_parms(): no params data found [ 1460.392511][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.607745][ T5115] Bluetooth: hci3: command tx timeout [ 1462.234010][ T5115] Bluetooth: hci2: command tx timeout [ 1462.558292][T14655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.558499][T14655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.644096][T14645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.644240][T14645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.644501][T14645] bridge_slave_0: entered allmulticast mode [ 1462.657884][T14645] bridge_slave_0: entered promiscuous mode [ 1463.138453][T14645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.138598][T14645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.138846][T14645] bridge_slave_1: entered allmulticast mode [ 1463.143457][T14645] bridge_slave_1: entered promiscuous mode [ 1463.285805][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.285952][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.522797][T14645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.584784][T14645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.677654][ T5115] Bluetooth: hci3: command tx timeout [ 1463.849419][T14702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.855543][T14702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.516429][T14702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.539306][T14702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.033008][T14725] overlayfs: failed to clone lowerpath [ 1468.508289][T10304] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.526806][T10304] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.610573][T14632] chnl_net:caif_netlink_parms(): no params data found [ 1468.700373][T10304] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.703205][T14645] team0: Port device team_slave_0 added [ 1468.722696][T10304] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.740456][T14645] team0: Port device team_slave_1 added [ 1469.225333][T14645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.225353][T14645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.225382][T14645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.231449][T14645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.231464][T14645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.231485][T14645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.514512][T14632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.514731][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.514933][T14632] bridge_slave_0: entered allmulticast mode [ 1472.525111][T14632] bridge_slave_0: entered promiscuous mode [ 1472.691612][T14632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.691757][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.692019][T14632] bridge_slave_1: entered allmulticast mode [ 1472.695006][T14632] bridge_slave_1: entered promiscuous mode [ 1473.210015][T14762] overlayfs: failed to clone lowerpath [ 1473.368096][T14645] hsr_slave_0: entered promiscuous mode [ 1473.369516][T14645] hsr_slave_1: entered promiscuous mode [ 1473.370436][T14645] debugfs: 'hsr0' already exists in 'hsr' [ 1473.370461][T14645] Cannot create hsr debugfs directory [ 1473.772800][ T9754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.776884][ T9754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.784233][ T9754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.785597][ T9754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.786473][ T9754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1474.130994][T14632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.174969][T14632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.923448][ T5115] Bluetooth: hci0: command tx timeout [ 1476.804147][T14632] team0: Port device team_slave_0 added [ 1476.861794][T14632] team0: Port device team_slave_1 added [ 1476.878128][T14774] wg2 speed is unknown, defaulting to 1000 [ 1477.634736][T14793] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 1477.660333][T14795] overlayfs: failed to clone lowerpath [ 1477.997449][ T5115] Bluetooth: hci0: command tx timeout [ 1478.059229][T14632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.059247][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.059276][T14632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.168404][T14632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.168417][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.168437][T14632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.778018][ T3901] bridge_slave_1: left allmulticast mode [ 1478.778049][ T3901] bridge_slave_1: left promiscuous mode [ 1478.778366][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.848607][ T3901] bridge_slave_0: left allmulticast mode [ 1478.848630][ T3901] bridge_slave_0: left promiscuous mode [ 1478.848811][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.940289][ T3901] bridge_slave_1: left allmulticast mode [ 1478.940322][ T3901] bridge_slave_1: left promiscuous mode [ 1478.942723][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.009231][ T3901] bridge_slave_0: left allmulticast mode [ 1479.009262][ T3901] bridge_slave_0: left promiscuous mode [ 1479.009436][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.087731][ T5115] Bluetooth: hci0: command tx timeout [ 1482.637164][ T5115] Bluetooth: hci0: command tx timeout [ 1483.196050][T14823] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.2025'. [ 1483.196157][T14823] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.2025'. [ 1484.000658][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.078396][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.084884][ T5115] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1484.121533][ T3901] bond0 (unregistering): Released all slaves [ 1484.866983][T14830] netlink: 'syz.4.2027': attribute type 3 has an invalid length. [ 1486.866412][ T37] audit: type=1326 audit(1761594329.983:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.4.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1486.866548][ T37] audit: type=1326 audit(1761594329.983:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.4.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1490.518148][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.518222][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.678753][T14855] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2033'. [ 1490.678858][T14855] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2033'. [ 1490.758328][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.818370][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.841181][ T3901] bond0 (unregistering): Released all slaves [ 1490.932697][T14632] hsr_slave_0: entered promiscuous mode [ 1490.936033][T14632] hsr_slave_1: entered promiscuous mode [ 1490.937576][T14632] debugfs: 'hsr0' already exists in 'hsr' [ 1490.937606][T14632] Cannot create hsr debugfs directory [ 1493.372566][T14876] overlayfs: failed to clone lowerpath [ 1496.737674][ T3901] hsr_slave_0: left promiscuous mode [ 1496.797477][ T3901] hsr_slave_1: left promiscuous mode [ 1496.798257][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.811470][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 1496.828210][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.007597][ T3901] hsr_slave_0: left promiscuous mode [ 1497.027598][ T3901] hsr_slave_1: left promiscuous mode [ 1497.028406][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.085534][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.054917][ T37] audit: type=1326 audit(1761594347.173:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14905 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1506.129735][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1506.428257][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1507.746076][T14929] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 1508.131221][ T37] audit: type=1326 audit(1761594351.253:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14932 comm="syz.5.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f836efc9 code=0x7ffc0000 [ 1508.131281][ T37] audit: type=1326 audit(1761594351.253:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14932 comm="syz.5.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f836efc9 code=0x7ffc0000 [ 1510.610153][T14951] syz2: rxe_newlink: already configured on wg2 [ 1511.758100][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1512.378338][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1514.419142][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1514.464106][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1514.476003][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1514.487243][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1514.490361][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1515.294044][ T9754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1515.299504][ T9754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1515.335806][ T9754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1515.347048][ T9754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1515.442444][ T9754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1515.968672][T14774] chnl_net:caif_netlink_parms(): no params data found [ 1516.053780][T14974] overlayfs: failed to clone upperpath [ 1516.630538][T14969] wg2 speed is unknown, defaulting to 1000 [ 1516.640390][ T5115] Bluetooth: hci5: command tx timeout [ 1517.250360][T14963] wg2 speed is unknown, defaulting to 1000 [ 1517.257734][T14774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.257889][T14774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.258182][T14774] bridge_slave_0: entered allmulticast mode [ 1517.268686][T14774] bridge_slave_0: entered promiscuous mode [ 1517.299615][T14774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.299730][T14774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.299973][T14774] bridge_slave_1: entered allmulticast mode [ 1517.313771][T14774] bridge_slave_1: entered promiscuous mode [ 1517.517510][ T5115] Bluetooth: hci6: command tx timeout [ 1518.065443][T14774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.105090][T14774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.508494][T14774] team0: Port device team_slave_0 added [ 1518.548095][T14774] team0: Port device team_slave_1 added [ 1518.718093][ T5115] Bluetooth: hci5: command tx timeout [ 1518.893262][T14774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.893280][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.893308][T14774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.951937][T14774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.951956][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.951985][T14774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.497246][T14774] hsr_slave_0: entered promiscuous mode [ 1519.509454][T14774] hsr_slave_1: entered promiscuous mode [ 1519.512584][T14774] debugfs: 'hsr0' already exists in 'hsr' [ 1519.512613][T14774] Cannot create hsr debugfs directory [ 1519.597394][ T5115] Bluetooth: hci6: command tx timeout [ 1520.659386][T15012] wg2 speed is unknown, defaulting to 1000 [ 1520.797391][ T5115] Bluetooth: hci5: command tx timeout [ 1521.028458][T14969] chnl_net:caif_netlink_parms(): no params data found [ 1521.727897][ T5115] Bluetooth: hci6: command tx timeout [ 1521.878224][T14963] chnl_net:caif_netlink_parms(): no params data found [ 1521.938972][T15028] syz2: rxe_newlink: already configured on wg2 [ 1522.877450][ T5115] Bluetooth: hci5: command tx timeout [ 1523.561655][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.561798][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.561995][T14969] bridge_slave_0: entered allmulticast mode [ 1523.565264][T14969] bridge_slave_0: entered promiscuous mode [ 1523.685844][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.686319][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.686558][T14969] bridge_slave_1: entered allmulticast mode [ 1523.710132][T14969] bridge_slave_1: entered promiscuous mode [ 1523.759112][ T9754] Bluetooth: hci6: command tx timeout [ 1525.002528][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.003550][T14963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.003766][T14963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.004050][T14963] bridge_slave_0: entered allmulticast mode [ 1525.007206][T14963] bridge_slave_0: entered promiscuous mode [ 1525.163549][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.164123][T14963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.164258][T14963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.164452][T14963] bridge_slave_1: entered allmulticast mode [ 1525.198486][T14963] bridge_slave_1: entered promiscuous mode [ 1525.854596][T14969] team0: Port device team_slave_0 added [ 1525.871758][T14963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.109514][T14969] team0: Port device team_slave_1 added [ 1526.115160][T14963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.443904][T15064] wg2 speed is unknown, defaulting to 1000 [ 1527.269731][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.269748][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.269770][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.275040][T14963] team0: Port device team_slave_0 added [ 1527.348256][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.348274][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.348301][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.354197][T14963] team0: Port device team_slave_1 added [ 