last executing test programs: 9m39.801533488s ago: executing program 2 (id=23): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000, 0xa00}]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000400000000000eb13000000180001801400020073797a5f7475"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 9m37.729609151s ago: executing program 2 (id=25): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') epoll_create1(0x0) utime(0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a']) 9m37.339649687s ago: executing program 2 (id=28): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x2c000084) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r6, r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) 9m34.795942391s ago: executing program 2 (id=32): shmctl$IPC_RMID(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 9m30.438524594s ago: executing program 2 (id=43): syz_emit_ethernet(0x52, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xffffffffffffff4b}}], 0x5df, 0x2, 0x0) 9m15.792890721s ago: executing program 2 (id=63): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0x3}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$inet6(0xa, 0x4, 0x9) 9m6.021723151s ago: executing program 3 (id=77): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() creat(0x0, 0x14b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000400000000000eb13000000180001801400020073797a5f7475"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012ed02febfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a006500000017ffffff7e040000000000007b0300fe000000006d04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a86949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 9m4.276384995s ago: executing program 3 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 9m1.596866379s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 8m59.965908652s ago: executing program 32 (id=63): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0x3}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$inet6(0xa, 0x4, 0x9) 8m58.374651038s ago: executing program 3 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r7 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) 8m55.444739537s ago: executing program 3 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 8m54.74634316s ago: executing program 3 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 8m39.494405214s ago: executing program 33 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 7m56.660706547s ago: executing program 0 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x0, 0x0, 0x0, 0x4b, 0xf2, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4}) syz_usb_connect(0x3, 0x3b, 0x0, 0x0) 7m52.845002527s ago: executing program 0 (id=164): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xda, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 7m50.776040332s ago: executing program 0 (id=167): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 7m49.448889554s ago: executing program 0 (id=168): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB], 0x2c}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 7m48.076062882s ago: executing program 0 (id=170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, 0x0) socket$inet6(0xa, 0x4, 0x9) 7m45.368489237s ago: executing program 0 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 7m28.517156806s ago: executing program 34 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 2m1.286200967s ago: executing program 1 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="140000001c00ffff"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYBLOB="0000000000084f497d3f37caf4bfffff00"/29, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791850000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m59.875386256s ago: executing program 1 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1m58.682153865s ago: executing program 1 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffd}, 0xd) clock_nanosleep(0xfffffff2, 0x1, &(0x7f00000003c0)={0x77359400}, 0xfffffffffffffffe) 1m57.394165626s ago: executing program 1 (id=587): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m56.193046533s ago: executing program 1 (id=588): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 1m52.481192327s ago: executing program 1 (id=591): syz_open_procfs(0x0, 0x0) socket(0x2, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) 1m35.840033852s ago: executing program 35 (id=591): syz_open_procfs(0x0, 0x0) socket(0x2, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) 3.598940743s ago: executing program 4 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x3, 0xfffff800) prlimit64(r2, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r5, r6, 0x0, 0x20000023896) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESHEX=r8], 0x0}, 0x94) 2.261021874s ago: executing program 4 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xda, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 2.160541579s ago: executing program 4 (id=682): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300000000000000000002"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.183299048s ago: executing program 4 (id=683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7021e513b030000000000850000008600e739ecf7c8ab749c338f15a5ad3684355d32b079c95b8f4c8e11a172764ed6c4c13f9302f0a36b4f744a76e3159d69c2e1b20f4a2c80c42f5eef3ef054b6025d4ccf35720bbe113ba96e93cfc927fa23c6f32d4f84ea8d44f1cb993cd247c080ea74ae68dcf64066e1bca51d4e31891916cac4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc050}, 0x840) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/243, &(0x7f0000000740)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0x0, 0x15, &(0x7f00000006c0)=""/21}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 941.941761ms ago: executing program 4 (id=684): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 0s ago: executing program 4 (id=685): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdff09ff000600"/20, @ANYRES32=0x0, @ANYRES32], 0x50) kernel console output (not intermixed with test programs): pact the performance. Setting the MTU to 1532 would solve the problem. [ 86.160767][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.248509][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.248524][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.248547][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.258953][ T5797] hsr_slave_0: entered promiscuous mode [ 86.261170][ T5797] hsr_slave_1: entered promiscuous mode [ 86.264028][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.264041][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.264063][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.290056][ T5805] hsr_slave_0: entered promiscuous mode [ 86.291390][ T5805] hsr_slave_1: entered promiscuous mode [ 86.292521][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 86.292636][ T5805] Cannot create hsr debugfs directory [ 86.358393][ T61] Bluetooth: hci0: command tx timeout [ 86.587870][ T61] Bluetooth: hci1: command tx timeout [ 86.587891][ T5117] Bluetooth: hci2: command tx timeout [ 86.667834][ T5117] Bluetooth: hci3: command tx timeout [ 86.747758][ T5117] Bluetooth: hci4: command tx timeout [ 86.851088][ T10] cfg80211: failed to load regulatory.db [ 87.165410][ T5802] hsr_slave_0: entered promiscuous mode [ 87.166298][ T5802] hsr_slave_1: entered promiscuous mode [ 87.166835][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 87.166856][ T5802] Cannot create hsr debugfs directory [ 87.176003][ T5806] hsr_slave_0: entered promiscuous mode [ 87.177379][ T5806] hsr_slave_1: entered promiscuous mode [ 87.179174][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 87.179197][ T5806] Cannot create hsr debugfs directory [ 87.252311][ T5808] hsr_slave_0: entered promiscuous mode [ 87.253162][ T5808] hsr_slave_1: entered promiscuous mode [ 87.253709][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 87.253730][ T5808] Cannot create hsr debugfs directory [ 88.391333][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.426929][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.437704][ T5117] Bluetooth: hci0: command tx timeout [ 88.442167][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.494326][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.593239][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.625382][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.663694][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.667792][ T5117] Bluetooth: hci1: command tx timeout [ 88.667822][ T5117] Bluetooth: hci2: command tx timeout [ 88.731467][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.747818][ T61] Bluetooth: hci3: command tx timeout [ 88.829407][ T61] Bluetooth: hci4: command tx timeout [ 88.855811][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.893861][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.927302][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.977358][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.093576][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.141360][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.177743][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.228969][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.358765][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.364686][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.406933][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.447518][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.486180][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.564539][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.611476][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.614356][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.614916][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.661735][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.661896][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.720095][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.747452][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.766364][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.766487][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.796685][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.796813][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.850513][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.880566][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.890556][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.890750][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.923196][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.923308][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.023144][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.063962][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.079242][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.079457][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.143024][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.143210][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.225375][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.269910][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.270049][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.323248][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.323403][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.411851][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.552474][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.709896][ T5797] veth0_vlan: entered promiscuous mode [ 90.760682][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.763128][ T5797] veth1_vlan: entered promiscuous mode [ 90.823087][ T5802] veth0_vlan: entered promiscuous mode [ 90.875173][ T5802] veth1_vlan: entered promiscuous mode [ 90.937101][ T5797] veth0_macvtap: entered promiscuous mode [ 90.963122][ T5797] veth1_macvtap: entered promiscuous mode [ 91.000398][ T5806] veth0_vlan: entered promiscuous mode [ 91.031186][ T5802] veth0_macvtap: entered promiscuous mode [ 91.037262][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.052301][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.056441][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.069004][ T5806] veth1_vlan: entered promiscuous mode [ 91.089419][ T5802] veth1_macvtap: entered promiscuous mode [ 91.099966][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.145700][ T1184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.160832][ T1184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.174772][ T1184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.188540][ T1184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.196211][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.234815][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.343996][ T1184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.372897][ T1184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.374963][ T5806] veth0_macvtap: entered promiscuous mode [ 91.394254][ T1184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.464342][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.494760][ T5806] veth1_macvtap: entered promiscuous mode [ 91.573172][ T5808] veth0_vlan: entered promiscuous mode [ 91.721333][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.721360][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.756810][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.759891][ T5808] veth1_vlan: entered promiscuous mode [ 91.796799][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.833065][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.833085][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.866408][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.875474][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895088][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.915599][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.939276][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939295][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.940335][ T5805] veth0_vlan: entered promiscuous mode [ 92.044113][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.044132][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.096308][ T5805] veth1_vlan: entered promiscuous mode [ 92.120293][ T5808] veth0_macvtap: entered promiscuous mode [ 92.188515][ T5808] veth1_macvtap: entered promiscuous mode [ 93.588262][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.588281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.610666][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.711571][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.718516][ T5805] veth0_macvtap: entered promiscuous mode [ 93.730572][ T1475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.731779][ T1475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.734712][ T1475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.735267][ T5805] veth1_macvtap: entered promiscuous mode [ 93.737591][ T1475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.723599][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.723619][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.961558][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.122495][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.192286][ T1184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192498][ T1184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192692][ T1184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.255084][ T1184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340776][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.340790][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.577915][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.595342][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.595361][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.617604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.781437][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 96.786588][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.786609][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.841164][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.858227][ T5810] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 96.858254][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.858272][ T5810] usb 1-1: Product: syz [ 96.858285][ T5810] usb 1-1: Manufacturer: syz [ 96.858296][ T5810] usb 1-1: SerialNumber: syz [ 97.069693][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.069712][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.164383][ T5810] usb 1-1: config 0 descriptor?? [ 98.507775][ T5810] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 100.397005][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.399492][ T5810] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 100.400205][ T5810] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 100.432468][ T5810] usb 1-1: USB disconnect, device number 2 [ 100.938268][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 101.190616][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.378536][ T5903] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 101.378573][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.378687][ T5903] usb 4-1: Product: syz [ 101.378702][ T5903] usb 4-1: Manufacturer: syz [ 101.378769][ T5903] usb 4-1: SerialNumber: syz [ 101.403518][ T5903] usb 4-1: config 0 descriptor?? [ 103.028678][ T5903] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 103.028722][ T5903] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 103.118858][ T5903] usb 4-1: USB disconnect, device number 2 [ 103.414250][ T5980] bridge1: entered promiscuous mode [ 103.414268][ T5980] bridge1: entered allmulticast mode [ 103.416069][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.479255][ T5980] team0: Port device bridge1 added [ 103.590761][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 103.595852][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.612180][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.612208][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.612226][ T10] usb 3-1: Product: syz [ 103.612239][ T10] usb 3-1: Manufacturer: syz [ 103.612251][ T10] usb 3-1: SerialNumber: syz [ 103.656198][ T10] usb 3-1: config 0 descriptor?? [ 104.011316][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.209627][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.762548][ T10] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 104.762594][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 104.823386][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.893706][ T44] usb 3-1: USB disconnect, device number 2 [ 105.436639][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.087608][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.180785][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.288872][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.554182][ T6003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.675000][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.448546][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.691089][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.613772][ T6039] bridge1: entered promiscuous mode [ 112.613793][ T6039] bridge1: entered allmulticast mode [ 112.631521][ T6039] team0: Port device bridge1 added [ 115.107583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.367640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.523022][ T6118] bridge1: entered promiscuous mode [ 123.523040][ T6118] bridge1: entered allmulticast mode [ 124.517600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.560279][ T6118] team0: Port device bridge1 added [ 124.937606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.937703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.680999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.681042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.681076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.681108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.076623][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.736034][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.111554][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.236156][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.621612][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.942961][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.843088][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.176257][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.318354][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.587971][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.929665][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929723][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.983623][ T6173] bridge1: entered promiscuous mode [ 132.983648][ T6173] bridge1: entered allmulticast mode [ 132.990158][ T6173] team0: Port device bridge1 added [ 150.633799][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.814287][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.824989][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.826513][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.829854][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.830669][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.173628][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.587564][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.496539][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.754137][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.940115][ T61] Bluetooth: hci5: command tx timeout [ 153.197940][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.577112][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.973662][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.671546][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.674931][ T61] Bluetooth: hci5: command tx timeout [ 157.339150][ T6297] infiniband syz2: set active [ 157.339169][ T6297] infiniband syz2: added veth1_to_team [ 157.341236][ T6297] syz2: rxe_create_cq: returned err = -12 [ 157.341338][ T6297] infiniband syz2: Couldn't create ib_mad CQ [ 157.341450][ T6297] infiniband syz2: Couldn't open port 1 [ 157.375736][ T6297] RDS/IB: syz2: added [ 157.376502][ T6297] smc: adding ib device syz2 with port count 1 [ 157.376729][ T6297] smc: ib device syz2 port 1 has no pnetid [ 157.707757][ T61] Bluetooth: hci5: command tx timeout [ 158.643502][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 159.913051][ T61] Bluetooth: hci5: command tx timeout [ 161.065330][ T172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.540896][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'. [ 163.862052][ T172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.983391][ T6344] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 167.847245][ T172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.921016][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.942292][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.944565][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.946206][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.947280][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.576471][ T172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.079512][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.080203][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.080431][ T6253] bridge_slave_0: entered allmulticast mode [ 171.087334][ T6253] bridge_slave_0: entered promiscuous mode [ 171.152387][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.158246][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.158480][ T6253] bridge_slave_1: entered allmulticast mode [ 171.161107][ T6253] bridge_slave_1: entered promiscuous mode [ 172.892994][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.897231][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.299470][ T5117] Bluetooth: hci1: command tx timeout [ 175.340439][ T6385] syz2: rxe_newlink: already configured on veth1_to_team [ 176.506327][ T5117] Bluetooth: hci1: command tx timeout [ 178.507637][ T5117] Bluetooth: hci1: command tx timeout [ 179.682761][ T6253] team0: Port device team_slave_0 added [ 179.811586][ T6253] team0: Port device team_slave_1 added [ 180.606622][ T5117] Bluetooth: hci1: command tx timeout [ 182.478745][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.478761][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.478784][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.778863][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.778879][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.778902][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.383978][ T172] bridge_slave_1: left allmulticast mode [ 184.384106][ T172] bridge_slave_1: left promiscuous mode [ 184.385892][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.372932][ T172] bridge_slave_0: left allmulticast mode [ 185.372963][ T172] bridge_slave_0: left promiscuous mode [ 185.379665][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.082224][ T172] team0: Port device bridge1 removed [ 192.058519][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.248163][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.522262][ T172] bond0 (unregistering): Released all slaves [ 193.685652][ T6253] hsr_slave_0: entered promiscuous mode [ 193.688563][ T6253] hsr_slave_1: entered promiscuous mode [ 193.689577][ T6253] debugfs: 'hsr0' already exists in 'hsr' [ 193.689599][ T6253] Cannot create hsr debugfs directory [ 194.564243][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.564313][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.346610][ T6530] netlink: 'syz.1.153': attribute type 3 has an invalid length. [ 206.968597][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 206.968633][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 208.003912][ T172] hsr_slave_0: left promiscuous mode [ 208.087738][ T172] hsr_slave_1: left promiscuous mode [ 208.091805][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.091902][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.322657][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 209.338226][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.338252][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.674959][ T172] veth1_macvtap: left promiscuous mode [ 209.675208][ T172] veth0_macvtap: left promiscuous mode [ 209.675504][ T172] veth1_vlan: left promiscuous mode [ 209.675822][ T172] veth0_vlan: left promiscuous mode [ 211.099750][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.105997][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.110702][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.112091][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.118011][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.318442][ T5800] Bluetooth: hci4: command tx timeout [ 215.390649][ T5800] Bluetooth: hci4: command tx timeout [ 218.066955][ T5117] Bluetooth: hci4: command tx timeout [ 220.112384][ T5117] Bluetooth: hci4: command tx timeout [ 220.766486][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 220.867490][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.175'. [ 220.916492][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 220.921353][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.921379][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.921398][ T10] usb 2-1: config 0 has no interface number 0 [ 220.921472][ T10] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.953264][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.953293][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.953315][ T10] usb 2-1: Product: syz [ 220.953328][ T10] usb 2-1: Manufacturer: syz [ 220.953353][ T10] usb 2-1: SerialNumber: syz [ 220.999358][ T10] usb 2-1: config 0 descriptor?? [ 221.023609][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 222.051732][ T6627] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.197078][ T172] team0 (unregistering): Port device team_slave_1 removed [ 222.437230][ T172] team0 (unregistering): Port device team_slave_0 removed [ 224.217126][ T10] usb 2-1: qt2_attach - failed to power on unit: -71 [ 224.217321][ T10] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 224.254764][ T10] usb 2-1: USB disconnect, device number 2 [ 224.549754][ T1566] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.481203][ T1566] usb 5-1: Using ep0 maxpacket: 32 [ 225.483461][ T1566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.483483][ T1566] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.486534][ T1566] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 225.486560][ T1566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.486579][ T1566] usb 5-1: Product: syz [ 225.486593][ T1566] usb 5-1: Manufacturer: syz [ 225.486607][ T1566] usb 5-1: SerialNumber: syz [ 225.508555][ T1566] usb 5-1: config 0 descriptor?? [ 228.815745][ T10] usb 5-1: USB disconnect, device number 2 [ 228.970883][ T37] audit: type=1326 audit(1761143676.773:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846665][ T37] audit: type=1326 audit(1761143676.773:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846714][ T37] audit: type=1326 audit(1761143676.873:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846750][ T37] audit: type=1326 audit(1761143676.983:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846787][ T37] audit: type=1326 audit(1761143676.993:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846822][ T37] audit: type=1326 audit(1761143677.