last executing test programs: 16m15.460468327s ago: executing program 3 (id=2347): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x1) 16m14.244197851s ago: executing program 3 (id=2353): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x800) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) socket(0x1d, 0x2, 0x6) io_setup(0x8, &(0x7f0000004200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 16m11.16209216s ago: executing program 3 (id=2362): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) syz_emit_vhci(0x0, 0xd) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) 16m9.209788801s ago: executing program 3 (id=2368): socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 16m8.878372296s ago: executing program 3 (id=2370): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 16m7.084275822s ago: executing program 3 (id=2375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) pread64(r5, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r6, 0x11, 0x0, r4}, 0x11) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000002940)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 15m51.66959512s ago: executing program 32 (id=2375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) pread64(r5, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r6, 0x11, 0x0, r4}, 0x11) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000002940)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 15m7.661198634s ago: executing program 4 (id=2540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x16, 0x0) 15m7.517306001s ago: executing program 4 (id=2543): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 15m7.437625943s ago: executing program 4 (id=2545): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x2042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 15m3.535627018s ago: executing program 4 (id=2559): socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[r0], 0x1}) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 15m2.710836248s ago: executing program 2 (id=2563): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102392, 0x18ff8) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x1000}, 0x4) 15m2.673101156s ago: executing program 4 (id=2565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 15m1.692412836s ago: executing program 2 (id=2570): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20080091}, 0x44810) 15m1.678596161s ago: executing program 2 (id=2571): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd25, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000}}, 0x1c}}, 0x0) 15m1.606070361s ago: executing program 2 (id=2572): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cb", 0xc1}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 15m1.456846535s ago: executing program 2 (id=2573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 15m1.336482849s ago: executing program 2 (id=2574): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0xffff, 0x10}, {0x1}}}, 0x24}}, 0x0) 15m1.15449846s ago: executing program 4 (id=2575): r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000000c0)={0x2, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200)=0x9c9dce0ca2da8647, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000000280)={0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) getpid() madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 14m45.668812689s ago: executing program 33 (id=2574): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0xffff, 0x10}, {0x1}}}, 0x24}}, 0x0) 14m45.602584809s ago: executing program 34 (id=2575): r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000000c0)={0x2, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200)=0x9c9dce0ca2da8647, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000000280)={0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) getpid() madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3m26.886692573s ago: executing program 6 (id=3761): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3m25.161945863s ago: executing program 6 (id=3767): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000006c0)={0x1, @pix_mp={0xe233, 0x4, 0x30314742, 0x9, 0x7, [{0x3, 0x2}, {0x9, 0xb}, {0x5}, {0xfffffbff, 0xfffffff9}, {0xc2b4, 0x4}, {0x5, 0x8}, {0x334e, 0xc3}, {0x8a, 0x40e}], 0x97, 0x0, 0x8, 0x1, 0x3}}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x1, @pix={0x4, 0x2f, 0x32314d54, 0x0, 0x3, 0x1, 0xc, 0xe95, 0x1, 0x7, 0x1}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'veth0_to_batadv\x00', {0x5}}) 3m21.086005938s ago: executing program 6 (id=3772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000100)={0xdb, 0x0, 0x8000000000000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000000c0)=""/36, &(0x7f0000000080)=0x24) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x18) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m8.53618161s ago: executing program 6 (id=3800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000) 3m6.948818515s ago: executing program 6 (id=3803): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x350759, 0x101}}]}, 0x14c}}, 0x0) 3m6.251493726s ago: executing program 6 (id=3804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) ioctl$int_out(r2, 0x0, &(0x7f0000000100)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011000000", @ANYRES32, @ANYBLOB="0000000000000000000000ff000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r6, 0x0, 0x1c000000007400}, 0x38) getcwd(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042ffd02"], 0x200) syz_usb_connect$uac1(0x6, 0xba, 0x0, 0x0) 2m50.353138519s ago: executing program 35 (id=3804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) ioctl$int_out(r2, 0x0, &(0x7f0000000100)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011000000", @ANYRES32, @ANYBLOB="0000000000000000000000ff000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r6, 0x0, 0x1c000000007400}, 0x38) getcwd(0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042ffd02"], 0x200) syz_usb_connect$uac1(0x6, 0xba, 0x0, 0x0) 2m10.395031635s ago: executing program 1 (id=3893): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchownat(r6, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x200) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m7.330320252s ago: executing program 1 (id=3895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 2m7.186668994s ago: executing program 1 (id=3896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m7.160336725s ago: executing program 1 (id=3897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x983aec03fbdf90b8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 2m5.731138524s ago: executing program 1 (id=3898): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) 2m3.486867525s ago: executing program 1 (id=3899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x64000600) 1m47.976345515s ago: executing program 36 (id=3899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x64000600) 10.399955609s ago: executing program 0 (id=4023): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) ioprio_get$pid(0x1, 0x0) 10.108990048s ago: executing program 7 (id=4024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x983aec03fbdf90b8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 7.660057791s ago: executing program 0 (id=4025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.554858164s ago: executing program 0 (id=4026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e"], 0x122}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r1, 0x1, 0x9a, &(0x7f0000000140)=""/154) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000008c0)={0x14, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) 7.364295319s ago: executing program 7 (id=4027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) 6.362416946s ago: executing program 7 (id=4028): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) 4.744667265s ago: executing program 7 (id=4029): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0xa0000001}) 2.194841895s ago: executing program 7 (id=4030): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000100)={0xdb, 0x0, 0x8000000000000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x18) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.149069631s ago: executing program 0 (id=4031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) move_mount(r5, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000140)='./file0/file0\x00', 0x177) 1.963881479s ago: executing program 7 (id=4032): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 168.863337ms ago: executing program 0 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 0 (id=4034): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) ioprio_get$pid(0x1, 0x0) kernel console output (not intermixed with test programs): 0][T14125] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1312.814161][T13069] Bluetooth: hci5: command tx timeout [ 1312.854162][T14125] usb 2-1: device descriptor read/64, error -71 [ 1312.915278][ T6373] team0 (unregistering): Port device team_slave_1 removed [ 1313.064987][ T6373] team0 (unregistering): Port device team_slave_0 removed [ 1313.164186][T14125] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 1313.296760][T14125] usb 2-1: device descriptor read/64, error -71 [ 1313.413352][T14125] usb usb2-port1: attempt power cycle [ 1313.754110][T14125] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 1313.774810][T14125] usb 2-1: device descriptor read/8, error -71 [ 1314.072518][T14125] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 1314.116514][T14125] usb 2-1: device descriptor read/8, error -71 [ 1314.190570][ T6373] team0 (unregistering): Port device team_slave_1 removed [ 1314.238405][T14125] usb usb2-port1: unable to enumerate USB device [ 1314.326017][ T6373] team0 (unregistering): Port device team_slave_0 removed [ 1314.686139][T13583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1314.690431][T13583] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1314.691891][T13583] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1314.693301][T13583] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1314.707339][T13583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1314.909295][T13069] Bluetooth: hci5: command tx timeout [ 1316.815322][T13069] Bluetooth: hci6: command tx timeout [ 1316.974122][T13069] Bluetooth: hci5: command tx timeout [ 1318.917608][T13069] Bluetooth: hci6: command tx timeout [ 1319.094114][T13069] Bluetooth: hci5: command tx timeout [ 1319.384419][T17100] chnl_net:caif_netlink_parms(): no params data found [ 1319.413883][T17088] chnl_net:caif_netlink_parms(): no params data found [ 1320.977309][T13069] Bluetooth: hci6: command tx timeout [ 1323.054209][T13069] Bluetooth: hci6: command tx timeout [ 1323.825476][T13583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1323.831087][T13583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1323.867245][T13583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1323.903207][T13583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1323.918741][T13583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1324.264059][ T5786] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 1325.013437][ T5786] usb 2-1: device descriptor read/64, error -71 [ 1325.354095][ T5786] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 1325.484190][ T5786] usb 2-1: device descriptor read/64, error -71 [ 1325.601153][ T5786] usb usb2-port1: attempt power cycle [ 1326.024164][T13069] Bluetooth: hci1: command tx timeout [ 1326.034063][ T5786] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 1326.054799][ T5786] usb 2-1: device descriptor read/8, error -71 [ 1326.314116][ T5786] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 1326.340517][ T5786] usb 2-1: device descriptor read/8, error -71 [ 1326.444476][ T5786] usb usb2-port1: unable to enumerate USB device [ 1326.675843][T17100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.675959][T17100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.676156][T17100] bridge_slave_0: entered allmulticast mode [ 1326.679852][T17100] bridge_slave_0: entered promiscuous mode [ 1328.094087][T13069] Bluetooth: hci1: command tx timeout [ 1328.244851][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.244955][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.245121][T17088] bridge_slave_0: entered allmulticast mode [ 1328.246742][T17088] bridge_slave_0: entered promiscuous mode [ 1328.249783][T17100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.249875][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.249998][T17100] bridge_slave_1: entered allmulticast mode [ 1328.251726][T17100] bridge_slave_1: entered promiscuous mode [ 1328.329109][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.329248][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.329503][T17088] bridge_slave_1: entered allmulticast mode [ 1328.332688][T17088] bridge_slave_1: entered promiscuous mode [ 1330.184049][T13069] Bluetooth: hci1: command tx timeout [ 1330.429387][T17100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.711198][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.718742][T17100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.738839][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.279777][T13069] Bluetooth: hci1: command tx timeout [ 1333.163560][T17224] overlayfs: missing 'workdir' [ 1333.201817][T17100] team0: Port device team_slave_0 added [ 1333.209743][T15696] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 1333.230554][T17088] team0: Port device team_slave_0 added [ 1333.235652][T17100] team0: Port device team_slave_1 added [ 1333.258615][T17088] team0: Port device team_slave_1 added [ 1333.334047][T15696] usb 2-1: device descriptor read/64, error -71 [ 1334.385733][T15696] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 1334.544176][T15696] usb 2-1: device descriptor read/64, error -71 [ 1334.654557][T15696] usb usb2-port1: attempt power cycle [ 1334.994319][T15696] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 1335.014708][T17100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.014725][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.014752][T17100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.015123][T15696] usb 2-1: device descriptor read/8, error -71 [ 1335.019131][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.019142][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.019155][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.020617][T17100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.020630][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.020654][T17100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.023554][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.023562][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.023576][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.358607][T15696] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1335.405404][T15696] usb 2-1: device descriptor read/8, error -71 [ 1335.514359][T15696] usb usb2-port1: unable to enumerate USB device [ 1335.654053][T17100] hsr_slave_0: entered promiscuous mode [ 1335.655148][T17100] hsr_slave_1: entered promiscuous mode [ 1335.824582][T17088] hsr_slave_0: entered promiscuous mode [ 1335.825837][T17088] hsr_slave_1: entered promiscuous mode [ 1335.826524][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 1335.826540][T17088] Cannot create hsr debugfs directory [ 1336.652604][T17249] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1338.229231][T17258] overlayfs: missing 'workdir' [ 1338.260007][T17155] chnl_net:caif_netlink_parms(): no params data found [ 1339.704110][ T5786] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1339.864058][ T5786] usb 2-1: device descriptor read/64, error -71 [ 1340.104201][ T5786] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1340.234068][ T5786] usb 2-1: device descriptor read/64, error -71 [ 1340.344487][ T5786] usb usb2-port1: attempt power cycle [ 1340.650456][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.650672][T17155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.650928][T17155] bridge_slave_0: entered allmulticast mode [ 1340.653461][T17155] bridge_slave_0: entered promiscuous mode [ 1340.686430][ T5786] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1340.686970][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.687093][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.687261][T17155] bridge_slave_1: entered allmulticast mode [ 1340.692237][T17155] bridge_slave_1: entered promiscuous mode [ 1340.731458][ T5786] usb 2-1: device descriptor read/8, error -71 [ 1340.964061][ T5786] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1340.974954][T17155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.979175][T17155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.000603][ T5786] usb 2-1: device descriptor read/8, error -71 [ 1341.106937][ T5786] usb usb2-port1: unable to enumerate USB device [ 1341.202424][T17155] team0: Port device team_slave_0 added [ 1341.211928][T17155] team0: Port device team_slave_1 added [ 1341.427530][T17155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.427548][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.427571][T17155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.431698][T17155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.431714][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.431739][T17155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.921780][T17155] hsr_slave_0: entered promiscuous mode [ 1341.922740][T17155] hsr_slave_1: entered promiscuous mode [ 1341.923387][T17155] debugfs: 'hsr0' already exists in 'hsr' [ 1341.923406][T17155] Cannot create hsr debugfs directory [ 1343.313615][T17320] overlayfs: missing 'workdir' [ 1345.824156][T15696] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1345.964141][T15696] usb 1-1: device descriptor read/64, error -71 [ 1346.234002][T15696] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1346.502511][T15696] usb 1-1: device descriptor read/64, error -71 [ 1346.615137][T15696] usb usb1-port1: attempt power cycle [ 1346.648336][ T6373] bridge_slave_1: left allmulticast mode [ 1346.648361][ T6373] bridge_slave_1: left promiscuous mode [ 1346.651491][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.715765][ T6373] bridge_slave_0: left allmulticast mode [ 1346.715795][ T6373] bridge_slave_0: left promiscuous mode [ 1346.716061][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.788632][ T6373] bridge_slave_1: left allmulticast mode [ 1346.788662][ T6373] bridge_slave_1: left promiscuous mode [ 1346.788920][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.875585][ T6373] bridge_slave_0: left allmulticast mode [ 1346.875615][ T6373] bridge_slave_0: left promiscuous mode [ 1346.875864][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.946806][ T6373] bridge_slave_1: left allmulticast mode [ 1346.946826][ T6373] bridge_slave_1: left promiscuous mode [ 1346.946973][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.954064][T15696] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1346.976193][T15696] usb 1-1: device descriptor read/8, error -71 [ 1347.055828][ T6373] bridge_slave_0: left allmulticast mode [ 1347.055859][ T6373] bridge_slave_0: left promiscuous mode [ 1347.056123][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.214081][T15696] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 1347.234826][T15696] usb 1-1: device descriptor read/8, error -71 [ 1347.360260][T15696] usb usb1-port1: unable to enumerate USB device [ 1347.361972][T13069] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1347.504601][ T6373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.596135][ T6373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.676181][ T6373] bond0 (unregistering): Released all slaves [ 1347.854759][ T6373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.935028][ T6373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.996290][ T6373] bond0 (unregistering): Released all slaves [ 1348.184776][ T6373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.264836][ T6373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.326166][ T6373] bond0 (unregistering): Released all slaves [ 1350.064193][ T6373] hsr_slave_0: left promiscuous mode [ 1350.172861][T17386] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1351.093350][ T6373] hsr_slave_1: left promiscuous mode [ 1351.204768][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.236866][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.332719][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1351.534248][ T6373] hsr_slave_0: left promiscuous mode [ 1351.584193][ T6373] hsr_slave_1: left promiscuous mode [ 1351.584880][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.614962][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.774266][ T6373] hsr_slave_0: left promiscuous mode [ 1351.794216][ T6373] hsr_slave_1: left promiscuous mode [ 1351.795135][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.844703][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.824696][ T6373] team0 (unregistering): Port device team_slave_1 removed [ 1352.987033][ T6373] team0 (unregistering): Port device team_slave_0 removed [ 1353.034174][ T44] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1353.164146][ T44] usb 2-1: device descriptor read/64, error -71 [ 1353.420993][ T44] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 1353.544090][ T44] usb 2-1: device descriptor read/64, error -71 [ 1353.654379][ T44] usb usb2-port1: attempt power cycle [ 1353.994107][ T44] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 1354.015035][ T44] usb 2-1: device descriptor read/8, error -71 [ 1354.194641][ T6373] team0 (unregistering): Port device team_slave_1 removed [ 1354.291132][ T44] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 1354.308438][ T44] usb 2-1: device descriptor read/8, error -71 [ 1354.374693][ T6373] team0 (unregistering): Port device team_slave_0 removed [ 1354.417171][ T44] usb usb2-port1: unable to enumerate USB device [ 1355.584728][ T6373] team0 (unregistering): Port device team_slave_1 removed [ 1355.735493][ T6373] team0 (unregistering): Port device team_slave_0 removed [ 1356.750489][T17100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1358.720430][T17100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1359.493282][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1359.496232][T17100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1359.529493][T17100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1360.233619][T17155] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1360.413560][T17155] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1360.464946][T17155] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1360.590157][T17155] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1361.109462][T17088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1361.234916][T17088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1361.390057][T17088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1361.457117][T17088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1361.506424][T17100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.627017][T17100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.672792][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.673040][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.701888][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.701961][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.724703][T17155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.819755][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.819927][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.930238][T17155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.003452][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.016909][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.022980][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.023133][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.482737][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.846465][T17483] overlayfs: missing 'lowerdir' [ 1363.888530][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.918889][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.919028][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.049836][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.049955][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.918229][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1367.049884][T17100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.157940][T17155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.514705][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.634297][T14249] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 