1527.404671][T15071] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2082'. [ 1527.404766][T15071] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2082'. [ 1528.307113][T14963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.307131][T14963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.307160][T14963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.406274][T14963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.406292][T14963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.406318][T14963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.572622][T15082] overlayfs: failed to clone upperpath [ 1528.786702][T14969] hsr_slave_0: entered promiscuous mode [ 1528.793678][T14969] hsr_slave_1: entered promiscuous mode [ 1528.794432][T14969] debugfs: 'hsr0' already exists in 'hsr' [ 1528.794457][T14969] Cannot create hsr debugfs directory [ 1529.323415][ T3901] bridge_slave_1: left allmulticast mode [ 1529.323446][ T3901] bridge_slave_1: left promiscuous mode [ 1529.323713][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.375856][ T37] audit: type=1326 audit(1761594372.493:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15090 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1529.376904][ T37] audit: type=1326 audit(1761594372.493:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15090 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1529.439538][ T3901] bridge_slave_0: left allmulticast mode [ 1529.439570][ T3901] bridge_slave_0: left promiscuous mode [ 1529.439842][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.530938][ T3901] bridge_slave_1: left allmulticast mode [ 1529.530961][ T3901] bridge_slave_1: left promiscuous mode [ 1529.535560][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.589029][ T3901] bridge_slave_0: left allmulticast mode [ 1529.589059][ T3901] bridge_slave_0: left promiscuous mode [ 1529.589328][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.700256][ T3901] bridge_slave_1: left allmulticast mode [ 1529.703743][ T3901] bridge_slave_1: left promiscuous mode [ 1529.704016][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.779463][ T3901] bridge_slave_0: left allmulticast mode [ 1529.779496][ T3901] bridge_slave_0: left promiscuous mode [ 1529.779764][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.565361][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.638410][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.704660][ T3901] bond0 (unregistering): Released all slaves [ 1531.068434][T15098] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 1531.090369][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1531.168408][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1531.244001][ T3901] bond0 (unregistering): Released all slaves [ 1531.689901][T15101] overlayfs: failed to clone upperpath [ 1532.207813][T15105] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2091'. [ 1532.207909][T15105] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2091'. [ 1533.379114][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.460233][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.491414][ T3901] bond0 (unregistering): Released all slaves [ 1533.549681][T14963] hsr_slave_0: entered promiscuous mode [ 1533.559472][T14963] hsr_slave_1: entered promiscuous mode [ 1533.560564][T14963] debugfs: 'hsr0' already exists in 'hsr' [ 1533.560590][T14963] Cannot create hsr debugfs directory [ 1533.978687][T15098] smc: adding net device bond0 with user defined pnetid SYZ2 [ 1533.986563][T15098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.022406][T15099] ip6tnl1: entered allmulticast mode [ 1534.889201][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1534.894466][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1534.897044][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1534.927784][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1534.928358][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1535.959480][ T37] audit: type=1326 audit(1761594379.083:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.4.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1535.959633][ T37] audit: type=1326 audit(1761594379.083:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15120 comm="syz.4.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7154efc9 code=0x7ffc0000 [ 1537.117396][ T9754] Bluetooth: hci2: command tx timeout [ 1537.893667][T15132] netlink: 'syz.4.2098': attribute type 3 has an invalid length. [ 1539.018469][T15138] overlayfs: overlapping lowerdir path [ 1539.523554][ T9754] Bluetooth: hci2: command tx timeout [ 1539.697469][ T3901] hsr_slave_0: left promiscuous mode [ 1539.739847][ T3901] hsr_slave_1: left promiscuous mode [ 1539.743811][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.788501][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.058466][ T3901] hsr_slave_0: left promiscuous mode [ 1540.107635][ T3901] hsr_slave_1: left promiscuous mode [ 1540.108367][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.178704][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.527606][ T3901] hsr_slave_0: left promiscuous mode [ 1540.567586][ T3901] hsr_slave_1: left promiscuous mode [ 1540.568475][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.608541][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.863099][T15148] overlayfs: failed to clone upperpath [ 1541.600062][ T9754] Bluetooth: hci2: command tx timeout [ 1542.606740][T15162] netlink: 'syz.4.2107': attribute type 3 has an invalid length. [ 1543.518408][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1543.661619][T15169] netlink: 'syz.5.2110': attribute type 1 has an invalid length. [ 1543.677496][ T9754] Bluetooth: hci2: command tx timeout [ 1543.727696][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1545.369117][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1545.523834][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1548.067029][T15184] overlayfs: failed to clone upperpath [ 1548.108028][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1548.348571][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1549.021697][T15188] netlink: 'syz.4.2116': attribute type 3 has an invalid length. [ 1551.047797][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.047890][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.844264][T15115] wg2 speed is unknown, defaulting to 1000 [ 1555.635571][T15234] netlink: 'syz.4.2124': attribute type 3 has an invalid length. [ 1556.844991][T15115] chnl_net:caif_netlink_parms(): no params data found [ 1557.004549][T15250] netlink: 'syz.4.2128': attribute type 1 has an invalid length. [ 1560.437817][T15285] netlink: 'syz.4.2132': attribute type 3 has an invalid length. [ 1560.588816][T15282] can0: slcan on ptm0. [ 1561.298372][T15115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.298560][T15115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.298838][T15115] bridge_slave_0: entered allmulticast mode [ 1561.301865][T15115] bridge_slave_0: entered promiscuous mode [ 1561.462399][T15115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.462550][T15115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.462797][T15115] bridge_slave_1: entered allmulticast mode [ 1561.488610][T15115] bridge_slave_1: entered promiscuous mode [ 1561.511598][T15279] can0 (unregistered): slcan off ptm0. [ 1561.881809][T15115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.890334][T15115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.367173][T15115] team0: Port device team_slave_0 added [ 1562.382254][T15115] team0: Port device team_slave_1 added [ 1562.731203][T15294] overlayfs: failed to clone upperpath [ 1562.960180][T15115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.960199][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.960238][T15115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.022314][T15115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.022332][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.022364][T15115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.609374][T15115] hsr_slave_0: entered promiscuous mode [ 1563.610497][T15115] hsr_slave_1: entered promiscuous mode [ 1563.611277][T15115] debugfs: 'hsr0' already exists in 'hsr' [ 1563.611296][T15115] Cannot create hsr debugfs directory [ 1564.619008][T14969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1564.772961][T14969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1564.919920][T14969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1565.036582][T14969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1565.779396][T14963] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1565.919969][T14963] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1565.993270][T14963] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1566.114160][T14963] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1566.496849][ T37] audit: type=1326 audit(1761594409.613:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15349 comm="syz.5.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f836efc9 code=0x7ffc0000 [ 1566.496892][ T37] audit: type=1326 audit(1761594409.613:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15349 comm="syz.5.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f836efc9 code=0x7ffc0000 [ 1567.883033][ T3901] bridge_slave_1: left allmulticast mode [ 1567.883065][ T3901] bridge_slave_1: left promiscuous mode [ 1567.883339][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.271205][ T3901] bridge_slave_0: left allmulticast mode [ 1568.271238][ T3901] bridge_slave_0: left promiscuous mode [ 1568.271534][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.658262][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1569.740189][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1569.799807][ T3901] bond0 (unregistering): Released all slaves [ 1569.911459][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.140384][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.174471][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.174712][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.221173][T14963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.253995][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.254233][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.315917][T14963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.449463][T15389] netlink: 'syz.4.2151': attribute type 3 has an invalid length. [ 1571.449924][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.450155][ T8532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.752070][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.753490][ T8532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.576877][ T3901] hsr_slave_0: left promiscuous mode [ 1573.625068][ T3901] hsr_slave_1: left promiscuous mode [ 1573.626051][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.678293][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.125474][T15428] rdma_rxe: rxe_newlink: failed to add wg2 [ 1574.628831][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1574.768288][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1575.523796][T15115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1575.621046][T15115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1575.677475][T15115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1576.627522][T15115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1578.387557][T15454] netlink: 'syz.4.2159': attribute type 3 has an invalid length. [ 1580.399349][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1580.417634][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1580.420632][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1580.437998][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1580.448163][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1581.516634][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1581.519147][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1581.533574][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1581.549948][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1581.553396][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1581.744065][T15478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2164'. [ 1582.145961][T15461] wg2 speed is unknown, defaulting to 1000 [ 1582.569716][ T5115] Bluetooth: hci0: command tx timeout [ 1583.324635][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1584.087063][ T5115] Bluetooth: hci3: command tx timeout [ 1584.354480][T15115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.355311][T15474] wg2 speed is unknown, defaulting to 1000 [ 1584.468356][T15496] 9pnet_fd: Insufficient options for proto=fd [ 1584.744688][ T5115] Bluetooth: hci0: command tx timeout [ 1585.552898][T15508] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2172'. [ 1585.618859][T15115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.684345][T15510] overlayfs: failed to resolve './file1': -2 [ 1585.980079][T15518] overlayfs: failed to clone lowerpath [ 1586.756830][ T5115] Bluetooth: hci3: command tx timeout [ 1586.797859][ T5115] Bluetooth: hci0: command tx timeout [ 1586.950965][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.951119][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.015859][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.016028][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.719952][T15461] chnl_net:caif_netlink_parms(): no params data found [ 1588.576569][T15474] chnl_net:caif_netlink_parms(): no params data found [ 1588.798240][ T5115] Bluetooth: hci3: command tx timeout [ 1588.882071][ T5115] Bluetooth: hci0: command tx timeout [ 1589.601872][T15547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2181'. [ 1589.897499][ T8098] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1590.095960][ T8098] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1590.095990][ T8098] usb 6-1: config 0 has no interface number 0 [ 1590.096043][ T8098] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.096069][ T8098] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1590.096115][ T8098] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1590.096139][ T8098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.109648][ T8098] usb 6-1: config 0 descriptor?? [ 1590.166314][ T8098] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1590.321261][T15461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.321530][T15461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.321763][T15461] bridge_slave_0: entered allmulticast mode [ 1590.324767][T15461] bridge_slave_0: entered promiscuous mode [ 1590.386002][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.386139][T15461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.386388][T15461] bridge_slave_1: entered allmulticast mode [ 1590.415500][T15461] bridge_slave_1: entered promiscuous mode [ 1590.877633][ T5115] Bluetooth: hci3: command tx timeout [ 1591.208140][T15461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.315171][T15461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.325256][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.326677][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.326917][T15474] bridge_slave_0: entered allmulticast mode [ 1591.331841][T15474] bridge_slave_0: entered promiscuous mode [ 1591.421497][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.421639][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.421869][T15474] bridge_slave_1: entered allmulticast mode [ 1591.425295][T15474] bridge_slave_1: entered promiscuous mode [ 1591.621014][T15461] team0: Port device team_slave_0 added [ 1591.757126][T15461] team0: Port device team_slave_1 added [ 1591.774153][T15474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.883141][T15474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.682897][ T31] usb 6-1: USB disconnect, device number 22 [ 1592.718422][T15461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.718439][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.718467][T15461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.888248][T15461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.888267][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.888297][T15461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.949941][T15474] team0: Port device team_slave_0 added [ 1592.955853][T15115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.023568][T15474] team0: Port device team_slave_1 added [ 1593.696331][T15474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.696349][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.696376][T15474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.854207][T15474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.854226][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.854270][T15474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.913208][T15461] hsr_slave_0: entered promiscuous mode [ 1594.914519][T15461] hsr_slave_1: entered promiscuous mode [ 1594.915477][T15461] debugfs: 'hsr0' already exists in 'hsr' [ 1594.915502][T15461] Cannot create hsr debugfs directory [ 1594.975317][ T3901] bridge_slave_1: left allmulticast mode [ 1594.975341][ T3901] bridge_slave_1: left promiscuous mode [ 1594.975523][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.091044][ T3901] bridge_slave_0: left allmulticast mode [ 1595.091074][ T3901] bridge_slave_0: left promiscuous mode [ 1595.091349][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.171491][ T3901] bridge_slave_1: left allmulticast mode [ 1595.171514][ T3901] bridge_slave_1: left promiscuous mode [ 1595.171682][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.289124][ T3901] bridge_slave_0: left allmulticast mode [ 1595.289156][ T3901] bridge_slave_0: left promiscuous mode [ 1595.289405][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.544911][ T9754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1596.687092][ T9754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1596.696417][ T9754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1596.709411][ T9754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1596.750541][ T9754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1597.826700][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 1598.880151][ T9754] Bluetooth: hci2: command tx timeout [ 1599.239535][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.298318][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.323576][ T3901] bond0 (unregistering): Released all slaves [ 1600.735882][T15609] netlink: 'syz.4.2195': attribute type 3 has an invalid length. [ 1600.961768][ T9754] Bluetooth: hci2: command tx timeout [ 1601.439471][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.498144][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.520963][ T3901] bond0 (unregistering): Released all slaves [ 1602.513041][T15474] hsr_slave_0: entered promiscuous mode [ 1602.514468][T15474] hsr_slave_1: entered promiscuous mode [ 1602.515416][T15474] debugfs: 'hsr0' already exists in 'hsr' [ 1602.515443][T15474] Cannot create hsr debugfs directory [ 1603.039271][ T9754] Bluetooth: hci2: command tx timeout [ 1603.575570][T15589] wg2 speed is unknown, defaulting to 1000 [ 1604.202459][ T3901] hsr_slave_0: left promiscuous mode [ 1604.227608][ T3901] hsr_slave_1: left promiscuous mode [ 1604.228921][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.258292][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.987580][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 1605.162844][ T9754] Bluetooth: hci2: command tx timeout [ 1605.387373][ T3901] hsr_slave_0: left promiscuous mode [ 1605.407398][ T3901] hsr_slave_1: left promiscuous mode [ 1605.408416][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.430645][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.866490][T15642] netlink: 'syz.4.2205': attribute type 3 has an invalid length. [ 1606.768094][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1606.978054][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1610.089122][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1610.308231][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1612.488083][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.488151][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.704322][T15670] netlink: 'syz.5.2213': attribute type 3 has an invalid length. [ 1620.945564][T15676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2214'. [ 1621.436938][T15689] overlayfs: failed to clone upperpath [ 1621.832625][T15589] chnl_net:caif_netlink_parms(): no params data found [ 1623.121945][T15708] netlink: 'syz.4.2221': attribute type 3 has an invalid length. [ 1623.831876][T15717] netlink: 'syz.5.2224': attribute type 3 has an invalid length. [ 1624.148487][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.150531][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.150788][T15589] bridge_slave_0: entered allmulticast mode [ 1624.154273][T15589] bridge_slave_0: entered promiscuous mode [ 1624.187913][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.188092][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.188347][T15589] bridge_slave_1: entered allmulticast mode [ 1624.190387][T15589] bridge_slave_1: entered promiscuous mode [ 1624.525350][T15589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.532070][T15589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.757552][ T9538] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1624.797075][T15589] team0: Port device team_slave_0 added [ 1624.830147][T15589] team0: Port device team_slave_1 added [ 1624.910244][ T9538] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.910273][ T9538] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.916023][ T9538] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1624.916054][ T9538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1624.916076][ T9538] usb 6-1: SerialNumber: syz [ 1625.184615][ T9538] usb 6-1: 0:2 : does not exist [ 1625.184707][ T9538] usb 6-1: unit 5 not found! [ 1625.227826][ T9538] usb 6-1: USB disconnect, device number 23 [ 1625.268967][T15666] udevd[15666]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1625.431338][T15589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.431356][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.431386][T15589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.572396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.621310][T15589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.621327][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.621353][T15589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.842778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.086401][T15728] netlink: 'syz.5.2229': attribute type 3 has an invalid length. [ 1626.147458][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.073929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.393967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.028420][T15461] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1628.350487][T15461] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1628.393791][T15589] hsr_slave_0: entered promiscuous mode [ 1628.395130][T15589] hsr_slave_1: entered promiscuous mode [ 1628.408545][T15589] debugfs: 'hsr0' already exists in 'hsr' [ 1628.408579][T15589] Cannot create hsr debugfs directory [ 1628.409994][T15461] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1628.525084][T15461] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1628.700809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.214462][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.805714][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 1629.933976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.225591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.682567][T15474] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1630.782663][T15474] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1631.087009][T15474] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1631.210552][T15474] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1631.780868][ T3901] bridge_slave_1: left allmulticast mode [ 1631.780899][ T3901] bridge_slave_1: left promiscuous mode [ 1631.781158][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.849392][ T3901] bridge_slave_0: left allmulticast mode [ 1631.850541][ T3901] bridge_slave_0: left promiscuous mode [ 1631.850727][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.827993][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.888253][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.932305][ T3901] bond0 (unregistering): Released all slaves [ 1635.802518][T15800] netlink: 'syz.5.2250': attribute type 3 has an invalid length. [ 1636.268593][ T3901] hsr_slave_0: left promiscuous mode [ 1636.287368][ T3901] hsr_slave_1: left promiscuous mode [ 1636.288029][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.332205][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.532548][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1637.544293][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1637.550630][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1637.552915][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1637.592054][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1637.688170][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1637.948969][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1638.596708][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.693143][ T9754] Bluetooth: hci5: command tx timeout [ 1640.259426][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1640.293964][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1640.295341][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1640.296809][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1640.325986][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1641.757356][ T5115] Bluetooth: hci5: command tx timeout [ 1642.224159][T15827] Bluetooth: MGMT ver 1.23 [ 1642.402437][ T5115] Bluetooth: hci6: command tx timeout [ 1643.108800][T15832] overlayfs: failed to resolve './file0': -2 [ 1643.837953][ T5115] Bluetooth: hci5: command tx timeout [ 1644.477456][ T9754] Bluetooth: hci6: command tx timeout [ 1644.658632][T15805] wg2 speed is unknown, defaulting to 1000 [ 1645.483997][T15589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1646.033125][ T9754] Bluetooth: hci5: command tx timeout [ 1646.069246][T15589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1646.439560][T15815] wg2 speed is unknown, defaulting to 1000 [ 1646.461809][T15589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1646.557644][ T9754] Bluetooth: hci6: command tx timeout [ 1647.018683][T15589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1648.767436][ T9754] Bluetooth: hci6: command tx timeout [ 1650.920270][T15900] overlayfs: failed to resolve './file1': -2 [ 1650.928321][T15805] chnl_net:caif_netlink_parms(): no params data found [ 1651.373071][T15907] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2279'. [ 1651.541036][T15815] chnl_net:caif_netlink_parms(): no params data found [ 1651.816216][T15912] 9pnet_fd: Insufficient options for proto=fd [ 