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846857][ T37] audit: type=1326 audit(1761143677.043:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.846892][ T37] audit: type=1326 audit(1761143677.063:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 229.976323][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.988969][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.005695][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.016238][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.058228][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.080753][ T37] audit: type=1326 audit(1761143677.884:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f499768efc9 code=0x7ffc0000 [ 230.080803][ T37] audit: type=1326 audit(1761143677.884:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 232.251766][ T5800] Bluetooth: hci6: command tx timeout [ 235.779482][ T5800] Bluetooth: hci6: command tx timeout [ 237.898500][ T5800] Bluetooth: hci6: command tx timeout [ 239.650612][ T5800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.653149][ T5800] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.677273][ T5800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.680900][ T5800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.682673][ T5800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.946970][ T5800] Bluetooth: hci6: command tx timeout [ 241.786380][ T5800] Bluetooth: hci7: command tx timeout [ 244.162215][ T5800] Bluetooth: hci7: command tx timeout [ 246.183400][ T5800] Bluetooth: hci7: command tx timeout [ 246.622484][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.209423][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.254446][ T6571] chnl_net:caif_netlink_parms(): no params data found [ 248.266131][ T5800] Bluetooth: hci7: command tx timeout [ 248.748581][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.286427][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.841830][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.842007][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.842210][ T6571] bridge_slave_0: entered allmulticast mode [ 252.846438][ T6571] bridge_slave_0: entered promiscuous mode [ 252.859674][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 252.877628][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.877821][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.878018][ T6571] bridge_slave_1: entered allmulticast mode [ 252.881250][ T6571] bridge_slave_1: entered promiscuous mode [ 254.311209][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.407014][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.866658][ T6711] chnl_net:caif_netlink_parms(): no params data found [ 254.884467][ T6571] team0: Port device team_slave_0 added [ 255.143375][ T6571] team0: Port device team_slave_1 added [ 255.145719][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.145855][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.146073][ T6659] bridge_slave_0: entered allmulticast mode [ 255.149957][ T6659] bridge_slave_0: entered promiscuous mode [ 255.823390][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823462][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003703][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.003904][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.004125][ T6659] bridge_slave_1: entered allmulticast mode [ 256.183286][ T6659] bridge_slave_1: entered promiscuous mode [ 259.567345][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.567361][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.567384][ T6571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.686039][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.686055][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.686079][ T6571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.692992][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.006536][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.211345][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.366350][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.466656][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.466793][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.467024][ T6711] bridge_slave_0: entered allmulticast mode [ 263.511502][ T6711] bridge_slave_0: entered promiscuous mode [ 263.539046][ T6659] team0: Port device team_slave_0 added [ 264.780566][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.780792][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.781090][ T6711] bridge_slave_1: entered allmulticast mode [ 264.785786][ T6711] bridge_slave_1: entered promiscuous mode [ 269.062567][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.265376][ T6659] team0: Port device team_slave_1 added [ 269.293103][ T6571] hsr_slave_0: entered promiscuous mode [ 269.294366][ T6571] hsr_slave_1: entered promiscuous mode [ 269.295496][ T6571] debugfs: 'hsr0' already exists in 'hsr' [ 269.295519][ T6571] Cannot create hsr debugfs directory [ 269.554802][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.559339][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.581208][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.583206][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.584044][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.549706][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.297496][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.661643][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.683111][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.721845][ T5117] Bluetooth: hci1: command tx timeout [ 271.776272][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.993901][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.041608][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.206359][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.886960][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.183122][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.314489][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.882721][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.154529][ T5117] Bluetooth: hci1: command tx timeout [ 274.354142][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.130295][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.270528][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.270541][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.270554][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.284966][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.459307][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.459322][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.459346][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.179957][ T5117] Bluetooth: hci1: command tx timeout [ 277.232740][ T6711] team0: Port device team_slave_0 added [ 277.984192][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.268237][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.275993][ T5117] Bluetooth: hci1: command tx timeout [ 278.810603][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.904287][ T6711] team0: Port device team_slave_1 added [ 279.169972][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.195459][ T6659] hsr_slave_0: entered promiscuous mode [ 279.196851][ T6659] hsr_slave_1: entered promiscuous mode [ 279.197745][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 279.197767][ T6659] Cannot create hsr debugfs directory [ 279.495570][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.495586][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.495609][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.696126][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.843375][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.137217][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.637209][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.726141][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.726157][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.726182][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.982122][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.963060][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.155780][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.250894][ T12] bridge_slave_1: left allmulticast mode [ 282.250914][ T12] bridge_slave_1: left promiscuous mode [ 282.251070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.309959][ T12] bridge_slave_0: left allmulticast mode [ 282.309978][ T12] bridge_slave_0: left promiscuous mode [ 282.310157][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.375088][ T12] bridge_slave_1: left allmulticast mode [ 282.375107][ T12] bridge_slave_1: left promiscuous mode [ 282.375287][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.430395][ T12] bridge_slave_0: left allmulticast mode [ 282.430414][ T12] bridge_slave_0: left promiscuous mode [ 282.432058][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.513103][ T12] bridge_slave_1: left allmulticast mode [ 282.513123][ T12] bridge_slave_1: left promiscuous mode [ 282.513273][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.590052][ T12] bridge_slave_0: left allmulticast mode [ 282.590070][ T12] bridge_slave_0: left promiscuous mode [ 282.590226][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.011381][ T12] team0: Port device bridge1 removed [ 289.123412][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.155869][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.157175][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.176437][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.189819][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.578890][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.951546][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.675913][ T12] bond0 (unregistering): Released all slaves [ 291.788024][ T5800] Bluetooth: hci3: command tx timeout [ 292.472633][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.510480][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.580585][ T12] bond0 (unregistering): Released all slaves [ 293.858084][ T5800] Bluetooth: hci3: command tx timeout [ 294.362176][ T12] bond0 (unregistering): Released all slaves [ 295.508176][ T12] team0: Port device bridge1 removed [ 296.082839][ T5800] Bluetooth: hci3: command tx timeout [ 299.786906][ T5800] Bluetooth: hci3: command tx timeout [ 302.307815][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.439650][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.459465][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.460535][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.462059][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.462846][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.497972][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.553222][ T12] bond0 (unregistering): Released all slaves [ 304.576333][ T5800] Bluetooth: hci4: command tx timeout [ 305.206544][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 305.257651][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.656094][ T5800] Bluetooth: hci4: command tx timeout [ 307.095605][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.045001][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.356244][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.742136][ T5800] Bluetooth: hci4: command tx timeout [ 309.447950][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.817617][ T5800] Bluetooth: hci4: command tx timeout [ 314.486376][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.486483][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.486679][ T6898] bridge_slave_0: entered allmulticast mode [ 314.493707][ T6898] bridge_slave_0: entered promiscuous mode [ 314.510073][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.510285][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.510494][ T6898] bridge_slave_1: entered allmulticast mode [ 314.513315][ T6898] bridge_slave_1: entered promiscuous mode [ 314.996769][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.038392][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.140784][ T6898] team0: Port device team_slave_0 added [ 316.265901][ T6898] team0: Port device team_slave_1 added [ 