1368.764149][T14249] usb 1-1: device descriptor read/64, error -71 [ 1368.782167][T17155] veth0_vlan: entered promiscuous mode [ 1368.806841][T17155] veth1_vlan: entered promiscuous mode [ 1369.119338][T17155] veth0_macvtap: entered promiscuous mode [ 1369.135002][T14249] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1369.420280][T14249] usb 1-1: device descriptor read/64, error -71 [ 1369.530397][T14249] usb usb1-port1: attempt power cycle [ 1370.083707][T17155] veth1_macvtap: entered promiscuous mode [ 1370.118295][T17100] veth0_vlan: entered promiscuous mode [ 1370.145460][T14249] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 1370.169833][T14249] usb 1-1: device descriptor read/8, error -71 [ 1370.186722][T17155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.188164][T17100] veth1_vlan: entered promiscuous mode [ 1370.222140][T17155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.273199][ T6378] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.275277][ T6378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.276417][ T6378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.278231][ T6378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.404053][T14249] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 1370.418272][T17100] veth0_macvtap: entered promiscuous mode [ 1370.425651][T14249] usb 1-1: device descriptor read/8, error -71 [ 1370.481898][T17100] veth1_macvtap: entered promiscuous mode [ 1370.538869][T14249] usb usb1-port1: unable to enumerate USB device [ 1370.665352][T17100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.672644][T16864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.672669][T16864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.697117][T17100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.716826][ T6378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.729292][ T6378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.741646][ T6378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.745125][ T6378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.749290][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.749307][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.282050][T16864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.282071][T16864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.946242][T17568] usb usb5: usbfs: process 17568 (syz.7.2609) did not claim interface 0 before use [ 1372.456644][T13583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1372.478690][T13583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1372.480258][T13583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1372.490532][T13583] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1372.495134][T13583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1372.498623][T13583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1376.399476][T13069] Bluetooth: hci2: command tx timeout [ 1377.349139][T13069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1377.362505][T13069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1377.364467][T13069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1377.365997][T13069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1377.370984][T13069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1378.264070][T15697] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 1378.319599][T13069] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1378.404151][T15697] usb 8-1: device descriptor read/64, error -71 [ 1378.414475][T13069] Bluetooth: hci2: command tx timeout [ 1379.484514][T13069] Bluetooth: hci3: command tx timeout [ 1379.501189][T15697] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 1379.634030][T15697] usb 8-1: device descriptor read/64, error -71 [ 1379.801741][T15697] usb usb8-port1: attempt power cycle [ 1380.635658][T13583] Bluetooth: hci2: command tx timeout [ 1381.252267][T15697] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 1381.349739][T15697] usb 8-1: device descriptor read/8, error -71 [ 1381.539657][T13583] Bluetooth: hci3: command tx timeout [ 1382.654284][T13583] Bluetooth: hci2: command tx timeout [ 1383.923906][T13583] Bluetooth: hci3: command tx timeout [ 1384.636300][T13583] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1385.934383][T13583] Bluetooth: hci3: command tx timeout [ 1386.425413][T17569] chnl_net:caif_netlink_parms(): no params data found [ 1387.791293][T11088] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 1387.838300][T16864] bridge_slave_1: left allmulticast mode [ 1387.838329][T16864] bridge_slave_1: left promiscuous mode [ 1387.838642][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.006640][T11088] usb 8-1: device descriptor read/64, error -71 [ 1388.246275][T16864] bridge_slave_0: left allmulticast mode [ 1388.246313][T16864] bridge_slave_0: left promiscuous mode [ 1388.246580][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.246664][T11088] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1388.373998][T11088] usb 8-1: device descriptor read/64, error -71 [ 1388.484762][T11088] usb usb8-port1: attempt power cycle [ 1388.824032][T11088] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 1388.844738][T11088] usb 8-1: device descriptor read/8, error -71 [ 1394.076370][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1396.545177][T16864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.624836][T16864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.647678][T16864] bond0 (unregistering): Released all slaves [ 1397.714164][T16864] hsr_slave_0: left promiscuous mode [ 1397.754302][T16864] hsr_slave_1: left promiscuous mode [ 1397.755530][T16864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.805376][T16864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.540318][T17723] fuse: Bad value for 'group_id' [ 1398.540363][T17723] fuse: Bad value for 'group_id' [ 1400.762360][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1403.754905][T16864] team0 (unregistering): Port device team_slave_1 removed [ 1404.138061][T16864] team0 (unregistering): Port device team_slave_0 removed [ 1406.454039][T14249] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1406.608855][T14249] usb 8-1: config 0 has an invalid interface number: 135 but max is 0 [ 1406.608881][T14249] usb 8-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1406.608901][T14249] usb 8-1: config 0 has no interface number 0 [ 1406.608925][T14249] usb 8-1: too many endpoints for config 0 interface 135 altsetting 47: 48, using maximum allowed: 30 [ 1406.608947][T14249] usb 8-1: config 0 interface 135 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1406.608960][T14249] usb 8-1: config 0 interface 135 has no altsetting 0 [ 1406.611192][T14249] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1406.611213][T14249] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.611223][T14249] usb 8-1: Product: syz [ 1406.611230][T14249] usb 8-1: Manufacturer: syz [ 1406.611237][T14249] usb 8-1: SerialNumber: syz [ 1406.703370][T14249] usb 8-1: config 0 descriptor?? [ 1406.935376][T14249] keyspan 8-1:0.135: Keyspan 2 port adapter converter detected [ 1406.935620][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 87 [ 1406.935691][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 7 [ 1406.937750][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 81 [ 1406.937832][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 1 [ 1406.937914][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 2 [ 1406.937989][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 85 [ 1406.938068][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 5 [ 1407.045583][T14249] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1407.050434][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 83 [ 1407.050487][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 3 [ 1407.050536][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 4 [ 1407.050580][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 86 [ 1407.050633][T14249] keyspan 8-1:0.135: found no endpoint descriptor for endpoint 6 [ 1407.052571][T14249] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1407.119967][T14249] usb 8-1: USB disconnect, device number 10 [ 1407.161844][T14249] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1407.212615][T14249] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1407.213562][T14249] keyspan 8-1:0.135: device disconnected [ 1409.542140][T17598] chnl_net:caif_netlink_parms(): no params data found [ 1410.129567][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.129715][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.129949][T17569] bridge_slave_0: entered allmulticast mode [ 1410.132826][T17569] bridge_slave_0: entered promiscuous mode [ 1410.149493][T17569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.150019][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.150230][T17569] bridge_slave_1: entered allmulticast mode [ 1410.152953][T17569] bridge_slave_1: entered promiscuous mode [ 1412.448664][T17569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.637242][T17569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.639904][T17598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.640041][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.640235][T17598] bridge_slave_0: entered allmulticast mode [ 1412.643015][T17598] bridge_slave_0: entered promiscuous mode [ 1414.122815][T17598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.122951][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.123190][T17598] bridge_slave_1: entered allmulticast mode [ 1414.146549][T17598] bridge_slave_1: entered promiscuous mode [ 1414.387764][T13583] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1414.652939][T17569] team0: Port device team_slave_0 added [ 1416.738319][T17569] team0: Port device team_slave_1 added [ 1418.086252][T17598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.829182][T17598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.307731][T17569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.307748][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.307774][T17569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.298677][T17569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.298693][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.298717][T17569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.302767][T17598] team0: Port device team_slave_0 added [ 1420.388774][T17598] team0: Port device team_slave_1 added [ 1423.773635][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.773820][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.608474][T17598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.608491][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.608518][T17598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.616837][T17569] hsr_slave_0: entered promiscuous mode [ 1424.618126][T17569] hsr_slave_1: entered promiscuous mode [ 1424.619052][T17569] debugfs: 'hsr0' already exists in 'hsr' [ 1424.619075][T17569] Cannot create hsr debugfs directory [ 1424.621610][T17598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.621622][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.621647][T17598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.507682][ T37] audit: type=1326 audit(1760498564.305:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.507746][ T37] audit: type=1326 audit(1760498564.305:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534130][ T37] audit: type=1326 audit(1760498564.315:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534181][ T37] audit: type=1326 audit(1760498564.325:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534224][ T37] audit: type=1326 audit(1760498564.325:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534267][ T37] audit: type=1326 audit(1760498564.335:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534309][ T37] audit: type=1326 audit(1760498564.335:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534350][ T37] audit: type=1326 audit(1760498564.345:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534398][ T37] audit: type=1326 audit(1760498564.355:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1425.534442][ T37] audit: type=1326 audit(1760498564.385:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d871beec9 code=0x7ffc0000 [ 1427.079555][T16864] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.295078][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1427.786942][T16864] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.054878][T17598] hsr_slave_0: entered promiscuous mode [ 1429.064586][T17598] hsr_slave_1: entered promiscuous mode [ 1429.076918][T17598] debugfs: 'hsr0' already exists in 'hsr' [ 1429.076944][T17598] Cannot create hsr debugfs directory [ 1430.359884][T16864] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.251411][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1432.538096][T16864] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.469558][T13069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1434.486132][T13069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1434.489293][T13069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1434.524901][T13069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1434.540319][T13069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1434.749145][T16864] bridge_slave_1: left allmulticast mode [ 1434.749174][T16864] bridge_slave_1: left promiscuous mode [ 1434.749443][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.945589][T16864] bridge_slave_0: left allmulticast mode [ 1434.945617][T16864] bridge_slave_0: left promiscuous mode [ 1434.945883][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.574288][T13069] Bluetooth: hci2: command tx timeout [ 1436.704383][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1438.657114][T13069] Bluetooth: hci2: command tx timeout [ 1439.551945][T13583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1439.577314][T13583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1439.578794][T13583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1439.582392][T13583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1439.611065][T13583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.744705][T16864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.981610][T16864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.001974][T16864] bond0 (unregistering): Released all slaves [ 1441.263915][T13583] Bluetooth: hci2: command tx timeout [ 1441.486900][T18071] block device autoloading is deprecated and will be removed. [ 1441.537179][T18072] syz_tun: entered allmulticast mode [ 1441.669486][T18070] syz_tun: left allmulticast mode [ 1441.694416][T13583] Bluetooth: hci5: command tx timeout [ 1443.401505][T13583] Bluetooth: hci2: command tx timeout [ 1443.774000][T13069] Bluetooth: hci5: command tx timeout [ 1444.884054][T16864] hsr_slave_0: left promiscuous mode [ 1444.932133][T16864] hsr_slave_1: left promiscuous mode [ 1444.933104][T16864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.933137][T16864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.008276][T16864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.008303][T16864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.178641][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1445.389183][T16864] veth1_macvtap: left promiscuous mode [ 1445.389254][T16864] veth0_macvtap: left promiscuous mode [ 1445.389401][T16864] veth1_vlan: left promiscuous mode [ 1445.389513][T16864] veth0_vlan: left promiscuous mode [ 1446.124040][T13069] Bluetooth: hci5: command tx timeout [ 1448.184175][T13069] Bluetooth: hci5: command tx timeout [ 1449.794749][T16864] team0 (unregistering): Port device team_slave_1 removed [ 1450.086534][T16864] team0 (unregistering): Port device team_slave_0 removed [ 1451.502115][T13069] Bluetooth: hci1: command 0x0406 tx timeout [ 1455.959276][T18009] chnl_net:caif_netlink_parms(): no params data found [ 1456.737679][T13583] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1456.784222][T18054] chnl_net:caif_netlink_parms(): no params data found [ 1457.647295][T18009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.647432][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.647676][T18009] bridge_slave_0: entered allmulticast mode [ 1457.655802][T18009] bridge_slave_0: entered promiscuous mode [ 1457.704197][T18009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.704816][T18009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.705060][T18009] bridge_slave_1: entered allmulticast mode [ 1457.711575][T18009] bridge_slave_1: entered promiscuous mode [ 1460.197506][T18009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.197760][T18054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.197908][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.198426][T18054] bridge_slave_0: entered allmulticast mode [ 1460.201089][T18054] bridge_slave_0: entered promiscuous mode [ 1460.273382][T18009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.273621][T18054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.273825][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.303338][T18054] bridge_slave_1: entered allmulticast mode [ 1460.315197][T18054] bridge_slave_1: entered promiscuous mode [ 1461.635753][T16864] bridge_slave_1: left allmulticast mode [ 1461.635782][T16864] bridge_slave_1: left promiscuous mode [ 1461.636017][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.891360][T16864] bridge_slave_0: left allmulticast mode [ 1461.891390][T16864] bridge_slave_0: left promiscuous mode [ 1461.891655][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.764015][T15696] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 1462.798962][T16864] bridge_slave_1: left allmulticast mode [ 1462.798991][T16864] bridge_slave_1: left promiscuous mode [ 1462.799230][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.924026][T15696] usb 8-1: device descriptor read/64, error -71 [ 1462.958768][T16864] bridge_slave_0: left allmulticast mode [ 1462.958799][T16864] bridge_slave_0: left promiscuous mode [ 1462.959058][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.224178][T15696] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 1463.353972][T15696] usb 8-1: device descriptor read/64, error -71 [ 1463.504061][T15696] usb usb8-port1: attempt power cycle [ 1463.906526][T16864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.004822][T16864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.069987][T16864] bond0 (unregistering): Released all slaves [ 1464.094154][T15696] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 1464.119731][T15696] usb 8-1: device descriptor read/8, error -71 [ 1464.364030][T15696] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 1464.401207][T15696] usb 8-1: device descriptor read/8, error -71 [ 1464.504348][T15696] usb usb8-port1: unable to enumerate USB device [ 1464.521297][T16864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.566781][T13583] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1464.576322][T16864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.667413][T16864] bond0 (unregistering): Released all slaves [ 1467.679843][T18009] team0: Port device team_slave_0 added [ 1467.690713][T18054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.703643][T18009] team0: Port device team_slave_1 added [ 1467.753274][T18054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.984034][ T44] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1468.147014][ T44] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 1468.147082][ T44] usb 1-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1468.147109][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1468.151351][ T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1468.151380][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.151399][ T44] usb 1-1: Product: syz [ 1468.151413][ T44] usb 1-1: Manufacturer: syz [ 1468.151426][ T44] usb 1-1: SerialNumber: syz [ 1468.175970][ T44] usb 1-1: config 0 descriptor?? [ 1468.189097][ T44] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1468.189387][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 1468.189458][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1468.197442][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1468.197529][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1468.197615][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1468.197693][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1468.197770][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1468.212012][ T44] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1468.224841][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1468.225055][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 1468.225136][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1468.225215][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1468.225310][ T44] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1468.265963][ T44] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1468.413226][ T44] usb 1-1: USB disconnect, device number 81 [ 1468.426473][ T44] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1468.448976][ T44] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1468.449928][ T44] keyspan 1-1:0.0: device disconnected [ 1468.508725][T18009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.508741][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.508769][T18009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.639250][T18054] team0: Port device team_slave_0 added [ 1468.640629][T18009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.640643][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.640668][T18009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.804132][T16864] hsr_slave_0: left promiscuous mode [ 1468.844134][T16864] hsr_slave_1: left promiscuous mode [ 1468.846002][T16864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.928666][T16864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.038013][T16864] hsr_slave_0: left promiscuous mode [ 1469.074523][T16864] hsr_slave_1: left promiscuous mode [ 1469.077287][T16864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.128617][T16864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.364003][T15697] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 1469.504491][T15697] usb 1-1: device descriptor read/64, error -71 [ 1469.774236][T15697] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 1469.914100][T15697] usb 1-1: device descriptor read/64, error -71 [ 1470.024479][T15697] usb usb1-port1: attempt power cycle [ 1470.388040][T15697] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1470.404851][T15697] usb 1-1: device descriptor read/8, error -71 [ 1470.516310][T16864] team0 (unregistering): Port device team_slave_1 removed [ 1470.656853][T15697] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 1470.676163][T15697] usb 1-1: device descriptor read/8, error -71 [ 1470.718367][T16864] team0 (unregistering): Port device team_slave_0 removed [ 1470.794396][T15697] usb usb1-port1: unable to enumerate USB device [ 1471.391422][T13583] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1473.426726][T14249] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1473.655955][T14249] usb 8-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1473.655990][T14249] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1473.659580][T14249] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1473.659608][T14249] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.659628][T14249] usb 8-1: Product: syz [ 1473.659642][T14249] usb 8-1: Manufacturer: syz [ 1473.659655][T14249] usb 8-1: SerialNumber: syz [ 1473.668926][T14249] usb 8-1: config 0 descriptor?? [ 1473.690383][T14249] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 1473.690723][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 1473.690794][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 1473.759075][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 1473.759173][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 1473.759283][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 1473.759363][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 1473.759455][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 1473.799965][T16864] team0 (unregistering): Port