1653.407344][T15805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.407468][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.407685][T15805] bridge_slave_0: entered allmulticast mode [ 1653.410230][T15805] bridge_slave_0: entered promiscuous mode [ 1653.527604][T15805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.527735][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.527930][T15805] bridge_slave_1: entered allmulticast mode [ 1653.540884][T15805] bridge_slave_1: entered promiscuous mode [ 1654.204410][T15805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.653466][T15805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.709329][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.709476][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.709639][T15815] bridge_slave_0: entered allmulticast mode [ 1654.711692][T15815] bridge_slave_0: entered promiscuous mode [ 1656.124629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.488659][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.488829][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.489102][T15815] bridge_slave_1: entered allmulticast mode [ 1656.492028][T15815] bridge_slave_1: entered promiscuous mode [ 1656.741313][T15805] team0: Port device team_slave_0 added [ 1656.965814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1657.040757][T15805] team0: Port device team_slave_1 added [ 1657.054707][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1658.024092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.170819][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.609136][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.793131][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1658.815999][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1658.829529][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1658.831148][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1658.832251][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1659.182754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.537062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.996014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.059448][T15805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.059466][T15805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.059496][T15805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.262045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.544270][T15805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.544287][T15805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.544314][T15805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.551098][T15815] team0: Port device team_slave_0 added [ 1660.879298][ T5115] Bluetooth: hci0: command tx timeout [ 1661.964106][T15815] team0: Port device team_slave_1 added [ 1662.264009][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.264027][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.264056][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.370605][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.370623][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.370652][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.382939][T15961] wg2 speed is unknown, defaulting to 1000 [ 1662.411053][T15805] hsr_slave_0: entered promiscuous mode [ 1662.422867][T15805] hsr_slave_1: entered promiscuous mode [ 1662.432451][T15805] debugfs: 'hsr0' already exists in 'hsr' [ 1662.432500][T15805] Cannot create hsr debugfs directory [ 1662.957537][ T5115] Bluetooth: hci0: command tx timeout [ 1664.625619][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 1665.227862][ T5115] Bluetooth: hci0: command tx timeout [ 1665.318516][T15815] hsr_slave_0: entered promiscuous mode [ 1665.319934][T15815] hsr_slave_1: entered promiscuous mode [ 1665.320879][T15815] debugfs: 'hsr0' already exists in 'hsr' [ 1665.320904][T15815] Cannot create hsr debugfs directory [ 1665.917746][ T3901] bridge_slave_1: left allmulticast mode [ 1665.917777][ T3901] bridge_slave_1: left promiscuous mode [ 1665.918042][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.981550][ T3901] bridge_slave_0: left allmulticast mode [ 1665.981584][ T3901] bridge_slave_0: left promiscuous mode [ 1665.981864][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.072325][ T3901] bridge_slave_1: left allmulticast mode [ 1666.072359][ T3901] bridge_slave_1: left promiscuous mode [ 1666.072636][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.128470][ T3901] bridge_slave_0: left allmulticast mode [ 1666.128494][ T3901] bridge_slave_0: left promiscuous mode [ 1666.128670][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.058098][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.168824][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1667.234899][ T3901] bond0 (unregistering): Released all slaves [ 1667.277503][ T5115] Bluetooth: hci0: command tx timeout [ 1668.248187][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.319648][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.394639][ T3901] bond0 (unregistering): Released all slaves [ 1670.947670][ T3901] hsr_slave_0: left promiscuous mode [ 1670.987597][ T3901] hsr_slave_1: left promiscuous mode [ 1670.988432][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.010753][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.167720][ T3901] hsr_slave_0: left promiscuous mode [ 1671.188457][ T3901] hsr_slave_1: left promiscuous mode [ 1671.189357][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.238453][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.318004][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1672.488289][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1673.922230][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.922336][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.242732][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1674.459854][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1675.017068][T16056] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.2317'. [ 1675.017181][T16056] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.2317'. [ 1677.186312][T15961] chnl_net:caif_netlink_parms(): no params data found [ 1677.912006][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.912148][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.912384][T15961] bridge_slave_0: entered allmulticast mode [ 1677.916549][T15961] bridge_slave_0: entered promiscuous mode [ 1677.922661][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.923016][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.923238][T15961] bridge_slave_1: entered allmulticast mode [ 1677.926486][T15961] bridge_slave_1: entered promiscuous mode [ 1678.441676][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.499530][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.965696][T15961] team0: Port device team_slave_0 added [ 1679.000776][T15961] team0: Port device team_slave_1 added [ 1679.377996][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.378014][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.378045][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.672933][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.672947][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.672968][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.470123][T15961] hsr_slave_0: entered promiscuous mode [ 1680.483981][T15961] hsr_slave_1: entered promiscuous mode [ 1680.485299][T15961] debugfs: 'hsr0' already exists in 'hsr' [ 1680.485328][T15961] Cannot create hsr debugfs directory [ 1681.038940][T15805] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1681.819907][T15805] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1681.872122][T15805] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1681.977626][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1682.129395][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.129430][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.129464][ T31] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1682.129481][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.134595][ T31] usb 6-1: config 0 descriptor?? [ 1682.191866][T15805] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1682.548756][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1682.551651][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 1682.551792][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1682.585710][ T31] usb 6-1: USB disconnect, device number 24 [ 1682.957042][T15815] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1682.994112][T15815] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1683.036063][T15815] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1683.084488][T15815] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1683.461729][ T3901] bridge_slave_1: left allmulticast mode [ 1683.461761][ T3901] bridge_slave_1: left promiscuous mode [ 1683.462024][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.540912][ T3901] bridge_slave_0: left allmulticast mode [ 1683.540945][ T3901] bridge_slave_0: left promiscuous mode [ 1683.541224][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.497597][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1684.651588][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1684.651618][ T10] usb 6-1: config 0 has no interface number 0 [ 1684.651670][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.651699][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.651724][ T10] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1684.651768][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1684.651793][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.730886][ T10] usb 6-1: config 0 descriptor?? [ 1685.679103][ T3901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.768268][ T3901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1685.840719][ T3901] bond0 (unregistering): Released all slaves [ 1685.877896][ T10] usbhid 6-1:0.1: can't add hid device: -71 [ 1685.878033][ T10] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1685.921864][ T10] usb 6-1: USB disconnect, device number 25 [ 1686.445531][T15805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.792530][T15815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.813011][T15805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.129628][ T3901] hsr_slave_0: left promiscuous mode [ 1687.174100][ T3901] hsr_slave_1: left promiscuous mode [ 1687.175095][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.208924][ T3901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.278123][ T3901] team0 (unregistering): Port device team_slave_1 removed [ 1688.518160][ T3901] team0 (unregistering): Port device team_slave_0 removed [ 1690.265881][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.266107][T10618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.345489][T15815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1690.350115][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.350310][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.380936][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.381126][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.461164][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.466088][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.057128][T15961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1691.116995][T15961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1691.747255][T15961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1691.824927][T15961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1692.214081][T15805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.379094][T15961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.559209][T15961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.582857][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.583782][ T8532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.615567][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.628168][ T8532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1693.442751][T15815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.204751][T15961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.215368][T15805] veth0_vlan: entered promiscuous mode [ 1694.254978][T15805] veth1_vlan: entered promiscuous mode [ 1694.316469][T15815] veth0_vlan: entered promiscuous mode [ 1694.356019][T15815] veth1_vlan: entered promiscuous mode [ 1694.405750][T15961] veth0_vlan: entered promiscuous mode [ 1694.426370][T15805] veth0_macvtap: entered promiscuous mode [ 1694.442083][T15961] veth1_vlan: entered promiscuous mode [ 1694.448150][T15805] veth1_macvtap: entered promiscuous mode [ 1694.519026][T15815] veth0_macvtap: entered promiscuous mode [ 1694.545386][T15815] veth1_macvtap: entered promiscuous mode [ 1694.555034][T15805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.598321][T15805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1694.782253][T10618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.785059][T15961] veth0_macvtap: entered promiscuous mode [ 1694.786927][T10618] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.849379][T15815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.851002][T10618] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.891762][T10618] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.902766][T15961] veth1_macvtap: entered promiscuous mode [ 1694.914811][T15815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.331703][T16220] netlink: 'syz.4.2344': attribute type 3 has an invalid length. [ 