317.147571][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.147588][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.147611][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.149420][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 317.227517][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227589][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.293149][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.293165][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.293190][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.594833][ T12] hsr_slave_0: left promiscuous mode [ 318.614908][ T12] hsr_slave_1: left promiscuous mode [ 318.616006][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.616031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.656886][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.656914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.794685][ T12] hsr_slave_0: left promiscuous mode [ 318.815233][ T12] hsr_slave_1: left promiscuous mode [ 318.816329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.855698][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.994691][ T12] hsr_slave_0: left promiscuous mode [ 319.014872][ T12] hsr_slave_1: left promiscuous mode [ 319.015980][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.016004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.055887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.055914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.317479][ T12] veth1_macvtap: left promiscuous mode [ 320.317590][ T12] veth0_macvtap: left promiscuous mode [ 320.317890][ T12] veth1_vlan: left promiscuous mode [ 320.318074][ T12] veth0_vlan: left promiscuous mode [ 322.284407][ T12] veth1_macvtap: left promiscuous mode [ 322.284470][ T12] veth0_macvtap: left promiscuous mode [ 322.284611][ T12] veth1_vlan: left promiscuous mode [ 322.284710][ T12] veth0_vlan: left promiscuous mode [ 330.916709][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.919039][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.926690][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.929347][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.930392][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.640994][ T5117] Bluetooth: hci5: command tx timeout [ 335.737755][ T5117] Bluetooth: hci5: command tx timeout [ 337.876831][ T5117] Bluetooth: hci5: command tx timeout [ 340.005431][ T5117] Bluetooth: hci5: command tx timeout [ 343.731670][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 344.751545][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 344.752272][ T12] team0 (unregistering): Port device team_slave_1 removed [ 344.754856][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 344.754879][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.754897][ T10] usb 5-1: config 0 has no interface number 0 [ 344.754943][ T10] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.758748][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 344.758771][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.758787][ T10] usb 5-1: Product: syz [ 344.758800][ T10] usb 5-1: Manufacturer: syz [ 344.758810][ T10] usb 5-1: SerialNumber: syz [ 344.862327][ T10] usb 5-1: config 0 descriptor?? [ 344.866300][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 344.926902][ T1475] smc: removing ib device syz2 [ 345.054657][ T12] team0 (unregistering): Port device team_slave_0 removed [ 347.431825][ T10] usb 5-1: qt2_attach - failed to power on unit: -71 [ 347.431991][ T10] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 347.487851][ T10] usb 5-1: USB disconnect, device number 3 [ 349.603656][ T5117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.607138][ T5117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.608216][ T5117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.609677][ T5117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.610441][ T5117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.690875][ T5117] Bluetooth: hci6: command tx timeout [ 353.770530][ T5117] Bluetooth: hci6: command tx timeout [ 353.852771][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 354.270440][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 354.287035][ T44] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 354.287060][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.287077][ T44] usb 2-1: config 0 has no interface number 0 [ 354.288533][ T44] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.292850][ T44] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 354.292876][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.292894][ T44] usb 2-1: Product: syz [ 354.292907][ T44] usb 2-1: Manufacturer: syz [ 354.292920][ T44] usb 2-1: SerialNumber: syz [ 354.299326][ T44] usb 2-1: config 0 descriptor?? [ 354.313304][ T44] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 354.411096][ T12] team0 (unregistering): Port device team_slave_1 removed [ 354.992339][ T12] team0 (unregistering): Port device team_slave_0 removed [ 356.554800][ T5117] Bluetooth: hci6: command tx timeout [ 358.570055][ T5117] Bluetooth: hci6: command tx timeout [ 358.579869][ T44] usb 2-1: qt2_attach - failed to power on unit: -71 [ 358.580034][ T44] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 358.652111][ T44] usb 2-1: USB disconnect, device number 3 [ 358.707534][ T7467] Zero length message leads to an empty skb [ 362.490636][ T5800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.499117][ T5800] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.515194][ T5800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.530247][ T5800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.538260][ T5800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.143752][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.178020][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.078683][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.129949][ T5117] Bluetooth: hci7: command tx timeout [ 365.168385][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.925858][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.390574][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.568805][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.569253][ T5117] Bluetooth: hci7: command tx timeout [ 367.668455][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.171251][ T12] team0 (unregistering): Port device team_slave_1 removed [ 369.539348][ T12] team0 (unregistering): Port device team_slave_0 removed [ 370.328421][ T5117] Bluetooth: hci7: command tx timeout [ 372.432822][ T5117] Bluetooth: hci7: command tx timeout [ 379.051478][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.051651][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.186897][ T31] syz2: Port: 1 Link DOWN [ 392.352087][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.355173][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.370654][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.381880][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.382744][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.177577][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 395.193191][ T5800] Bluetooth: hci1: command tx timeout [ 395.308159][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 395.639410][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.655184][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.170354][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.205366][ T5800] Bluetooth: hci1: command tx timeout [ 397.501348][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.414723][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.285238][ T5800] Bluetooth: hci1: command tx timeout [ 399.844309][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.163694][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.163868][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.164096][ T7426] bridge_slave_0: entered allmulticast mode [ 400.176048][ T7426] bridge_slave_0: entered promiscuous mode [ 400.426988][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.365572][ T5800] Bluetooth: hci1: command tx timeout [ 401.574037][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.574172][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.588067][ T7426] bridge_slave_1: entered allmulticast mode [ 401.591126][ T7426] bridge_slave_1: entered promiscuous mode [ 401.592722][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.592842][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.593022][ T7487] bridge_slave_0: entered allmulticast mode [ 401.602364][ T7487] bridge_slave_0: entered promiscuous mode [ 401.766625][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.766757][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.766970][ T7487] bridge_slave_1: entered allmulticast mode [ 401.784317][ T7487] bridge_slave_1: entered promiscuous mode [ 404.846888][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.851440][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.855629][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.895013][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 406.940921][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.522380][ T7426] team0: Port device team_slave_0 added [ 408.930010][ T7426] team0: Port device team_slave_1 added [ 408.972834][ T7487] team0: Port device team_slave_0 added [ 409.235086][ T7487] team0: Port device team_slave_1 added [ 409.877591][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.877607][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.877631][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.235633][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.277089][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.277104][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.277128][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.277863][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.278065][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.278272][ T7672] bridge_slave_0: entered allmulticast mode [ 411.281089][ T7672] bridge_slave_0: entered promiscuous mode [ 411.294700][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.303846][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.305441][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.312360][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.313265][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.307913][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.308053][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.308263][ T7672] bridge_slave_1: entered allmulticast mode [ 412.315412][ T7672] bridge_slave_1: entered promiscuous mode [ 412.602173][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.102362][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.625066][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.035125][ T5117] Bluetooth: hci3: command tx timeout [ 417.929335][ T5117] Bluetooth: hci3: command tx timeout [ 417.945160][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.522459][ T7859] netlink: 'syz.1.416': attribute type 3 has an invalid length. [ 419.441232][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.522405][ T5117] Bluetooth: hci3: command tx timeout [ 420.549167][ T7487] hsr_slave_0: entered promiscuous mode [ 420.551481][ T7487] hsr_slave_1: entered promiscuous mode [ 420.553360][ T7487] debugfs: 'hsr0' already exists in 'hsr' [ 420.553383][ T7487] Cannot create hsr debugfs directory [ 422.562633][ T5117] Bluetooth: hci3: command tx timeout [ 422.770096][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.786154][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.830762][ T7672] team0: Port device team_slave_0 added [ 422.851942][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.853880][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.854775][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.987260][ T7672] team0: Port device team_slave_1 added [ 423.124712][ T12] bridge_slave_1: left allmulticast mode [ 423.124739][ T12] bridge_slave_1: left promiscuous mode [ 423.125033][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.195036][ T12] bridge_slave_0: left allmulticast mode [ 423.195085][ T12] bridge_slave_0: left promiscuous mode [ 423.195340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.430191][ T12] bridge_slave_1: left allmulticast mode [ 423.430219][ T12] bridge_slave_1: left promiscuous mode [ 423.430487][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.503148][ T12] bridge_slave_0: left allmulticast mode [ 423.503167][ T12] bridge_slave_0: left promiscuous mode [ 423.503323][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.611746][ T12] bridge_slave_1: left allmulticast mode [ 423.611773][ T12] bridge_slave_1: left promiscuous mode [ 423.612011][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.727639][ T12] bridge_slave_0: left allmulticast mode [ 423.727668][ T12] bridge_slave_0: left promiscuous mode [ 423.727905][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.820054][ T12] bridge_slave_1: left allmulticast mode [ 423.820081][ T12] bridge_slave_1: left promiscuous mode [ 423.820339][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.902669][ T12] bridge_slave_0: left allmulticast mode [ 423.902696][ T12] bridge_slave_0: left promiscuous mode [ 423.903062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.650372][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.773621][ T12] bond0 (unregistering): Released all slaves [ 424.892346][ T5800] Bluetooth: hci4: command tx timeout [ 424.941592][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.231902][ T12] bond0 (unregistering): Released all slaves [ 425.352677][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.545880][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.846474][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.045353][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.062349][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.246156][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.011427][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.047459][ T5800] Bluetooth: hci4: command tx timeout [ 427.098891][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.112921][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.183918][ T12] bond0 (unregistering): Released all slaves [ 427.516458][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.603023][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.783619][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.876576][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.329860][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.560011][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.618808][ T12] bond0 (unregistering): Released all slaves [ 428.633166][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.121716][ T5800] Bluetooth: hci4: command tx timeout [ 430.453750][ T7939] overlayfs: missing 'lowerdir' [ 431.266169][ T5800] Bluetooth: hci4: command tx timeout [ 431.592111][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.672162][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.741606][ T12] bond0 (unregistering): Released all slaves [ 431.972154][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.043373][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.106369][ T12] bond0 (unregistering): Released all slaves [ 432.587457][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.587472][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.587496][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.660408][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.660424][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.660448][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.484452][ T7672] hsr_slave_0: entered promiscuous mode [ 435.485855][ T7672] hsr_slave_1: entered promiscuous mode [ 435.486762][ T7672] debugfs: 'hsr0' already exists in 'hsr' [ 435.486783][ T7672] Cannot create hsr debugfs directory [ 437.701574][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.821502][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.190768][ T12] hsr_slave_0: left promiscuous mode [ 438.221060][ T12] hsr_slave_1: left promiscuous mode [ 438.222038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.261680][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.301668][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.341929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.405459][ T12] hsr_slave_0: left promiscuous mode [ 438.420806][ T12] hsr_slave_1: left promiscuous mode [ 438.421866][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.461481][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.111266][ T12] team0 (unregistering): Port device team_slave_1 removed [ 439.322393][ T12] team0 (unregistering): Port device team_slave_0 removed [ 440.087602][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.087674][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.900951][ T12] team0 (unregistering): Port device team_slave_1 removed [ 441.071092][ T12] team0 (unregistering): Port device team_slave_0 removed [ 443.042828][ T12] team0 (unregistering): Port device team_slave_1 removed [ 443.176638][ T12] team0 (unregistering): Port device team_slave_0 removed [ 444.895917][ T12] team0 (unregistering): Port device team_slave_1 removed [ 445.140464][ T12] team0 (unregistering): Port device team_slave_0 removed [ 448.878538][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 450.499624][ T7882] chnl_net:caif_netlink_parms(): no params data found [ 450.549527][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 453.204358][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.220560][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.221666][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.225173][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.226273][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.274348][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.274479][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.274695][ T7817] bridge_slave_0: entered allmulticast mode [ 455.277648][ T7817] bridge_slave_0: entered promiscuous mode [ 455.383797][ T5117] Bluetooth: hci5: command tx timeout [ 456.271230][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.271361][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.271586][ T7817] bridge_slave_1: entered allmulticast mode [ 456.274252][ T7817] bridge_slave_1: entered promiscuous mode [ 456.612595][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.694877][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.288678][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.577288][ T5117] Bluetooth: hci5: command tx timeout [ 458.042801][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.044223][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.044360][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.044548][ T7882] bridge_slave_0: entered allmulticast mode [ 458.047223][ T7882] bridge_slave_0: entered promiscuous mode [ 458.157882][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.158952][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.159110][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.159297][ T7882] bridge_slave_1: entered allmulticast mode [ 458.161902][ T7882] bridge_slave_1: entered promiscuous mode [ 458.771609][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.931975][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.837779][ T7817] team0: Port device team_slave_0 added [ 459.843945][ T7882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.936205][ T5117] Bluetooth: hci5: command tx timeout [ 460.017494][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.048096][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.336598][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.817125][ T8167] overlayfs: missing 'lowerdir' [ 460.968505][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.973464][ T7672] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 461.228621][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.345148][ T7817] team0: Port device team_slave_1 added [ 461.358334][ T7882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.421404][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.997965][ T5117] Bluetooth: hci5: command tx timeout [ 463.458717][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.458733][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.458757][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.799346][ T7882] team0: Port device team_slave_0 added [ 465.811857][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.811872][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.811895][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.815568][ T7882] team0: Port device team_slave_1 added [ 466.050545][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.050562][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.050585][ T7882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.179593][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.179608][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.179633][ T7882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.712401][ T7817] hsr_slave_0: entered promiscuous mode [ 467.630238][ T7817] hsr_slave_1: entered promiscuous mode [ 467.631476][ T7817] debugfs: 'hsr0' already exists in 'hsr' [ 467.631500][ T7817] Cannot create hsr debugfs directory [ 469.129100][ T8224] overlayfs: missing 'lowerdir' [ 471.159472][ T7882] hsr_slave_0: entered promiscuous mode [ 471.160901][ T7882] hsr_slave_1: entered promiscuous mode [ 471.161900][ T7882] debugfs: 'hsr0' already exists in 'hsr' [ 471.161937][ T7882] Cannot create hsr debugfs directory [ 472.903282][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.916918][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.918371][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.919514][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.920436][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.036687][ T5117] Bluetooth: hci1: command tx timeout [ 475.405145][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 476.756201][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.756396][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.756673][ T8099] bridge_slave_0: entered allmulticast mode [ 476.759405][ T8099] bridge_slave_0: entered promiscuous mode [ 476.847669][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.847809][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.848016][ T8099] bridge_slave_1: entered allmulticast mode [ 476.850825][ T8099] bridge_slave_1: entered promiscuous mode [ 477.123036][ T5117] Bluetooth: hci1: command tx timeout [ 477.487880][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.496613][ T5942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 477.589259][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.652738][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.652807][ T5942] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 477.652830][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.667379][ T5942] usb 5-1: config 0 descriptor?? [ 477.679533][ T5942] pwc: Askey VC010 type 2 USB webcam detected. [ 478.130029][ T5942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 478.139077][ T5942] pwc: recv_control_msg error -32 req 02 val 2700 [ 478.141746][ T5942] pwc: recv_control_msg error -32 req 02 val 2c00 [ 478.142482][ T5942] pwc: recv_control_msg error -32 req 04 val 1000 [ 478.143632][ T5942] pwc: recv_control_msg error -32 req 04 val 1300 [ 478.156832][ T5942] pwc: recv_control_msg error -32 req 04 val 1400 [ 478.158273][ T5942] pwc: recv_control_msg error -32 req 02 val 2000 [ 478.159117][ T5942] pwc: recv_control_msg error -32 req 02 val 2100 [ 478.160952][ T5942] pwc: recv_control_msg error -32 req 04 val 1500 [ 478.161768][ T5942] pwc: recv_control_msg error -32 req 02 val 2500 [ 479.043261][ T5942] pwc: recv_control_msg error -71 req 02 val 2600 [ 479.045568][ T5942] pwc: recv_control_msg error -71 req 02 val 2900 [ 479.047082][ T5942] pwc: recv_control_msg error -71 req 02 val 2800 [ 479.048379][ T5942] pwc: recv_control_msg error -71 req 04 val 1100 [ 479.049268][ T5942] pwc: recv_control_msg error -71 req 04 val 1200 [ 479.069726][ T5942] pwc: Registered as video103. [ 479.075182][ T5942] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 479.104928][ T12] bridge_slave_1: left allmulticast mode [ 479.104953][ T12] bridge_slave_1: left promiscuous mode [ 479.105182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.173032][ T5942] usb 5-1: USB disconnect, device number 4 [ 479.195907][ T5117] Bluetooth: hci1: command tx timeout [ 479.407514][ T12] bridge_slave_0: left allmulticast mode [ 479.407534][ T12] bridge_slave_0: left promiscuous mode [ 479.410297][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.671267][ T12] bridge_slave_1: left allmulticast mode [ 480.671296][ T12] bridge_slave_1: left promiscuous mode [ 480.671523][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.735026][ T5117] Bluetooth: hci1: command tx timeout [ 481.902052][ T12] bridge_slave_0: left allmulticast mode [ 481.902078][ T12] bridge_slave_0: left promiscuous mode [ 481.902284][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.150144][ T12] bridge_slave_1: left allmulticast mode [ 482.150173][ T12] bridge_slave_1: left promiscuous mode [ 482.150412][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.126511][ T12] bridge_slave_0: left allmulticast mode [ 483.126530][ T12] bridge_slave_0: left promiscuous mode [ 483.126684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.217946][ T12] bridge_slave_1: left allmulticast mode [ 483.217966][ T12] bridge_slave_1: left promiscuous mode [ 483.218112][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.276586][ T12] bridge_slave_0: left allmulticast mode [ 483.276609][ T12] bridge_slave_0: left promiscuous mode [ 483.276795][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.807259][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.811842][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.813024][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.830104][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.862447][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.920120][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.045916][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.118805][ T12] bond0 (unregistering): Released all slaves [ 485.767488][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.926114][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.028679][ T12] bond0 (unregistering): Released all slaves [ 487.359081][ T5117] Bluetooth: hci3: command tx timeout [ 488.791289][ T8351] overlayfs: missing 'lowerdir' [ 490.349783][ T5117] Bluetooth: hci3: command tx timeout [ 490.665388][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.989176][ T5800] Bluetooth: hci3: command tx timeout [ 494.144867][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.211904][ T12] bond0 (unregistering): Released all slaves [ 494.475755][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.998224][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.918234][ T5800] Bluetooth: hci3: command tx timeout [ 499.141585][ T12] bond0 (unregistering): Released all slaves [ 501.519310][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.519380][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.669937][ T8099] team0: Port device team_slave_0 added [ 503.094368][ T8099] team0: Port device team_slave_1 added [ 504.674139][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.674155][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.674178][ T8099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.791211][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.791226][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.791250][ T8099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.033860][ T12] hsr_slave_0: left promiscuous mode [ 506.073450][ T12] hsr_slave_1: left promiscuous mode [ 506.074450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.004166][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.532753][ T12] hsr_slave_0: left promiscuous mode [ 507.552690][ T12] hsr_slave_1: left promiscuous mode [ 507.553657][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.593483][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.652724][ T12] hsr_slave_0: left promiscuous mode [ 507.692760][ T12] hsr_slave_1: left promiscuous mode [ 507.698586][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.733416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.453156][ T12] team0 (unregistering): Port device team_slave_1 removed [ 508.623363][ T12] team0 (unregistering): Port device team_slave_0 removed [ 510.573020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 512.036604][ T12] team0 (unregistering): Port device team_slave_0 removed [ 513.584379][ T8506] overlayfs: missing 'lowerdir' [ 514.335752][ T8514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.361181][ T8514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.370487][ T8514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.381669][ T8514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.390490][ T8514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.702443][ T12] team0 (unregistering): Port device team_slave_1 removed [ 515.912953][ T12] team0 (unregistering): Port device team_slave_0 removed [ 516.131741][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 516.285091][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.285140][ T5885] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.288179][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.288206][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.288225][ T5885] usb 5-1: Product: syz [ 516.288238][ T5885] usb 5-1: Manufacturer: syz [ 516.288252][ T5885] usb 5-1: SerialNumber: syz [ 516.377372][ T5885] cdc_ncm 5-1:1.0: skipping garbage [ 516.377402][ T5885] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 516.377455][ T5885] cdc_ncm 5-1:1.0: bind() failure [ 516.409693][ T5885] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 516.409741][ T5885] cdc_ncm 5-1:1.1: bind() failure [ 516.471673][ T8514] Bluetooth: hci4: command tx timeout [ 517.902097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 518.022014][ T12] team0 (unregistering): Port device team_slave_0 removed [ 518.353874][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 518.479252][ T8099] hsr_slave_0: entered promiscuous mode [ 518.481966][ T8099] hsr_slave_1: entered promiscuous mode [ 518.482959][ T8099] debugfs: 'hsr0' already exists in 'hsr' [ 518.482982][ T8099] Cannot create hsr debugfs directory [ 518.551385][ T8514] Bluetooth: hci4: command tx timeout [ 520.631226][ T8514] Bluetooth: hci4: command tx timeout [ 521.658571][ T5885] usb 5-1: USB disconnect, device number 5 [ 522.999836][ T8514] Bluetooth: hci4: command tx timeout [ 526.292653][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.292829][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.293003][ T8255] bridge_slave_0: entered allmulticast mode [ 526.309862][ T8255] bridge_slave_0: entered promiscuous mode [ 526.456997][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.457130][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.457365][ T8255] bridge_slave_1: entered allmulticast mode [ 526.460071][ T8255] bridge_slave_1: entered promiscuous mode [ 527.843300][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.870529][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.326101][ T8255] team0: Port device team_slave_0 added [ 528.475658][ T8255] team0: Port device team_slave_1 added [ 528.496010][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 530.096151][ T8615] overlayfs: missing 'lowerdir' [ 533.883259][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.903087][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.904649][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.918914][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.922594][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.985421][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.985553][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.985797][ T8325] bridge_slave_0: entered allmulticast mode [ 533.988678][ T8325] bridge_slave_0: entered promiscuous mode [ 534.047085][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.047218][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.047454][ T8325] bridge_slave_1: entered allmulticast mode [ 534.071167][ T8325] bridge_slave_1: entered promiscuous mode [ 534.380958][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 534.585362][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.651952][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.989458][ T8514] Bluetooth: hci1: command tx timeout [ 537.268784][ T8325] team0: Port device team_slave_0 added [ 537.936770][ T8325] team0: Port device team_slave_1 added [ 538.714456][ T8514] Bluetooth: hci1: command tx timeout [ 541.461984][ T8514] Bluetooth: hci1: command tx timeout [ 542.041245][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.041376][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.041585][ T8513] bridge_slave_0: entered allmulticast mode [ 542.070657][ T8513] bridge_slave_0: entered promiscuous mode [ 542.601492][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.601507][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.601531][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.603635][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.603763][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.603960][ T8513] bridge_slave_1: entered allmulticast mode [ 542.678888][ T8513] bridge_slave_1: entered promiscuous mode [ 542.706271][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.706287][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.706311][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.508656][ T8514] Bluetooth: hci1: command tx timeout [ 544.004340][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.070817][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.546429][ T8513] team0: Port device team_slave_0 added [ 544.555762][ T8513] team0: Port device team_slave_1 added [ 546.484158][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 546.501116][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 546.502724][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 546.506106][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 546.506947][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.692166][ T5800] Bluetooth: hci3: command tx timeout [ 550.220304][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.220315][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.220328][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.358968][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.358982][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.359003][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.245303][ T5800] Bluetooth: hci3: command tx timeout [ 552.412246][ T8513] hsr_slave_0: entered promiscuous mode [ 552.413574][ T8513] hsr_slave_1: entered promiscuous mode [ 552.414522][ T8513] debugfs: 'hsr0' already exists in 'hsr' [ 552.414545][ T8513] Cannot create hsr debugfs directory [ 552.690557][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 555.871785][ T5800] Bluetooth: hci3: command tx timeout [ 556.147323][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 556.297100][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 556.301416][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 556.301440][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.301459][ T10] usb 5-1: config 0 has no interface number 0 [ 556.301504][ T10] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.304579][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 556.304607][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.304627][ T10] usb 5-1: Product: syz [ 556.304641][ T10] usb 5-1: Manufacturer: syz [ 556.304654][ T10] usb 5-1: SerialNumber: syz [ 556.385807][ T10] usb 5-1: config 0 descriptor?? [ 556.411459][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 557.965504][ T5800] Bluetooth: hci3: command tx timeout [ 560.010667][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.010875][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.011184][ T8662] bridge_slave_0: entered allmulticast mode [ 560.081077][ T8662] bridge_slave_0: entered promiscuous mode [ 560.379415][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.380105][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.380967][ T8662] bridge_slave_1: entered allmulticast mode [ 560.392946][ T8662] bridge_slave_1: entered promiscuous mode [ 561.165443][ T10] usb 5-1: qt2_attach - failed to power on unit: -71 [ 561.167264][ T10] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 561.209764][ T10] usb 5-1: USB disconnect, device number 6 [ 561.369766][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.595363][ T8886] tty tty1: ldisc open failed (-12), clearing slot 0 [ 562.917531][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.954956][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.955025][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.382169][ T8662] team0: Port device team_slave_0 added [ 563.410947][ T8662] team0: Port device team_slave_1 added [ 563.559450][ T12] bridge_slave_1: left allmulticast mode [ 563.559476][ T12] bridge_slave_1: left promiscuous mode [ 563.559726][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.014372][ T12] bridge_slave_0: left allmulticast mode [ 564.014399][ T12] bridge_slave_0: left promiscuous mode [ 564.028711][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.849339][ T12] bridge_slave_1: left allmulticast mode [ 564.849367][ T12] bridge_slave_1: left promiscuous mode [ 564.849678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.155929][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.584'. [ 565.227068][ T12] bridge_slave_0: left allmulticast mode [ 565.227087][ T12] bridge_slave_0: left promiscuous mode [ 565.227243][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.341816][ T12] bridge_slave_1: left allmulticast mode [ 566.341844][ T12] bridge_slave_1: left promiscuous mode [ 566.342080][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.630371][ T12] bridge_slave_0: left allmulticast mode [ 566.630697][ T12] bridge_slave_0: left promiscuous mode [ 566.642815][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.829401][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.988794][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.050687][ T12] bond0 (unregistering): Released all slaves [ 569.337963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.406988][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.488010][ T12] bond0 (unregistering): Released all slaves [ 569.777633][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.856650][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.918602][ T12] bond0 (unregistering): Released all slaves [ 570.366488][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.366504][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.366528][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.368664][ T8770] chnl_net:caif_netlink_parms(): no params data found [ 571.011501][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.011517][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.011541][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.380793][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.909895][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.913923][ T8513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 572.985006][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.435942][ T12] hsr_slave_0: left promiscuous mode [ 573.500304][ T12] hsr_slave_1: left promiscuous mode [ 573.502082][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.526020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.013459][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.053269][ T12] hsr_slave_0: left promiscuous mode [ 575.078055][ T12] hsr_slave_1: left promiscuous mode [ 575.080176][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.089205][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.263324][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.796019][ T8514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 575.802846][ T8514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 575.803956][ T8514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.825277][ T8514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.835232][ T8514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 576.075674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 576.428821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 577.355701][ T12] team0 (unregistering): Port device team_slave_1 removed [ 577.535642][ T12] team0 (unregistering): Port device team_slave_0 removed [ 578.521833][ T5800] Bluetooth: hci4: command tx timeout [ 579.945048][ T12] team0 (unregistering): Port device team_slave_1 removed [ 580.845448][ T5800] Bluetooth: hci4: command tx timeout [ 581.524071][ T9009] usb usb8: usbfs: process 9009 (syz.4.597) did not claim interface 0 before use [ 582.109252][ T12] team0 (unregistering): Port device team_slave_0 removed [ 583.242496][ T5800] Bluetooth: hci4: command tx timeout [ 585.264108][ T5800] Bluetooth: hci4: command tx timeout [ 585.597902][ T9025] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 586.207761][ T8662] hsr_slave_0: entered promiscuous mode [ 586.209206][ T8662] hsr_slave_1: entered promiscuous mode [ 586.211847][ T8662] debugfs: 'hsr0' already exists in 'hsr' [ 586.211870][ T8662] Cannot create hsr