device team_slave_1 removed [ 1473.852702][T14249] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1473.859436][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 1473.859525][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3 [ 1473.859701][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 1473.859783][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 1473.859933][T14249] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 1473.863430][T14249] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1473.901146][T14249] usb 8-1: USB disconnect, device number 15 [ 1473.924720][T14249] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1473.992063][T14249] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1473.993062][T14249] keyspan 8-1:0.0: device disconnected [ 1473.995683][T16864] team0 (unregistering): Port device team_slave_0 removed [ 1475.001515][T18054] team0: Port device team_slave_1 added [ 1475.709105][T18054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.709117][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.709130][T18054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.036614][T18054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.036632][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.036671][T18054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.252082][T18009] hsr_slave_0: entered promiscuous mode [ 1477.253361][T18009] hsr_slave_1: entered promiscuous mode [ 1477.314123][T14125] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 1477.443957][T14125] usb 1-1: device descriptor read/64, error -71 [ 1477.664291][T18054] hsr_slave_0: entered promiscuous mode [ 1477.665491][T18054] hsr_slave_1: entered promiscuous mode [ 1477.698646][T14125] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 1477.721803][T18054] debugfs: 'hsr0' already exists in 'hsr' [ 1477.721834][T18054] Cannot create hsr debugfs directory [ 1477.854097][T14125] usb 1-1: device descriptor read/64, error -71 [ 1477.974364][T14125] usb usb1-port1: attempt power cycle [ 1478.330773][T14125] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 1478.346680][T14125] usb 1-1: device descriptor read/8, error -71 [ 1478.584348][T14125] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 1478.606197][T14125] usb 1-1: device descriptor read/8, error -71 [ 1478.724425][T14125] usb usb1-port1: unable to enumerate USB device [ 1479.128423][T13583] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1483.254859][T18009] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1483.373991][T18009] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1484.764926][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.765000][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.816671][T18009] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1485.313915][T18009] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1485.908091][T18054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1485.954951][T18054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1485.993467][T18054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1486.042675][T18054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1486.044267][ T5786] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 1486.184051][ T5786] usb 1-1: device descriptor read/64, error -71 [ 1486.511854][T18009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.618324][T18009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.624008][ T5786] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 1486.640101][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.641097][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.712093][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.720463][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.736242][T13583] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1486.754059][ T5786] usb 1-1: device descriptor read/64, error -71 [ 1486.852088][T18054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.864508][ T5786] usb usb1-port1: attempt power cycle [ 1487.017661][T18054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.074066][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.074213][ T6373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.133337][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.133485][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.216292][ T5786] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 1487.252221][ T5786] usb 1-1: device descriptor read/8, error -71 [ 1487.486084][ T5786] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1487.511678][ T5786] usb 1-1: device descriptor read/8, error -71 [ 1487.615414][ T5786] usb usb1-port1: unable to enumerate USB device [ 1488.151870][T18009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.345633][T18447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1488.345697][T18447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1488.528477][T18054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.296007][T18467] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3736'. [ 1490.623998][ T44] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1490.688688][T18054] veth0_vlan: entered promiscuous mode [ 1490.712286][T18054] veth1_vlan: entered promiscuous mode [ 1490.776540][ T44] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 1490.776568][ T44] usb 2-1: config 7 has no interface number 0 [ 1490.780574][ T44] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1490.780603][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.780622][ T44] usb 2-1: Product: syz [ 1490.780635][ T44] usb 2-1: Manufacturer: syz [ 1490.780649][ T44] usb 2-1: SerialNumber: syz [ 1490.855102][T18054] veth0_macvtap: entered promiscuous mode [ 1490.887367][T18054] veth1_macvtap: entered promiscuous mode [ 1491.017183][T18054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.124001][T18054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.247521][ T6477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.247928][ T6378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.248095][ T6378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.248349][ T6378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.392905][T18009] veth0_vlan: entered promiscuous mode [ 1491.694546][T18009] veth1_vlan: entered promiscuous mode [ 1491.701758][ T44] as10x_usb: device has been detected [ 1491.702676][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1491.771039][ T44] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1492.014239][ T44] as10x_usb: error during firmware upload part1 [ 1492.014971][ T44] Registered device Elgato EyeTV DTT Deluxe [ 1492.058310][T11088] usb 2-1: USB disconnect, device number 117 [ 1492.237293][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.237315][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.259957][T11088] Unregistered device Elgato EyeTV DTT Deluxe [ 1492.270469][T11088] as10x_usb: device has been disconnected [ 1492.773347][T18009] veth0_macvtap: entered promiscuous mode [ 1492.820696][ T6373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.820719][ T6373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.874718][T18009] veth1_macvtap: entered promiscuous mode [ 1493.058620][T18009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.123015][T18009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.195336][ T6378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.231978][ T6378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.234509][ T6378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.238594][ T6378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.570951][T13069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1497.588963][T13069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1497.590919][T13069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1497.592635][T13069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1497.594037][T13069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1497.890628][T14125] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1498.036726][T14125] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 1498.036761][T14125] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 1498.036786][T14125] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1498.040232][T14125] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1498.040258][T14125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.040274][T14125] usb 7-1: Product: syz [ 1498.040286][T14125] usb 7-1: Manufacturer: syz [ 1498.040299][T14125] usb 7-1: SerialNumber: syz [ 1498.042848][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1498.126233][T14125] usb 7-1: config 0 descriptor?? [ 1498.130482][T14125] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 1498.130798][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 1498.165559][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 1498.165879][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 1498.166192][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 1498.166276][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 1498.166571][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 1498.173775][T14125] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1498.252271][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 1498.252587][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 1498.252888][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 1498.253187][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 1498.253485][T14125] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 1498.313057][T14125] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1498.376783][T14125] usb 7-1: USB disconnect, device number 2 [ 1498.435180][T14125] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1498.448836][T14125] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1498.449807][T14125] keyspan 7-1:0.0: device disconnected [ 1499.712697][ T6378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.946119][T13583] Bluetooth: hci2: command tx timeout [ 1500.426108][T13583] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1502.864130][T13583] Bluetooth: hci2: command tx timeout [ 1502.990539][ T6378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.710115][ T6378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.774634][T18599] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3759'. [ 1504.895631][T13583] Bluetooth: hci2: command tx timeout [ 1506.312771][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1506.581890][ T6378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.313154][T13583] Bluetooth: hci2: command tx timeout [ 1510.062486][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1511.181909][T18651] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3771'. [ 1511.321192][T18535] chnl_net:caif_netlink_parms(): no params data found [ 1511.864048][ T6378] bridge_slave_1: left allmulticast mode [ 1511.864074][ T6378] bridge_slave_1: left promiscuous mode [ 1511.864307][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.937881][ T6378] bridge_slave_0: left allmulticast mode [ 1511.937909][ T6378] bridge_slave_0: left promiscuous mode [ 1511.938184][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.189343][T13583] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1515.440858][T18690] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1516.492403][T13583] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1518.265496][T13583] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1519.840365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.902047][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.958979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1520.757694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.071893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.124783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.285368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.472604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1522.047821][ C1] vkms_vblank_simulate: vblank timer overrun [ 1522.072191][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.234765][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.258210][ T6378] bond0 (unregistering): Released all slaves [ 1522.445592][ C1] vkms_vblank_simulate: vblank timer overrun [ 