1696.183599][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.201966][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.322393][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.441160][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.508969][T15961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.649645][T15961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.878782][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.884068][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.917654][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.002439][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.414082][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.414104][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.079101][ T9754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1699.133932][ T9754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1699.146734][ T9754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1699.196868][ T9754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1699.215031][ T9754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1699.816907][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2346'. [ 1699.879271][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.879295][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.342535][T16241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2347'. [ 1701.367536][ T5115] Bluetooth: hci2: command tx timeout [ 1701.415506][ T9754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1701.464381][ T9754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1701.480282][ T9754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1701.495130][ T9754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1701.515122][ T9754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1701.554062][T16237] ip6tnl1: entered allmulticast mode [ 1702.023566][ T8513] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.109924][ T6832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.109947][ T6832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.219373][T16230] wg2 speed is unknown, defaulting to 1000 [ 1702.450485][ T8513] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.544189][ T5115] Bluetooth: hci2: command tx timeout [ 1703.565130][T16262] overlayfs: failed to clone upperpath [ 1703.597443][ T5115] Bluetooth: hci3: command tx timeout [ 1703.699300][T16266] netlink: 'syz.2.2352': attribute type 3 has an invalid length. [ 1704.741988][ T8513] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.851762][T16248] wg2 speed is unknown, defaulting to 1000 [ 1705.776616][ T5115] Bluetooth: hci2: command tx timeout [ 1705.776653][ T5115] Bluetooth: hci3: command tx timeout [ 1706.334282][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2355'. [ 1707.008228][ T8513] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.420281][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2359'. [ 1708.514237][T16296] wg2 speed is unknown, defaulting to 1000 [ 1708.721511][ T9754] Bluetooth: hci3: command tx timeout [ 1708.721555][ T9754] Bluetooth: hci2: command tx timeout [ 1710.478137][ T8513] bridge_slave_1: left allmulticast mode [ 1710.478163][ T8513] bridge_slave_1: left promiscuous mode [ 1710.478363][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.653887][ T8513] bridge_slave_0: left allmulticast mode [ 1710.653917][ T8513] bridge_slave_0: left promiscuous mode [ 1710.654185][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.879648][ T5115] Bluetooth: hci3: command tx timeout [ 1713.762910][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.804110][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.820868][ T8513] bond0 (unregistering): Released all slaves [ 1714.353903][T16230] chnl_net:caif_netlink_parms(): no params data found [ 1714.992520][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 1715.871960][T16248] chnl_net:caif_netlink_parms(): no params data found [ 1716.955777][T16230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.955871][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.956057][T16230] bridge_slave_0: entered allmulticast mode [ 1716.964776][T16230] bridge_slave_0: entered promiscuous mode [ 1717.052146][T16230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.053061][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.053331][T16230] bridge_slave_1: entered allmulticast mode [ 1717.090974][T16230] bridge_slave_1: entered promiscuous mode [ 1719.978821][T16362] wg2 speed is unknown, defaulting to 1000 [ 1721.407431][ T8513] hsr_slave_0: left promiscuous mode [ 1721.427450][ T8513] hsr_slave_1: left promiscuous mode [ 1721.428542][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.428569][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.453027][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.453062][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.883953][ T8513] veth1_macvtap: left promiscuous mode [ 1721.884066][ T8513] veth0_macvtap: left promiscuous mode [ 1721.884362][ T8513] veth1_vlan: left promiscuous mode [ 1721.884546][ T8513] veth0_vlan: left promiscuous mode [ 1723.482610][ T9538] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1723.650190][ T9538] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1723.650221][ T9538] usb 6-1: config 0 has no interface number 0 [ 1723.650353][ T9538] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.650385][ T9538] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.650408][ T9538] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1723.650453][ T9538] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1723.650470][ T9538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.654769][ T9538] usb 6-1: config 0 descriptor?? [ 1724.498220][ T9538] uclogic 0003:28BD:0042.001E: failed retrieving string descriptor #100: -71 [ 1724.498280][ T9538] uclogic 0003:28BD:0042.001E: failed retrieving pen parameters: -71 [ 1724.498309][ T9538] uclogic 0003:28BD:0042.001E: pen probing failed: -71 [ 1724.498326][ T9538] uclogic 0003:28BD:0042.001E: failed probing parameters: -71 [ 1724.498426][ T9538] uclogic 0003:28BD:0042.001E: probe with driver uclogic failed with error -71 [ 1724.510560][ T9538] usb 6-1: USB disconnect, device number 26 [ 1726.478202][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1726.768264][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1730.726674][T16415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'. [ 1731.418743][T16230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.496893][T16416] ip6tnl1: entered allmulticast mode [ 1732.010984][T16230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.012683][T16248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.013653][T16248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.013803][T16248] bridge_slave_0: entered allmulticast mode [ 1732.018102][T16248] bridge_slave_0: entered promiscuous mode [ 1732.149397][T16248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.149649][T16248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.149881][T16248] bridge_slave_1: entered allmulticast mode [ 1732.152861][T16248] bridge_slave_1: entered promiscuous mode [ 1732.648876][T16230] team0: Port device team_slave_0 added [ 1732.863627][T16230] team0: Port device team_slave_1 added [ 1733.222588][T16248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.436854][T16248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.478580][T16230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.478598][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.478629][T16230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.808260][T16230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.808275][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.808296][T16230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.143103][T16248] team0: Port device team_slave_0 added [ 1734.696572][T16248] team0: Port device team_slave_1 added [ 1734.980767][T16444] overlayfs: failed to clone upperpath [ 1735.031402][T16230] hsr_slave_0: entered promiscuous mode [ 1735.033583][T16230] hsr_slave_1: entered promiscuous mode [ 1735.035021][T16230] debugfs: 'hsr0' already exists in 'hsr' [ 1735.035091][T16230] Cannot create hsr debugfs directory [ 1735.170394][T16248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.170410][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.170430][T16248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.175497][T16248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.175514][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.175535][T16248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.371629][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.371745][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.498729][T16459] overlayfs: missing 'lowerdir' [ 1737.716942][ T8513] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.230368][ T8513] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.401446][T16248] hsr_slave_0: entered promiscuous mode [ 1738.405651][T16248] hsr_slave_1: entered promiscuous mode [ 1738.406851][T16248] debugfs: 'hsr0' already exists in 'hsr' [ 1738.406878][T16248] Cannot create hsr debugfs directory [ 1740.258616][ T8513] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.270800][T16496] overlayfs: missing 'lowerdir' [ 1741.761978][ T8513] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.874348][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 1745.024531][T16527] ip6tnl1: entered allmulticast mode [ 1745.309962][ T8513] bridge_slave_1: left allmulticast mode [ 1745.309988][ T8513] bridge_slave_1: left promiscuous mode [ 1745.310175][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.409738][ T8513] bridge_slave_0: left allmulticast mode [ 1745.409763][ T8513] bridge_slave_0: left promiscuous mode [ 1745.409936][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.588259][T16532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1745.588303][T16532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1748.543793][T16549] rdma_rxe: rxe_newlink: failed to add wg2 [ 1751.401800][T16564] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1751.401864][T16564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1754.235507][T16586] rdma_rxe: rxe_newlink: failed to add wg2 [ 1756.869308][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1756.918224][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.922941][T16602] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1756.922984][T16602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1756.956025][ T8513] bond0 (unregistering): Released all slaves [ 1757.778100][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2455'. [ 1758.018249][T16619] ip6tnl1: entered allmulticast mode [ 1760.481316][ T8513] hsr_slave_0: left promiscuous mode [ 1760.590363][ T8513] hsr_slave_1: left promiscuous mode [ 1760.591382][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1760.591410][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1760.954553][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1760.954584][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.139925][T16662] rdma_rxe: rxe_newlink: failed to add wg2 [ 1761.749555][T16666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1761.776377][T16666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1761.790148][T16666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1761.794078][T16666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1761.795049][T16666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1761.875076][ T8513] veth1_macvtap: left promiscuous mode [ 1761.875187][ T8513] veth0_macvtap: left promiscuous mode [ 1761.875445][ T8513] veth1_vlan: left promiscuous mode [ 1761.875646][ T8513] veth0_vlan: left promiscuous mode [ 1762.176955][T16676] overlayfs: missing 'lowerdir' [ 1762.523731][ T5115] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1763.019105][T16666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1763.030445][T16666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1763.033955][T16666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1763.037494][T16666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1763.040035][T16666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1763.817428][ T5861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1763.981130][ T5861] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1763.981159][ T5861] usb 3-1: config 0 has no interface number 0 [ 1763.981207][ T5861] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.981235][ T5861] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.981259][ T5861] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1763.981307][ T5861] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1763.981349][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.985466][ T5861] usb 3-1: config 0 descriptor?? [ 1764.078876][T16666] Bluetooth: hci5: command tx timeout [ 1764.606919][ T5861] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.001F/input/input51 [ 1764.713066][ T5861] uclogic 0003:28BD:0042.001F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 1764.774864][ T5861] usb 3-1: USB disconnect, device number 3 [ 1764.945402][T16713] fido_id[16713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1765.291706][T16666] Bluetooth: hci2: command tx timeout [ 1766.401993][T16666] Bluetooth: hci5: command tx timeout [ 1766.551018][T16728] syz2: rxe_newlink: already configured on wg2 [ 1767.388578][T16666] Bluetooth: hci2: command tx timeout [ 1767.403998][T16732] overlayfs: missing 'lowerdir' [ 1768.350320][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1768.477932][T16666] Bluetooth: hci5: command tx timeout [ 1769.441159][T16666] Bluetooth: hci2: command tx timeout [ 1769.737995][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1770.306212][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2476'. [ 1770.364082][T16756] trusted_key: encrypted_key: insufficient parameters specified [ 1770.405900][T16756] trusted_key: encrypted_key: insufficient parameters specified [ 1770.569601][T16666] Bluetooth: hci5: command tx timeout [ 1771.517336][T16666] Bluetooth: hci2: command tx timeout [ 1772.423791][T16655] bridge: RTM_NEWNEIGH with invalid ether address [ 1772.919272][T16763] rdma_rxe: rxe_newlink: failed to add wg2 [ 1774.106819][T16766] overlayfs: missing 'lowerdir' [ 1774.275325][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 1774.375659][T16775] trusted_key: encrypted_key: insufficient parameters specified [ 1774.554100][T16775] trusted_key: encrypted_key: insufficient parameters specified [ 1774.614865][T16692] wg2 speed is unknown, defaulting to 1000 [ 1776.111275][T16665] wg2 speed is unknown, defaulting to 1000 [ 1776.316262][T16781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2483'. [ 1776.432190][T16781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2483'. [ 1777.123623][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 1778.674871][T16801] rdma_rxe: rxe_newlink: failed to add wg2 [ 1781.309680][T16692] chnl_net:caif_netlink_parms(): no params data found [ 1781.435947][T16818] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2491'. [ 1781.438879][T16818] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2491'. [ 1783.884428][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 1784.226191][T16692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.226470][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.226693][T16692] bridge_slave_0: entered allmulticast mode [ 1784.270531][T16692] bridge_slave_0: entered promiscuous mode [ 1784.274259][T16665] chnl_net:caif_netlink_parms(): no params data found [ 1784.329566][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.329702][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.329969][T16692] bridge_slave_1: entered allmulticast mode [ 1784.355151][T16692] bridge_slave_1: entered promiscuous mode [ 1785.063417][T16692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.123767][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2499'. [ 1785.123804][T16851] netlink: 'syz.5.2499': attribute type 5 has an invalid length. [ 1785.123837][T16851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2499'. [ 1785.144645][T16692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.196477][T16851] geneve2: entered promiscuous mode [ 1785.196508][T16851] geneve2: entered allmulticast mode [ 1785.406247][T16850] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1785.494488][ T8532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1785.805979][ T8532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1785.909972][ T8532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1785.912207][T16692] team0: Port device team_slave_0 added [ 1786.118976][ T8532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1786.315374][T16692] team0: Port device team_slave_1 added [ 1786.315887][T16665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.316101][T16665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.316321][T16665] bridge_slave_0: entered allmulticast mode [ 1786.325842][T16665] bridge_slave_0: entered promiscuous mode [ 1786.459525][T16665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.459690][T16665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.459908][T16665] bridge_slave_1: entered allmulticast mode [ 1786.468354][T16665] bridge_slave_1: entered promiscuous mode [ 1786.957369][T16666] Bluetooth: hci0: command 0x0406 tx timeout [ 1787.123051][T16692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.123071][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.123102][T16692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.242053][T16692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.242072][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.242104][T16692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.263826][T16665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.589811][T16665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.649506][T16665] team0: Port device team_slave_0 added [ 1788.741872][T16665] team0: Port device team_slave_1 added [ 1788.762663][T16692] hsr_slave_0: entered promiscuous mode [ 1788.764087][T16692] hsr_slave_1: entered promiscuous mode [ 1788.765080][T16692] debugfs: 'hsr0' already exists in 'hsr' [ 1788.765107][T16692] Cannot create hsr debugfs directory [ 1788.973393][T16665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.973411][T16665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.973437][T16665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.149877][T16665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.149896][T16665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.149925][T16665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.236063][T16888] overlayfs: missing 'workdir' [ 1789.449048][T16666] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1789.886545][T16665] hsr_slave_0: entered promiscuous mode [ 1789.888108][T16665] hsr_slave_1: entered promiscuous mode [ 1789.889216][T16665] debugfs: 'hsr0' already exists in 'hsr' [ 1789.889246][T16665] Cannot create hsr debugfs directory [ 1790.069237][ T8513] bridge_slave_1: left allmulticast mode [ 1790.069268][ T8513] bridge_slave_1: left promiscuous mode [ 1790.069510][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.138834][ T8513] bridge_slave_0: left allmulticast mode [ 1790.138858][ T8513] bridge_slave_0: left promiscuous mode [ 1790.139071][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.231686][ T8513] bridge_slave_1: left allmulticast mode [ 1790.231712][ T8513] bridge_slave_1: left promiscuous mode [ 1790.231897][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.300040][ T8513] bridge_slave_0: left allmulticast mode [ 1790.300073][ T8513] bridge_slave_0: left promiscuous mode [ 1790.300329][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.173782][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.929975][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.379879][ T8513] bond0 (unregistering): Released all slaves [ 1793.277971][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.368049][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.433236][ T8513] bond0 (unregistering): Released all slaves [ 1794.112871][T16921] overlayfs: missing 'workdir' [ 1795.207075][T16928] netlink: 'syz.2.2524': attribute type 3 has an invalid length. [ 1796.817992][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.818071][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.127368][ T8513] hsr_slave_0: left promiscuous mode [ 1799.147660][ T8513] hsr_slave_1: left promiscuous mode [ 1799.148439][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1799.200220][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1799.557465][ T8513] hsr_slave_0: left promiscuous mode [ 1799.577342][ T8513] hsr_slave_1: left promiscuous mode [ 1799.578068][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1799.631543][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1799.690156][T16948] overlayfs: failed to clone upperpath [ 1800.868212][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1802.058851][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1805.803268][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1806.463346][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1806.473619][T17006] overlayfs: failed to clone upperpath [ 1806.947223][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 1811.616166][T17035] overlayfs: failed to clone upperpath [ 1811.651692][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1811.680447][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1811.710448][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1811.788793][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1811.862382][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1812.270519][T17036] wg2 speed is unknown, defaulting to 1000 [ 1812.781285][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 1814.957292][ T5115] Bluetooth: hci3: command tx timeout [ 1816.859659][T17080] overlayfs: failed to clone lowerpath [ 1817.047363][ T5115] Bluetooth: hci3: command tx timeout [ 1817.609835][T17036] chnl_net:caif_netlink_parms(): no params data found [ 1817.693017][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 1818.466419][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1818.641217][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.641278][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1818.641330][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1818.641355][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.652105][ T10] usb 3-1: config 0 descriptor?? [ 1818.665470][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1818.960901][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.961037][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.961293][T17036] bridge_slave_0: entered allmulticast mode [ 1818.965111][T17036] bridge_slave_0: entered promiscuous mode [ 1818.980432][T16692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1819.118273][ T5115] Bluetooth: hci3: command tx timeout [ 1819.122750][ T8513] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1819.159149][T17108] overlayfs: failed to clone upperpath [ 1819.177369][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.177518][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.177738][T17036] bridge_slave_1: entered allmulticast mode [ 1819.179671][T17036] bridge_slave_1: entered promiscuous mode [ 1819.182967][T16692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1820.606789][T16692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1821.184707][ T31] usb 3-1: USB disconnect, device number 4 [ 1821.197349][ T5115] Bluetooth: hci3: command tx timeout [ 1821.295001][ T8513] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1821.365296][T16692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1821.396092][T17036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.414544][T17036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.531231][ T8513] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1821.842251][ T8513] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1821.871673][T17036] team0: Port device team_slave_0 added [ 1821.879617][T17036] team0: Port device team_slave_1 added [ 1822.084943][T17036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.084962][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.084991][T17036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.138160][T17036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.138179][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.138209][T17036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.799896][T16666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1822.821177][T16666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1822.824587][T16666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1822.825813][T16666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1822.826578][T16666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1822.953861][T17036] hsr_slave_0: entered promiscuous mode [ 1822.954808][T17036] hsr_slave_1: entered promiscuous mode [ 1822.956443][T17036] debugfs: 'hsr0' already exists in 'hsr' [ 1822.956470][T17036] Cannot create hsr debugfs directory [ 1823.557690][T17124] wg2 speed is unknown, defaulting to 1000 [ 1823.602441][ T8513] bridge_slave_1: left allmulticast mode [ 1823.602471][ T8513] bridge_slave_1: left promiscuous mode [ 1823.602726][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.660501][ T8513] bridge_slave_0: left allmulticast mode [ 1823.660531][ T8513] bridge_slave_0: left promiscuous mode [ 1823.660803][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.638095][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1824.857976][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1824.893482][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1824.893665][ T31] usb 3-1: config 0 has no interface number 0 [ 1825.005981][T16666] Bluetooth: hci4: command tx timeout [ 1825.012393][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1825.012439][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.012465][ T31] usb 3-1: Product: syz [ 1825.012483][ T31] usb 3-1: Manufacturer: syz [ 1825.012503][ T31] usb 3-1: SerialNumber: syz [ 1825.030609][ T31] usb 3-1: config 0 descriptor?? [ 1825.036886][ T31] smsc95xx v2.0.0 [ 1825.036904][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1825.048960][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1825.110359][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1825.228312][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1825.231133][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1825.480307][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1825.484165][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1827.043639][ T31] usb 3-1: USB disconnect, device number 5 [ 1827.110588][ T5115] Bluetooth: hci4: command tx timeout [ 1827.677564][ T5115] Bluetooth: hci2: command tx timeout [ 1829.117952][ T5115] Bluetooth: hci4: command tx timeout [ 1829.837887][ T5115] Bluetooth: hci2: command tx timeout [ 1831.161950][ T8513] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1831.162313][ T8513] bond0 (unregistering): Released all slaves [ 1831.197574][ T5115] Bluetooth: hci4: command tx timeout [ 