debugfs directory [ 586.213611][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.243936][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.244178][ T8770] bridge_slave_0: entered allmulticast mode [ 586.247263][ T8770] bridge_slave_0: entered promiscuous mode [ 586.277176][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.277444][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.277645][ T8770] bridge_slave_1: entered allmulticast mode [ 586.280515][ T8770] bridge_slave_1: entered promiscuous mode [ 587.886870][ T8981] infiniband syz2: set active [ 587.888664][ T8981] infiniband syz2: added veth1_to_team [ 587.889728][ T8981] syz2: rxe_create_cq: returned err = -12 [ 587.889790][ T8981] infiniband syz2: Couldn't create ib_mad CQ [ 587.889940][ T8981] infiniband syz2: Couldn't open port 1 [ 588.033744][ T8981] RDS/IB: syz2: added [ 588.033839][ T8981] smc: adding ib device syz2 with port count 1 [ 588.033863][ T8981] smc: ib device syz2 port 1 has no pnetid [ 588.101832][ T8770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.347440][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 588.347874][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 588.387667][ T9035] ceph: No mds server is up or the cluster is laggy [ 588.438847][ T8770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.969423][ T8514] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.971928][ T8514] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.973002][ T8514] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.010458][ T8514] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.011330][ T8514] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.533977][ T8770] team0: Port device team_slave_0 added [ 591.596679][ T8770] team0: Port device team_slave_1 added [ 593.024665][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.024680][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.024705][ T8770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.043389][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.043403][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.043426][ T8770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.103049][ T8514] Bluetooth: hci5: command tx timeout [ 593.415597][ T8770] hsr_slave_0: entered promiscuous mode [ 593.417108][ T8770] hsr_slave_1: entered promiscuous mode [ 593.418282][ T8770] debugfs: 'hsr0' already exists in 'hsr' [ 593.418305][ T8770] Cannot create hsr debugfs directory [ 594.258217][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.264115][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.272119][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.288219][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.290401][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.185005][ T5800] Bluetooth: hci5: command tx timeout [ 596.311628][ T5800] Bluetooth: hci1: command tx timeout [ 596.571541][ T8988] chnl_net:caif_netlink_parms(): no params data found [ 597.262708][ T5800] Bluetooth: hci5: command tx timeout [ 598.354725][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 598.382537][ T5800] Bluetooth: hci1: command tx timeout [ 599.342894][ T5800] Bluetooth: hci5: command tx timeout [ 599.782630][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.782707][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.782884][ T8988] bridge_slave_0: entered allmulticast mode [ 599.784391][ T8988] bridge_slave_0: entered promiscuous mode [ 600.057879][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.057998][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.058169][ T8988] bridge_slave_1: entered allmulticast mode [ 600.059657][ T8988] bridge_slave_1: entered promiscuous mode [ 600.462231][ T5800] Bluetooth: hci1: command tx timeout [ 600.596787][ T8988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.158802][ T9114] usb usb8: usbfs: process 9114 (syz.4.614) did not claim interface 0 before use [ 601.745135][ T7083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.543951][ T5800] Bluetooth: hci1: command tx timeout [ 602.920836][ T8988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.558784][ T7083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.593909][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.594052][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.594279][ T9045] bridge_slave_0: entered allmulticast mode [ 604.597293][ T9045] bridge_slave_0: entered promiscuous mode [ 604.823841][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.824039][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.824278][ T9045] bridge_slave_1: entered allmulticast mode [ 604.827200][ T9045] bridge_slave_1: entered promiscuous mode [ 604.899901][ T8988] team0: Port device team_slave_0 added [ 605.337025][ T7083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.379551][ T8988] team0: Port device team_slave_1 added [ 605.524466][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.620'. [ 605.619402][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.769411][ T8514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.779676][ T8514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.780816][ T8514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.787814][ T8514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.788542][ T8514] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.024115][ T7083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.149822][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.169501][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.169516][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.169540][ T8988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.447405][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.447419][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.447454][ T8988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.823948][ T5800] Bluetooth: hci0: command tx timeout [ 608.494653][ T9045] team0: Port device team_slave_0 added [ 608.500554][ T9068] chnl_net:caif_netlink_parms(): no params data found [ 608.516617][ T9045] team0: Port device team_slave_1 added [ 609.165909][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.165924][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.165947][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.176650][ T8988] hsr_slave_0: entered promiscuous mode [ 609.178014][ T8988] hsr_slave_1: entered promiscuous mode [ 609.179031][ T8988] debugfs: 'hsr0' already exists in 'hsr' [ 609.179055][ T8988] Cannot create hsr debugfs directory [ 609.256074][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.256089][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.256175][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.901541][ T5800] Bluetooth: hci0: command tx timeout [ 609.927064][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.927222][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.927569][ T9068] bridge_slave_0: entered allmulticast mode [ 609.929133][ T9068] bridge_slave_0: entered promiscuous mode [ 610.017931][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.018060][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.018259][ T9068] bridge_slave_1: entered allmulticast mode [ 610.020757][ T9068] bridge_slave_1: entered promiscuous mode [ 610.036450][ T9045] hsr_slave_0: entered promiscuous mode [ 610.037866][ T9045] hsr_slave_1: entered promiscuous mode [ 610.039020][ T9045] debugfs: 'hsr0' already exists in 'hsr' [ 610.039043][ T9045] Cannot create hsr debugfs directory [ 610.525196][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.644063][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.213482][ T9068] team0: Port device team_slave_0 added [ 611.250004][ T9068] team0: Port device team_slave_1 added [ 611.582628][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.582643][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.582668][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.981034][ T5800] Bluetooth: hci0: command tx timeout [ 612.020343][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.020358][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.020381][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.446282][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 612.632081][ T9068] hsr_slave_0: entered promiscuous mode [ 612.633868][ T9068] hsr_slave_1: entered promiscuous mode [ 612.634887][ T9068] debugfs: 'hsr0' already exists in 'hsr' [ 612.634910][ T9068] Cannot create hsr debugfs directory [ 612.699233][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 613.680332][ T7083] bridge_slave_1: left allmulticast mode [ 613.680359][ T7083] bridge_slave_1: left promiscuous mode [ 613.681044][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.732357][ T7083] bridge_slave_0: left allmulticast mode [ 613.732394][ T7083] bridge_slave_0: left promiscuous mode [ 613.732648][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.817385][ T7083] bridge_slave_1: left allmulticast mode [ 613.817415][ T7083] bridge_slave_1: left promiscuous mode [ 613.817674][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.872716][ T7083] bridge_slave_0: left allmulticast mode [ 613.872744][ T7083] bridge_slave_0: left promiscuous mode [ 613.872975][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.936977][ T7083] bridge_slave_1: left allmulticast mode [ 613.937007][ T7083] bridge_slave_1: left promiscuous mode [ 613.937297][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.992591][ T7083] bridge_slave_0: left allmulticast mode [ 613.992618][ T7083] bridge_slave_0: left promiscuous mode [ 613.992867][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.060949][ T5800] Bluetooth: hci0: command tx timeout [ 614.086565][ T7083] bridge_slave_1: left allmulticast mode [ 614.086592][ T7083] bridge_slave_1: left promiscuous mode [ 614.086828][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.144420][ T7083] bridge_slave_0: left allmulticast mode [ 614.144440][ T7083] bridge_slave_0: left promiscuous mode [ 614.144604][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.770858][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.831884][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.855532][ T7083] bond0 (unregistering): Released all slaves [ 618.041006][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.120855][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.192392][ T7083] bond0 (unregistering): Released all slaves [ 618.390815][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.470862][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.532159][ T7083] bond0 (unregistering): Released all slaves [ 618.930922][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.070662][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.976382][ T7083] bond0 (unregistering): Released all slaves [ 621.397664][ T9214] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 622.599460][ T9223] overlayfs: missing 'lowerdir' [ 624.558920][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.558986][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.677473][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.677674][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.677926][ T9138] bridge_slave_0: entered allmulticast mode [ 624.681981][ T9138] bridge_slave_0: entered promiscuous mode [ 625.001338][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.001470][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.001666][ T9138] bridge_slave_1: entered allmulticast mode [ 625.004258][ T9138] bridge_slave_1: entered promiscuous mode [ 626.244152][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.093797][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.321160][ T9138] team0: Port device team_slave_0 added [ 627.382475][ T9138] team0: Port device team_slave_1 added [ 627.744974][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.744989][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.745013][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.794586][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.794601][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.794626][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.003599][ T8988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 628.180807][ T8988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 628.232948][ T9138] hsr_slave_0: entered promiscuous mode [ 628.234006][ T9138] hsr_slave_1: entered promiscuous mode [ 628.234650][ T9138] debugfs: 'hsr0' already exists in 'hsr' [ 628.234670][ T9138] Cannot create hsr debugfs directory [ 628.235024][ T8988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 628.294250][ T8988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 628.469185][ T7083] hsr_slave_0: left promiscuous mode [ 628.510120][ T7083] hsr_slave_1: left promiscuous mode [ 628.512649][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.512675][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.560178][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.560204][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.649152][ T7083] hsr_slave_0: left promiscuous mode [ 628.699277][ T7083] hsr_slave_1: left promiscuous mode [ 628.700025][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.719991][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.889466][ T7083] hsr_slave_0: left promiscuous mode [ 628.919192][ T7083] hsr_slave_1: left promiscuous mode [ 628.919852][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.961038][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.979824][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.020504][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.131558][ T7083] veth1_macvtap: left promiscuous mode [ 629.131671][ T7083] veth0_macvtap: left promiscuous mode [ 629.131933][ T7083] veth1_vlan: left promiscuous mode [ 629.132128][ T7083] veth0_vlan: left promiscuous mode [ 633.178647][ T9255] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 