1522.654683][T13583] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1522.825791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1522.884945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.009764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.485166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.721644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.911749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.959495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.985831][T18740] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1524.057807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.221437][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.221579][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.221814][T18535] bridge_slave_0: entered allmulticast mode [ 1524.245457][T18535] bridge_slave_0: entered promiscuous mode [ 1524.253127][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.253262][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.253491][T18535] bridge_slave_1: entered allmulticast mode [ 1524.294676][T18535] bridge_slave_1: entered promiscuous mode [ 1525.062914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.351186][T15697] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1525.452693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.605619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.890655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.916233][T15697] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1525.916260][T15697] usb 1-1: config 7 has no interface number 0 [ 1525.920681][T15697] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1525.920709][T15697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.920728][T15697] usb 1-1: Product: syz [ 1525.920742][T15697] usb 1-1: Manufacturer: syz [ 1525.920755][T15697] usb 1-1: SerialNumber: syz [ 1526.068260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.562411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.844819][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.923080][T13583] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1526.962484][ T6378] hsr_slave_0: left promiscuous mode [ 1526.972368][T15697] as10x_usb: device has been detected [ 1526.976761][T15697] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1527.030108][ T6378] hsr_slave_1: left promiscuous mode [ 1527.031043][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.031067][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.044561][T15697] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1527.080311][T15697] as10x_usb: error during firmware upload part1 [ 1527.081029][T15697] Registered device Elgato EyeTV DTT Deluxe [ 1527.126051][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.126082][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.132992][T15697] usb 1-1: USB disconnect, device number 94 [ 1527.231420][T15697] Unregistered device Elgato EyeTV DTT Deluxe [ 1527.273126][T15697] as10x_usb: device has been disconnected [ 1527.461973][ T6378] veth1_macvtap: left promiscuous mode [ 1527.462085][ T6378] veth0_macvtap: left promiscuous mode [ 1527.462352][ T6378] veth1_vlan: left promiscuous mode [ 1527.462535][ T6378] veth0_vlan: left promiscuous mode [ 1527.840407][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.863984][T13583] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1527.980758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.890432][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.943522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.078929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.374587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.617690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.816240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.923180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.013575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.098516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.176135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.239950][T18799] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3816'. [ 1531.296488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.477533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.497414][T15697] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1531.562113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.679972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.415506][T15697] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 1532.415534][T15697] usb 8-1: config 7 has no interface number 0 [ 1532.418615][T15697] usb 8-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1532.418644][T15697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.418664][T15697] usb 8-1: Product: syz [ 1532.418678][T15697] usb 8-1: Manufacturer: syz [ 1532.418692][T15697] usb 8-1: SerialNumber: syz [ 1532.432387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.081155][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.154113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.215551][T15697] as10x_usb: device has been detected [ 1533.216417][T15697] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1533.252417][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.266211][T15697] usb 8-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1533.271550][T15697] as10x_usb: error during firmware upload part1 [ 1533.272405][T15697] Registered device Elgato EyeTV DTT Deluxe [ 1533.673713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.716540][T14241] usb 8-1: USB disconnect, device number 16 [ 1533.744549][T14241] Unregistered device Elgato EyeTV DTT Deluxe [ 1533.755163][T14241] as10x_usb: device has been disconnected [ 1533.805969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1537.244060][T15696] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1537.304428][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 1537.464158][T15696] usb 8-1: Using ep0 maxpacket: 32 [ 1537.472402][T15696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.472421][T15696] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.472444][T15696] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1537.472455][T15696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.565865][T15696] usb 8-1: config 0 descriptor?? [ 1537.805111][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 1538.098465][T15696] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1538.268680][T15696] usb 8-1: USB disconnect, device number 17 [ 1543.132658][T13069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1543.154508][T13069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1543.156506][T13069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1543.157741][T13069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1543.161380][T13069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1545.245887][T13583] Bluetooth: hci3: command tx timeout [ 1545.748824][T18865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.768689][T18865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1546.023402][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.023475][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.778649][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.838338][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.294912][T13583] Bluetooth: hci3: command tx timeout [ 1548.422365][T18535] team0: Port device team_slave_0 added [ 1548.553574][T18535] team0: Port device team_slave_1 added [ 1548.743626][T18913] usb usb7: usbfs: process 18913 (syz.1.3842) did not claim interface 0 before use [ 1549.309616][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.309632][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.309656][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.373968][T13583] Bluetooth: hci3: command tx timeout [ 1549.386908][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.386924][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.386949][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.267622][T18535] hsr_slave_0: entered promiscuous mode [ 1551.269087][T18535] hsr_slave_1: entered promiscuous mode [ 1551.454135][T13583] Bluetooth: hci3: command tx timeout [ 1556.661810][ T6378] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.002999][ T6378] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.549665][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1561.332094][T13069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1561.353618][T13069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1561.362911][T13069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1561.375403][T13069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1561.376770][T13069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1561.476556][T18869] chnl_net:caif_netlink_parms(): no params data found [ 1561.694262][T18987] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3857'. [ 1561.729800][ T6378] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.193713][ T6378] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.457301][T13583] Bluetooth: hci2: command tx timeout [ 1563.724999][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.725214][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.725456][T18869] bridge_slave_0: entered allmulticast mode [ 1563.754686][T18869] bridge_slave_0: entered promiscuous mode [ 1563.880223][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.880364][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.880610][T18869] bridge_slave_1: entered allmulticast mode [ 1563.932980][T18869] bridge_slave_1: entered promiscuous mode [ 1565.571399][T13583] Bluetooth: hci2: command tx timeout [ 1567.544575][T18869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.620664][T13583] Bluetooth: hci2: command tx timeout [ 1567.643017][T18869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.158741][T18869] team0: Port device team_slave_0 added [ 1568.171516][T18869] team0: Port device team_slave_1 added [ 1568.305597][ T6378] bridge_slave_1: left allmulticast mode [ 1568.305626][ T6378] bridge_slave_1: left promiscuous mode [ 1568.305876][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.400407][ T6378] bridge_slave_0: left allmulticast mode [ 1568.400436][ T6378] bridge_slave_0: left promiscuous mode [ 1568.400718][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.706723][T13583] Bluetooth: hci2: command tx timeout [ 1579.086851][T15696] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 1579.885847][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1579.936580][T15696] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1579.936609][T15696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.962540][T15696] usb 8-1: config 0 descriptor?? [ 1580.215106][T15696] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1581.701377][T15696] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1581.701407][T15696] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1581.714220][T15696] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1581.757552][T15696] usb 8-1: USB disconnect, device number 18 [ 1582.210629][T19135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1585.984655][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.165282][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.193425][ T6378] bond0 (unregistering): Released all slaves [ 1587.381663][T19151] bridge0: entered promiscuous mode [ 1587.382273][T19151] macsec1: entered promiscuous mode [ 1587.384097][T19151] bridge0: port 3(macsec1) entered blocking state [ 1587.384236][T19151] bridge0: port 3(macsec1) entered disabled state [ 1587.384452][T19151] macsec1: entered allmulticast mode [ 1587.384466][T19151] bridge0: entered allmulticast mode [ 1588.476826][T19151] macsec1: left allmulticast mode [ 1588.476849][T19151] bridge0: left allmulticast mode [ 1589.398944][T19151] bridge0: left promiscuous mode [ 1590.504180][T18869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.504197][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.504223][T18869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.534079][T15696] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 