1831.705919][T17156] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2586'. [ 1831.706674][T17156] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2586'. [ 1832.283821][ T5115] Bluetooth: hci2: command tx timeout [ 1832.684913][T17159] overlayfs: failed to clone lowerpath [ 1833.527387][T17134] wg2 speed is unknown, defaulting to 1000 [ 1834.328078][ T5115] Bluetooth: hci2: command tx timeout [ 1835.427605][T17180] overlayfs: failed to clone upperpath [ 1835.890303][T17184] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1835.891151][T17184] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1837.119277][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1837.288628][ T31] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1837.288662][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.288687][ T31] usb 3-1: Product: syz [ 1837.288704][ T31] usb 3-1: Manufacturer: syz [ 1837.288719][ T31] usb 3-1: SerialNumber: syz [ 1837.302615][ T31] usb 3-1: config 0 descriptor?? [ 1837.325693][ T31] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1837.356312][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1837.362324][ T31] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1837.362455][ T31] usb 3-1: media controller created [ 1837.421708][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1837.552823][T17189] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1837.567095][ T31] DVB: Unable to find symbol mt352_attach() [ 1837.629763][ T31] DVB: Unable to find symbol nxt6000_attach() [ 1837.629794][ T31] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1837.646544][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1837.671997][ T31] dvb-usb: schedule remote query interval to 1000 msecs. [ 1837.672024][ T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1837.672453][ T31] dvb-usb: bulk message failed: -22 (7/0) [ 1837.672474][ T31] dvb-usb: bulk message failed: -22 (7/0) [ 1837.694994][ T31] usb 3-1: USB disconnect, device number 6 [ 1837.773977][T17124] chnl_net:caif_netlink_parms(): no params data found [ 1838.019183][ T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1839.487577][ T8513] hsr_slave_0: left promiscuous mode [ 1839.539876][ T8513] hsr_slave_1: left promiscuous mode [ 1839.542735][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1839.585292][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1841.592928][T17222] overlayfs: failed to clone upperpath [ 1843.007848][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1843.219373][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1844.673143][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 1846.990163][T17134] chnl_net:caif_netlink_parms(): no params data found [ 1847.011516][T17036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1847.269429][T17036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1847.662192][T17036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1848.090479][T17036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1848.147508][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.151949][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.152206][T17124] bridge_slave_0: entered allmulticast mode [ 1848.187576][T17124] bridge_slave_0: entered promiscuous mode [ 1848.223762][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.223914][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.224129][T17124] bridge_slave_1: entered allmulticast mode [ 1848.227015][T17124] bridge_slave_1: entered promiscuous mode [ 1850.336859][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.552765][T17277] trusted_key: encrypted_key: insufficient parameters specified [ 1850.983557][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 1851.037551][T17280] trusted_key: encrypted_key: insufficient parameters specified [ 1851.124858][T17281] trusted_key: encrypted_key: insufficient parameters specified [ 1851.300063][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.309423][T17134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.309560][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.309775][T17134] bridge_slave_0: entered allmulticast mode [ 1851.317508][T17134] bridge_slave_0: entered promiscuous mode [ 1851.337263][T17134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.337412][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.337639][T17134] bridge_slave_1: entered allmulticast mode [ 1851.360157][T17134] bridge_slave_1: entered promiscuous mode [ 1853.843097][T17124] team0: Port device team_slave_0 added [ 1853.853455][T17134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1853.859798][T17124] team0: Port device team_slave_1 added [ 1853.868889][T17134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1854.278645][T17318] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2621'. [ 1854.278759][T17318] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.2621'. [ 1856.769496][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1856.769515][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1856.769544][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1856.775534][T17134] team0: Port device team_slave_0 added [ 1856.783363][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.783383][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1856.783416][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.792602][T17134] team0: Port device team_slave_1 added [ 1858.244956][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.245032][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.025248][T17134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.025401][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.025488][T17134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.315643][T17134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.315662][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1859.315691][T17134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.390353][T17342] overlayfs: failed to clone upperpath [ 1859.911781][T17124] hsr_slave_0: entered promiscuous mode [ 1859.913342][T17124] hsr_slave_1: entered promiscuous mode [ 1860.414557][T17134] hsr_slave_0: entered promiscuous mode [ 1860.415588][T17134] hsr_slave_1: entered promiscuous mode [ 1860.416330][T17134] debugfs: 'hsr0' already exists in 'hsr' [ 1860.416355][T17134] Cannot create hsr debugfs directory [ 1862.159623][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1862.279139][T17368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1862.327578][T17368] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1863.365624][T17036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.541402][T17036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.697714][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.697861][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.769788][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.776113][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.874491][ T5115] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1864.145951][ T8513] bridge_slave_1: left allmulticast mode [ 1864.145981][ T8513] bridge_slave_1: left promiscuous mode [ 1864.146250][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.241565][ T8513] bridge_slave_0: left allmulticast mode [ 1864.241598][ T8513] bridge_slave_0: left promiscuous mode [ 1864.241879][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.333529][ T8513] bridge_slave_1: left allmulticast mode [ 1864.333561][ T8513] bridge_slave_1: left promiscuous mode [ 1864.333799][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.419011][ T8513] bridge_slave_0: left allmulticast mode [ 1864.419042][ T8513] bridge_slave_0: left promiscuous mode [ 1864.419319][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.130703][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.229130][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.311876][ T8513] bond0 (unregistering): Released all slaves [ 1865.350051][ T5861] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1865.576151][ T5861] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1865.576185][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.576199][ T5861] usb 3-1: Product: syz [ 1865.576208][ T5861] usb 3-1: Manufacturer: syz [ 1865.576218][ T5861] usb 3-1: SerialNumber: syz [ 1865.584586][ T5861] usb 3-1: config 0 descriptor?? [ 1865.627589][ T5861] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1865.682934][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1865.688283][ T5861] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1865.688346][ T5861] usb 3-1: media controller created [ 1865.762842][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1865.939871][ T5861] DVB: Unable to find symbol mt352_attach() [ 1865.941342][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.033619][ T5861] DVB: Unable to find symbol nxt6000_attach() [ 1866.033636][ T5861] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1866.040159][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input53 [ 1866.044138][ T5861] dvb-usb: schedule remote query interval to 1000 msecs. [ 1866.044162][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1866.044182][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1866.044201][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1866.055646][ T5861] usb 3-1: USB disconnect, device number 7 [ 1866.137976][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.245396][ T8513] bond0 (unregistering): Released all slaves [ 1866.256813][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1866.787032][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1866.906318][ T5115] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1868.365195][T17036] veth0_vlan: entered promiscuous mode [ 1868.418898][T17036] veth1_vlan: entered promiscuous mode [ 1868.604140][T17036] veth0_macvtap: entered promiscuous mode [ 1868.641306][T17036] veth1_macvtap: entered promiscuous mode [ 1868.739306][T17036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1868.775117][T17036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.640660][ T8513] hsr_slave_0: left promiscuous mode [ 1872.668229][ T8513] hsr_slave_1: left promiscuous mode [ 1872.668916][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1872.724127][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1873.027893][ T8513] hsr_slave_0: left promiscuous mode [ 1873.051406][T16666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1873.074687][ T8513] hsr_slave_1: left promiscuous mode [ 1873.076408][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1873.076616][T16666] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1873.082161][T16666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1873.088138][T16666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1873.089098][T16666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1873.149327][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1874.260590][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2660'. [ 1874.400351][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1874.612596][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1875.793339][ T5115] Bluetooth: hci3: command tx timeout [ 1877.001164][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1877.157919][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1877.837758][ T5115] Bluetooth: hci3: command tx timeout [ 1878.300081][T17124] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1878.365129][T17124] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1878.520844][T17124] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1878.586384][T17483] wg2 speed is unknown, defaulting to 1000 [ 1878.673465][T17124] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1879.297757][T17134] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1879.392665][T17134] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1879.570210][T17134] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1879.654001][T17134] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1879.917329][ T5115] Bluetooth: hci3: command tx timeout [ 1881.733758][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 1882.193270][ T5115] Bluetooth: hci3: command tx timeout [ 1882.712752][T17483] chnl_net:caif_netlink_parms(): no params data found [ 1883.183659][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.359839][T17134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.938834][T17483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.939044][T17483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.939304][T17483] bridge_slave_0: entered allmulticast mode [ 1883.942201][T17483] bridge_slave_0: entered promiscuous mode [ 1883.994768][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.994926][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1883.996055][T17483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.996179][T17483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.996376][T17483] bridge_slave_1: entered allmulticast mode [ 1884.034102][T17483] bridge_slave_1: entered promiscuous mode [ 1884.371442][T16666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1884.385350][T16666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1884.387090][T16666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1884.422668][T16666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1884.428807][T16666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1884.671649][T17483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.684454][T17483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.489864][ T5115] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1885.825323][T17483] team0: Port device team_slave_0 added [ 1885.926603][T17483] team0: Port device team_slave_1 added [ 1885.929761][T17563] wg2 speed is unknown, defaulting to 1000 [ 1886.991390][T16666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1887.009528][T16666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1887.010786][T16666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1887.012044][T16666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1887.042580][T16666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1887.101363][ T5115] Bluetooth: hci4: command tx timeout [ 1887.661059][T17483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.661078][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.661102][T17483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.698492][T17483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.698513][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.698556][T17483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.393293][T17483] hsr_slave_0: entered promiscuous mode [ 1888.394725][T17483] hsr_slave_1: entered promiscuous mode [ 1888.395675][T17483] debugfs: 'hsr0' already exists in 'hsr' [ 1888.395701][T17483] Cannot create hsr debugfs directory [ 1888.406697][T17619] wg2 speed is unknown, defaulting to 1000 [ 1889.127280][ T5115] Bluetooth: hci4: command tx timeout [ 1889.127351][ T5115] Bluetooth: hci2: command tx timeout [ 1890.444110][T17563] chnl_net:caif_netlink_parms(): no params data found [ 1890.863984][T17619] chnl_net:caif_netlink_parms(): no params data found [ 1891.197925][T16666] Bluetooth: hci2: command tx timeout [ 1891.197959][T16666] Bluetooth: hci4: command tx timeout [ 1891.345007][T17563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.345145][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.345382][T17563] bridge_slave_0: entered allmulticast mode [ 1891.349903][T17563] bridge_slave_0: entered promiscuous mode [ 1891.387431][T17563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.387536][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.387754][T17563] bridge_slave_1: entered allmulticast mode [ 1891.390085][T17563] bridge_slave_1: entered promiscuous mode [ 1891.849569][T17563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.850902][T17619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.851105][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.851316][T17619] bridge_slave_0: entered allmulticast mode [ 1891.856579][T17619] bridge_slave_0: entered promiscuous mode [ 1891.872637][T17563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.872926][T17619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.873073][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.873287][T17619] bridge_slave_1: entered allmulticast mode [ 1891.876724][T17619] bridge_slave_1: entered promiscuous mode [ 1892.317963][ T8513] bridge_slave_1: left allmulticast mode [ 1892.317995][ T8513] bridge_slave_1: left promiscuous mode [ 1892.318251][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.400843][ T8513] bridge_slave_0: left allmulticast mode [ 1892.400876][ T8513] bridge_slave_0: left promiscuous mode [ 1892.401180][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.502192][ T8513] bridge_slave_1: left allmulticast mode [ 1892.502226][ T8513] bridge_slave_1: left promiscuous mode [ 1892.502481][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.590579][ T8513] bridge_slave_0: left allmulticast mode [ 1892.590608][ T8513] bridge_slave_0: left promiscuous mode [ 1892.590870][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.277357][ T5115] Bluetooth: hci4: command tx timeout [ 1893.277395][ T5115] Bluetooth: hci2: command tx timeout [ 1893.888768][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.968100][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.050875][ T8513] bond0 (unregistering): Released all slaves [ 1895.358359][T16666] Bluetooth: hci2: command tx timeout [ 1895.709735][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.767943][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.791435][ T8513] bond0 (unregistering): Released all slaves [ 1895.833035][T17563] team0: Port device team_slave_0 added [ 1895.836738][T17619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.023831][T17563] team0: Port device team_slave_1 added [ 1896.026682][T17619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.471688][T17563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1896.471707][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.471739][T17563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.476306][T17619] team0: Port device team_slave_0 added [ 1896.488079][T17563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.488097][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.488127][T17563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.508929][T17619] team0: Port device team_slave_1 added [ 1897.029513][T17619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1897.029532][T17619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.029558][T17619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1897.189907][T17619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1897.189922][T17619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1897.189941][T17619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1897.337511][ T8513] hsr_slave_0: left promiscuous mode [ 1897.357609][ T8513] hsr_slave_1: left promiscuous mode [ 1897.359800][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.408320][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.557465][ T8513] hsr_slave_0: left promiscuous mode [ 1897.577319][ T8513] hsr_slave_1: left promiscuous mode [ 1897.578090][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.578110][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.628585][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.628615][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.724910][ T8513] veth1_macvtap: left promiscuous mode [ 1897.724993][ T8513] veth0_macvtap: left promiscuous mode [ 1897.725168][ T8513] veth1_vlan: left promiscuous mode [ 1897.725309][ T8513] veth0_vlan: left promiscuous mode [ 1898.529583][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1898.678306][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1901.467949][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1901.719044][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1904.157404][T17563] hsr_slave_0: entered promiscuous mode [ 1904.159159][T17563] hsr_slave_1: entered promiscuous mode [ 1904.564848][T17619] hsr_slave_0: entered promiscuous mode [ 1904.565903][T17619] hsr_slave_1: entered promiscuous mode [ 1904.566603][T17619] debugfs: 'hsr0' already exists in 'hsr' [ 1904.566627][T17619] Cannot create hsr debugfs directory [ 1905.113024][T17483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1905.204496][T17483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1905.319679][T17483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1905.354662][T17483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1906.156004][T17483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1906.215799][T17483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1906.269289][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.269413][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1906.274176][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.274287][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.688568][T17483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1907.748937][T17483] veth0_vlan: entered promiscuous mode [ 1907.756922][T17483] veth1_vlan: entered promiscuous mode [ 1907.814637][T17483] veth0_macvtap: entered promiscuous mode [ 1907.826558][T17483] veth1_macvtap: entered promiscuous mode [ 1907.859371][T17483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1907.895620][T17483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1907.910793][ T8513] bridge_slave_1: left allmulticast mode [ 1907.910819][ T8513] bridge_slave_1: left promiscuous mode [ 1907.911028][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.999225][ T8513] bridge_slave_0: left allmulticast mode [ 1907.999260][ T8513] bridge_slave_0: left promiscuous mode [ 1907.999532][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.789074][ T8513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1909.888255][ T8513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1909.969842][ T8513] bond0 (unregistering): Released all slaves [ 1910.093053][ T6336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.095303][ T6336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.103514][ T6336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.106240][ T6336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.461766][T17563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1910.540028][T17563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1910.617616][T17563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1910.706910][T17563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1910.887560][ T8513] hsr_slave_0: left promiscuous mode [ 1910.907733][ T8513] hsr_slave_1: left promiscuous mode [ 1910.908683][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1910.958658][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1911.738261][ T8513] team0 (unregistering): Port device team_slave_1 removed [ 1911.898297][ T8513] team0 (unregistering): Port device team_slave_0 removed [ 1913.995609][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.995632][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.132103][T17619] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1914.206859][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.206884][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.219284][T17619] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1914.272006][T17619] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1914.356852][T17619] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1914.802094][T17563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1914.903806][T17619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1914.915457][T17563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1914.943348][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.943554][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.006689][T17619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1915.010186][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.012501][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.082875][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.083028][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.102869][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.103021][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.523296][T17563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.601749][T17619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1916.014889][T17563] veth0_vlan: entered promiscuous mode [ 1916.044001][T17563] veth1_vlan: entered promiscuous mode [ 1916.068979][T17619] veth0_vlan: entered promiscuous mode [ 1916.093030][T17619] veth1_vlan: entered promiscuous mode [ 1916.126136][T17563] veth0_macvtap: entered promiscuous mode [ 1916.138430][T17563] veth1_macvtap: entered promiscuous mode [ 1916.179535][T17619] veth0_macvtap: entered promiscuous mode [ 1916.185929][T17563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.195912][T17619] veth1_macvtap: entered promiscuous mode [ 1916.218327][T17563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.236239][T17619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.236293][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.249413][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.250424][ T68] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.250956][ T68] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.289414][T17619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.332619][ T5990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.335599][ T5990] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.374687][ T5990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.376444][ T5990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.610218][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.610239][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.800332][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.800355][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.864797][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.864820][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.962087][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.962111][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.264544][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1266'. [ 1919.684291][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.684392][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.121539][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.121642][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1998.557719][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 2008.797378][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 2013.924244][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 2042.564084][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.564160][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.007693][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.007784][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.443015][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.443116][ T1319] ieee802154 phy1 wpan1: encryption failed: -22