634.741901][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 636.096889][ T8514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.112837][ T8514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.114241][ T8514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.115780][ T8514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.116604][ T8514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.181586][ T172] smc: removing ib device syz2 [ 636.468963][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 638.564822][ T8514] Bluetooth: hci3: command tx timeout [ 640.198827][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 640.328498][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 640.617869][ T8514] Bluetooth: hci3: command tx timeout [ 640.917073][ T31] libceph: connect (1)[c::]:6789 error -101 [ 640.917275][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 640.936230][ T9276] ceph: No mds server is up or the cluster is laggy [ 641.578516][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 642.688495][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 642.835857][ T8514] Bluetooth: hci3: command tx timeout [ 644.319968][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.951743][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.952025][ T8514] Bluetooth: hci3: command tx timeout [ 645.298877][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 645.388046][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 645.818891][ T8988] kthread_run failed with err -4 [ 645.867331][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.174908][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.309377][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.434726][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.450235][ T5889] syz2: Port: 1 Link DOWN [ 647.630901][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.089543][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.639169][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.947463][ T9068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 650.236103][ T9068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 650.815430][ T9068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 651.656645][ T9068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 651.991367][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 651.994465][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 652.007445][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 652.853022][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 652.855531][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.537758][ T9341] usb usb8: usbfs: process 9341 (syz.4.655) did not claim interface 0 before use [ 654.037408][ T9068] kthread_run failed with err -4 [ 654.936487][ T5800] Bluetooth: hci4: command tx timeout [ 655.241446][ T8514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.245649][ T8514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.262944][ T8514] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.277051][ T8514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.278039][ T8514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.876302][ T9261] chnl_net:caif_netlink_parms(): no params data found [ 657.298853][ T5800] Bluetooth: hci4: command tx timeout [ 657.336060][ T5800] Bluetooth: hci1: command tx timeout [ 657.459014][ T9329] chnl_net:caif_netlink_parms(): no params data found [ 659.336016][ T5800] Bluetooth: hci4: command tx timeout [ 659.416051][ T5800] Bluetooth: hci1: command tx timeout [ 661.154332][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.154465][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.154714][ T9261] bridge_slave_0: entered allmulticast mode [ 661.187220][ T9261] bridge_slave_0: entered promiscuous mode [ 661.356906][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.357048][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.357263][ T9261] bridge_slave_1: entered allmulticast mode [ 661.359690][ T9261] bridge_slave_1: entered promiscuous mode [ 661.418178][ T5800] Bluetooth: hci4: command tx timeout [ 661.531613][ T5800] Bluetooth: hci1: command tx timeout [ 663.615524][ T5800] Bluetooth: hci1: command tx timeout [ 665.198765][ T9261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.338330][ T9261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.338692][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.338820][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.338999][ T9329] bridge_slave_0: entered allmulticast mode [ 666.342336][ T9329] bridge_slave_0: entered promiscuous mode [ 666.575477][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.575679][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.575934][ T9329] bridge_slave_1: entered allmulticast mode [ 666.578768][ T9329] bridge_slave_1: entered promiscuous mode [ 666.876397][ T9261] team0: Port device team_slave_0 added [ 667.280407][ T9261] team0: Port device team_slave_1 added [ 668.366761][ T8514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 668.435189][ T8514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 668.468080][ T8514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 668.523442][ T8514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 668.527488][ T8514] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 669.161834][ T9519] overlayfs: missing 'lowerdir' [ 669.985081][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.631857][ T5800] Bluetooth: hci0: command tx timeout [ 671.213489][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.566969][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.566986][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.567011][ T9261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.569303][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 672.671878][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.671894][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.671920][ T9261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.704285][ T8514] Bluetooth: hci0: command tx timeout [ 672.710324][ T9329] team0: Port device team_slave_0 added [ 672.776225][ T9329] team0: Port device team_slave_1 added [ 673.111158][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.111172][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.111189][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.209087][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.209102][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.209125][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.339618][ T9261] hsr_slave_0: entered promiscuous mode [ 673.340504][ T9261] hsr_slave_1: entered promiscuous mode [ 674.792813][ T8514] Bluetooth: hci0: command tx timeout [ 675.998020][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.998157][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.998700][ T9353] bridge_slave_0: entered allmulticast mode [ 676.084373][ T9353] bridge_slave_0: entered promiscuous mode [ 676.854441][ T8514] Bluetooth: hci0: command tx timeout [ 677.547854][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.547979][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.548189][ T9353] bridge_slave_1: entered allmulticast mode [ 677.550948][ T9353] bridge_slave_1: entered promiscuous mode [ 677.961625][ T9571] usb usb8: usbfs: process 9571 (syz.4.676) did not claim interface 0 before use [ 680.484244][ T9329] hsr_slave_0: entered promiscuous mode [ 680.485598][ T9329] hsr_slave_1: entered promiscuous mode [ 680.486560][ T9329] debugfs: 'hsr0' already exists in 'hsr' [ 680.486583][ T9329] Cannot create hsr debugfs directory [ 680.656345][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.682236][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.247741][ T9353] team0: Port device team_slave_0 added [ 681.445083][ T9353] team0: Port device team_slave_1 added [ 684.131601][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.131613][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.131632][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.189891][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.189902][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.189916][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.760359][ T9495] chnl_net:caif_netlink_parms(): no params data found [ 684.969941][ T9353] hsr_slave_0: entered promiscuous mode [ 684.971402][ T9353] hsr_slave_1: entered promiscuous mode [ 684.972420][ T9353] debugfs: 'hsr0' already exists in 'hsr' [ 684.972444][ T9353] Cannot create hsr debugfs directory [ 685.819759][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.819829][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.337336][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.337468][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.337700][ T9495] bridge_slave_0: entered allmulticast mode [ 686.340737][ T9495] bridge_slave_0: entered promiscuous mode [ 687.429984][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.430200][ [ 687.430200][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.430550][ T9495] bridge_slave_1: entered allmulticast mode [ 687.438476][ T9495] bridge_slave_1: entered promiscuous mode [ 687.526192][ T26] ================================================================== [ 687.526207][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 687.526238][ T26] Read of size 8 at addr ffffc900057f9090 by task irq_work/1/26 [ 687.526252][ T26] [ 687.526275][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 687.526295][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 687.526312][ T26] Call Trace: [ 687.526322][ T26] [ 687.526330][ T26] dump_stack_lvl+0x189/0x250 [ 687.526354][ T26] ? run_irq_workd+0x116/0x190 [ 687.526373][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.526394][ T26] ? __pfx__printk+0x10/0x10 [ 687.526415][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 687.526437][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 687.526459][ T26] print_report+0xca/0x240 [ 687.526481][ T26] ? run_irq_workd+0x116/0x190 [ 687.526501][ T26] kasan_report+0x118/0x150 [ 687.526522][ T26] ? run_irq_workd+0x116/0x190 [ 687.526546][ T26] run_irq_workd+0x116/0x190 [ 687.526566][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 687.526586][ T26] ? schedule+0x91/0x360 [ 687.526606][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 687.526626][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 687.526645][ T26] smpboot_thread_fn+0x542/0xa60 [ 687.526664][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 687.526685][ T26] kthread+0x711/0x8a0 [ 687.526707][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 687.526727][ T26] ? __pfx_kthread+0x10/0x10 [ 687.526744][ T26] ? rt_spin_unlock+0x150/0x200 [ 687.526768][ T26] ? rt_spin_unlock+0x161/0x200 [ 687.526782][ T26] ? __pfx_kthread+0x10/0x10 [ 687.526803][ T26] ret_from_fork+0x4bc/0x870 [ 687.526823][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 687.526844][ T26] ? __switch_to_asm+0x39/0x70 [ 687.526859][ T26] ? __switch_to_asm+0x33/0x70 [ 687.526873][ T26] ? __pfx_kthread+0x10/0x10 [ 687.526893][ T26] ret_from_fork_asm+0x1a/0x30 [ 687.526917][ T26] [ 687.526924][ T26] [ 687.526928][ T26] The buggy address belongs to a vmalloc virtual mapping [ 687.526951][ T26] Memory state around the buggy address: [ 687.526961][ T26] ffffc900057f8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 687.526971][ T26] ffffc900057f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 687.526983][ T26] >ffffc900057f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 687.526993][ T26] ^ [ 687.527002][ T26] ffffc900057f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 687.527013][ T26] ffffc900057f9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 687.527022][ T26] ================================================================== [ 687.527043][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 687.527056][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 687.527073][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 687.527082][ T26] Call Trace: [ 687.527089][ T26] [ 687.527096][ T26] dump_stack_lvl+0x99/0x250 [ 687.527153][ T26] ? __asan_memcpy+0x40/0x70 [ 687.527170][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.527190][ T26] ? __pfx__printk+0x10/0x10 [ 687.527215][ T26] vpanic+0x237/0x6d0 [ 687.527231][ T26] ? __pfx_vpanic+0x10/0x10 [ 687.527251][ T26] panic+0xb9/0xc0 [ 687.527266][ T26] ? __pfx_panic+0x10/0x10 [ 687.527281][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 687.527303][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 687.527327][ T26] ? run_irq_workd+0x116/0x190 [ 687.527347][ T26] check_panic_on_warn+0x89/0xb0 [ 687.527363][ T26] ? run_irq_workd+0x116/0x190 [ 687.527383][ T26] end_report+0x78/0x160 [ 687.527404][ T26] kasan_report+0x129/0x150 [ 687.527425][ T26] ? run_irq_workd+0x116/0x190 [ 687.527449][ T26] run_irq_workd+0x116/0x190 [ 687.527470][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 687.527491][ T26] ? schedule+0x91/0x360 [ 687.527510][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 687.527528][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 687.527546][ T26] smpboot_thread_fn+0x542/0xa60 [ 687.527565][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 687.527587][ T26] kthread+0x711/0x8a0 [ 687.527608][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 687.527628][ T26] ? __pfx_kthread+0x10/0x10 [ 687.527648][ T26] ? rt_spin_unlock+0x150/0x200 [ 687.527667][ T26] ? rt_spin_unlock+0x161/0x200 [ 687.527682][ T26] ? __pfx_kthread+0x10/0x10 [ 687.527704][ T26] ret_from_fork+0x4bc/0x870 [ 687.527725][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 687.527747][ T26] ? __switch_to_asm+0x39/0x70 [ 687.527763][ T26] ? __switch_to_asm+0x33/0x70 [ 687.527779][ T26] ? __pfx_kthread+0x10/0x10 [ 687.527801][ T26] ret_from_fork_asm+0x1a/0x30 [ 687.527825][ T26] [ 687.528113][ T26] Kernel Offset: disabled