1590.567500][T18869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.567525][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.567547][T18869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.697269][T15696] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1590.697299][T15696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.703078][T15696] usb 8-1: config 0 descriptor?? [ 1590.944874][T15696] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1591.510247][T18869] hsr_slave_0: entered promiscuous mode [ 1591.515910][T18869] hsr_slave_1: entered promiscuous mode [ 1591.517773][T18869] debugfs: 'hsr0' already exists in 'hsr' [ 1591.517799][T18869] Cannot create hsr debugfs directory [ 1591.694022][ T6378] hsr_slave_0: left promiscuous mode [ 1591.715148][ T6378] hsr_slave_1: left promiscuous mode [ 1591.716984][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.717066][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.800664][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.800694][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.000526][ T6378] veth1_macvtap: left promiscuous mode [ 1592.000625][ T6378] veth0_macvtap: left promiscuous mode [ 1592.002007][ T6378] veth1_vlan: left promiscuous mode [ 1592.002235][ T6378] veth0_vlan: left promiscuous mode [ 1592.173963][T15696] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1592.173992][T15696] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1592.174269][T15696] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1592.200517][T15696] usb 8-1: USB disconnect, device number 19 [ 1595.904203][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1595.904248][ T37] audit: type=1326 audit(1760498735.215:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.904744][ T37] audit: type=1326 audit(1760498735.215:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.905111][ T37] audit: type=1326 audit(1760498735.235:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.905513][ T37] audit: type=1326 audit(1760498735.245:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.905808][ T37] audit: type=1326 audit(1760498735.245:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.906121][ T37] audit: type=1326 audit(1760498735.255:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6361dd710 code=0x7ffc0000 [ 1595.906366][ T37] audit: type=1326 audit(1760498735.255:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6361dd710 code=0x7ffc0000 [ 1595.906798][ T37] audit: type=1326 audit(1760498735.275:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.907069][ T37] audit: type=1326 audit(1760498735.275:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1595.907313][ T37] audit: type=1326 audit(1760498735.305:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19205 comm="syz.0.3907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1597.804140][ T5786] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 1597.934132][ T5786] usb 1-1: device descriptor read/64, error -71 [ 1598.175384][ T5786] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 1598.304108][ T5786] usb 1-1: device descriptor read/64, error -71 [ 1598.414661][ T5786] usb usb1-port1: attempt power cycle [ 1598.784003][ T5786] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 1598.804792][ T5786] usb 1-1: device descriptor read/8, error -71 [ 1598.834554][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 1599.074026][ T5786] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 1599.094944][ T5786] usb 1-1: device descriptor read/8, error -71 [ 1599.117648][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 1599.224855][ T5786] usb usb1-port1: unable to enumerate USB device [ 1603.179523][T13583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1603.188938][T13583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1603.192144][T13583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1603.198715][T13583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1603.199949][T13583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1604.829693][T18978] chnl_net:caif_netlink_parms(): no params data found [ 1605.213926][T13069] Bluetooth: hci5: command tx timeout [ 1606.632423][T13583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1606.646019][T13583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1606.647958][T13583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1606.649637][T13583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1606.650867][T13583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1607.301311][T13583] Bluetooth: hci5: command tx timeout [ 1607.462907][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.462980][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.648768][T13069] Bluetooth: hci3: command tx timeout [ 1609.651439][T13583] Bluetooth: hci5: command tx timeout [ 1611.521970][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.522193][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.522436][T18978] bridge_slave_0: entered allmulticast mode [ 1611.525574][T18978] bridge_slave_0: entered promiscuous mode [ 1611.543685][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.543910][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.544131][T18978] bridge_slave_1: entered allmulticast mode [ 1611.550819][T18978] bridge_slave_1: entered promiscuous mode [ 1611.694048][T13583] Bluetooth: hci5: command tx timeout [ 1611.694082][T13583] Bluetooth: hci3: command tx timeout [ 1613.003342][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.774110][T13069] Bluetooth: hci3: command tx timeout [ 1613.814545][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.089895][T13069] Bluetooth: hci3: command tx timeout [ 1617.670138][T19222] chnl_net:caif_netlink_parms(): no params data found [ 1619.221676][T13583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1619.250519][T13583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1619.263159][T13583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1619.276828][T13583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1619.279411][T13583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1620.458863][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.459073][T19222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.459314][T19222] bridge_slave_0: entered allmulticast mode [ 1620.462155][T19222] bridge_slave_0: entered promiscuous mode [ 1620.679540][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1620.679584][ T37] audit: type=1326 audit(1760498760.125:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.680177][ T37] audit: type=1326 audit(1760498760.125:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.680514][ T37] audit: type=1326 audit(1760498760.125:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.680628][ T37] audit: type=1326 audit(1760498760.125:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.680920][ T37] audit: type=1326 audit(1760498760.135:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.681356][ T37] audit: type=1326 audit(1760498760.135:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.681679][ T37] audit: type=1326 audit(1760498760.145:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.681969][ T37] audit: type=1326 audit(1760498760.145:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.682434][ T37] audit: type=1326 audit(1760498760.165:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1620.682769][ T37] audit: type=1326 audit(1760498760.185:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19340 comm="syz.7.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1621.454198][T13069] Bluetooth: hci2: command tx timeout [ 1621.639770][T19222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.639900][T19222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.640140][T19222] bridge_slave_1: entered allmulticast mode [ 1621.650880][T19222] bridge_slave_1: entered promiscuous mode [ 1621.678135][T19245] chnl_net:caif_netlink_parms(): no params data found [ 1624.217920][T19222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.231529][T19222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.484370][T13069] Bluetooth: hci2: command tx timeout [ 1625.646463][T19222] team0: Port device team_slave_0 added [ 1625.666083][T19222] team0: Port device team_slave_1 added [ 1625.955645][T19245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.955905][T19245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.956137][T19245] bridge_slave_0: entered allmulticast mode [ 1625.959327][T19245] bridge_slave_0: entered promiscuous mode [ 1625.963689][T19222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.963706][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.963730][T19222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.071953][T19222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.071969][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.071994][T19222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.072852][T19245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.072972][T19245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.073268][T19245] bridge_slave_1: entered allmulticast mode [ 1626.078075][T19245] bridge_slave_1: entered promiscuous mode [ 1626.494182][T13069] Bluetooth: hci2: command tx timeout [ 1626.656083][T19277] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1627.460385][T19245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.466294][T19277] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.466325][T19277] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.466362][T19277] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1627.466384][T19277] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.526628][T19277] usb 8-1: config 0 descriptor?? [ 1627.610029][T19245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.574675][T13069] Bluetooth: hci2: command tx timeout [ 1628.640846][T19375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.641414][T19375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.001588][T19277] usbhid 8-1:0.0: can't add hid device: -71 [ 1629.001723][T19277] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1629.026242][T19277] usb 8-1: USB disconnect, device number 20 [ 1629.796675][T19222] hsr_slave_0: entered promiscuous mode [ 1629.798166][T19222] hsr_slave_1: entered promiscuous mode [ 1629.820860][T19222] debugfs: 'hsr0' already exists in 'hsr' [ 1629.820888][T19222] Cannot create hsr debugfs directory [ 1630.482581][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1630.482636][ T37] audit: type=1326 audit(1760498769.975:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.483121][ T37] audit: type=1326 audit(1760498769.985:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.483465][ T37] audit: type=1326 audit(1760498769.985:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.483706][ T37] audit: type=1326 audit(1760498769.985:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.504269][ T37] audit: type=1326 audit(1760498769.995:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.524337][ T37] audit: type=1326 audit(1760498769.995:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.542145][ T37] audit: type=1326 audit(1760498769.995:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.577379][ T37] audit: type=1326 audit(1760498770.005:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.614547][ T37] audit: type=1326 audit(1760498770.005:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.638056][ T37] audit: type=1326 audit(1760498770.005:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19391 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1630.989912][T19245] team0: Port device team_slave_0 added [ 1631.287923][ T6378] erspan0: left allmulticast mode [ 1631.287952][ T6378] erspan0: left promiscuous mode [ 1631.288208][ T6378] bridge0: port 3(erspan0) entered disabled state [ 1632.420403][ T6378] bridge_slave_1: left allmulticast mode [ 1632.420586][ T6378] bridge_slave_1: left promiscuous mode [ 1632.434612][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.535006][ T6378] bridge_slave_0: left allmulticast mode [ 1632.535036][ T6378] bridge_slave_0: left promiscuous mode [ 1632.535281][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.539451][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1633.467208][ T6378] bridge_slave_1: left allmulticast mode [ 1633.467239][ T6378] bridge_slave_1: left promiscuous mode [ 1633.467481][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.514792][ T6378] bridge_slave_0: left allmulticast mode [ 1633.514811][ T6378] bridge_slave_0: left promiscuous mode [ 1633.514979][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.596602][ T6378] bridge_slave_1: left allmulticast mode [ 1633.596625][ T6378] bridge_slave_1: left promiscuous mode [ 1633.596778][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.664914][ T6378] bridge_slave_0: left allmulticast mode [ 1633.664934][ T6378] bridge_slave_0: left promiscuous mode [ 1633.665177][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.314551][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.384631][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.444695][ T6378] bond0 (unregistering): (slave team0): Releasing backup interface [ 1638.506652][ T6378] bond0 (unregistering): Released all slaves [ 1638.725230][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.804678][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.875810][ T6378] bond0 (unregistering): Released all slaves [ 1639.076267][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.164584][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.225901][ T6378] bond0 (unregistering): Released all slaves [ 1639.381251][T19245] team0: Port device team_slave_1 added [ 1642.227751][T19245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.227769][T19245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.227794][T19245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.262631][T19245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.262647][T19245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.262674][T19245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.044401][T14241] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1643.676725][T14241] usb 8-1: config index 0 descriptor too short (expected 324, got 68) [ 1643.676754][T14241] usb 8-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.676791][T14241] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1643.676875][T14241] usb 8-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1643.678473][T14241] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1643.678501][T14241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1643.678521][T14241] usb 8-1: SerialNumber: syz [ 1644.864797][T13069] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1644.917696][T14241] rndis_host 8-1:253.0: probe with driver rndis_host failed with error -22 [ 1644.923717][T14241] usb 8-1: USB disconnect, device number 21 [ 1645.015541][T19245] hsr_slave_0: entered promiscuous mode [ 1645.016884][T19245] hsr_slave_1: entered promiscuous mode [ 1645.017826][T19245] debugfs: 'hsr0' already exists in 'hsr' [ 1645.017848][T19245] Cannot create hsr debugfs directory [ 1645.019308][T19334] chnl_net:caif_netlink_parms(): no params data found [ 1645.293455][T19460] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3957'. [ 1645.686386][T14241] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1645.854848][T14241] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1645.854874][T14241] usb 1-1: config 7 has no interface number 0 [ 1645.863234][T14241] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1645.863315][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.863386][T14241] usb 1-1: Product: syz [ 1645.863426][T14241] usb 1-1: Manufacturer: syz [ 1645.863502][T14241] usb 1-1: SerialNumber: syz [ 1646.808943][T19334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.809046][T19334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.809249][T19334] bridge_slave_0: entered allmulticast mode [ 1646.811604][T19334] bridge_slave_0: entered promiscuous mode [ 1646.966650][ T6378] hsr_slave_0: left promiscuous mode [ 1647.203539][ T6378] hsr_slave_1: left promiscuous mode [ 1647.205482][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.235437][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.334145][ T6378] hsr_slave_0: left promiscuous mode [ 1648.374170][ T6378] hsr_slave_1: left promiscuous mode [ 1648.375156][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.411202][T14241] as10x_usb: device has been detected [ 1648.412181][T14241] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1648.508129][T14241] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1648.524544][T14241] as10x_usb: error during firmware upload part1 [ 1648.525273][T14241] Registered device Elgato EyeTV DTT Deluxe [ 1648.540997][T14241] usb 1-1: USB disconnect, device number 99 [ 1648.608062][T14241] Unregistered device Elgato EyeTV DTT Deluxe [ 1648.620732][T14241] as10x_usb: device has been disconnected [ 1648.731773][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.774317][ T6378] hsr_slave_0: left promiscuous mode [ 1649.934578][ T6378] hsr_slave_1: left promiscuous mode [ 1649.935551][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.994780][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.010022][T19513] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1652.313921][ T9] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1652.466827][ T9] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1652.466856][ T9] usb 1-1: config 7 has no interface number 0 [ 1652.469948][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1652.469976][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.469996][ T9] usb 1-1: Product: syz [ 1652.470010][ T9] usb 1-1: Manufacturer: syz [ 1652.470023][ T9] usb 1-1: SerialNumber: syz [ 1653.847314][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1653.847359][ T37] audit: type=1326 audit(1760498793.315:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.847955][ T37] audit: type=1326 audit(1760498793.315:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.848258][ T37] audit: type=1326 audit(1760498793.315:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.848530][ T37] audit: type=1326 audit(1760498793.325:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.849020][ T37] audit: type=1326 audit(1760498793.325:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.849289][ T37] audit: type=1326 audit(1760498793.325:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.849580][ T37] audit: type=1326 audit(1760498793.325:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.849985][ T37] audit: type=1326 audit(1760498793.325:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.850234][ T37] audit: type=1326 audit(1760498793.335:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1653.850477][ T37] audit: type=1326 audit(1760498793.335:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19520 comm="syz.7.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1655.135928][ T9] as10x_usb: device has been detected [ 1655.136797][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1655.176359][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1655.201890][ T9] as10x_usb: error during firmware upload part1 [ 1655.202608][ T9] Registered device Elgato EyeTV DTT Deluxe [ 1655.219011][ T9] usb 1-1: USB disconnect, device number 100 [ 1655.249412][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 1655.252926][ T9] as10x_usb: device has been disconnected [ 1659.167575][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1659.167595][ T37] audit: type=1326 audit(1760498798.725:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.169705][ T37] audit: type=1326 audit(1760498798.725:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.294245][ T37] audit: type=1326 audit(1760498798.855:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.294449][ T37] audit: type=1326 audit(1760498798.855:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.294730][ T37] audit: type=1326 audit(1760498798.855:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.484217][ T37] audit: type=1326 audit(1760498799.045:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.484425][ T37] audit: type=1326 audit(1760498799.045:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1659.484669][ T37] audit: type=1326 audit(1760498799.045:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1660.179845][ T37] audit: type=1326 audit(1760498799.735:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1660.181475][ T37] audit: type=1326 audit(1760498799.735:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4924eec9 code=0x7ffc0000 [ 1661.724553][T19556] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3980'. [ 1662.044057][T15696] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1662.197518][T15696] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 1662.197545][T15696] usb 8-1: config 7 has no interface number 0 [ 1662.200601][T15696] usb 8-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1662.200628][T15696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.200638][T15696] usb 8-1: Product: syz [ 1662.200645][T15696] usb 8-1: Manufacturer: syz [ 1662.200652][T15696] usb 8-1: SerialNumber: syz [ 1662.724731][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 1663.844424][T13583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.906693][T13583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.908863][T13583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.912086][T13583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.912968][T13583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1664.851611][T15696] as10x_usb: device has been detected [ 1664.859938][T15696] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1664.925674][T15696] usb 8-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1664.981253][T15696] as10x_usb: error during firmware upload part1 [ 1664.981994][T15696] Registered device Elgato EyeTV DTT Deluxe [ 1664.998870][T15696] usb 8-1: USB disconnect, device number 22 [ 1665.081823][T15696] Unregistered device Elgato EyeTV DTT Deluxe [ 1665.085786][T15696] as10x_usb: device has been disconnected [ 1666.016716][T13583] Bluetooth: hci4: command tx timeout [ 1667.059804][T13069] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1667.931716][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1667.931735][ T37] audit: type=1326 audit(1760498806.875:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.931834][ T37] audit: type=1326 audit(1760498806.885:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.931908][ T37] audit: type=1326 audit(1760498806.885:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.931975][ T37] audit: type=1326 audit(1760498806.885:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.932044][ T37] audit: type=1326 audit(1760498806.885:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.932136][ T37] audit: type=1326 audit(1760498806.895:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.932180][ T37] audit: type=1326 audit(1760498806.895:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.932276][ T37] audit: type=1326 audit(1760498806.895:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.932343][ T37] audit: type=1326 audit(1760498806.895:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1667.932436][ T37] audit: type=1326 audit(1760498806.895:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19585 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1668.056362][T13069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1668.069018][T13069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1668.072707][T13069] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1668.074235][T13069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1669.568259][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.568415][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.679100][T13069] Bluetooth: hci4: command tx timeout [ 1671.173899][T13069] Bluetooth: hci6: command tx timeout [ 1671.339193][T19606] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1671.662596][T14241] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1671.693920][T13069] Bluetooth: hci4: command tx timeout [ 1672.099009][T14241] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1672.099035][T14241] usb 1-1: config 7 has no interface number 0 [ 1672.139755][T14241] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1672.139785][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.139803][T14241] usb 1-1: Product: syz [ 1672.139816][T14241] usb 1-1: Manufacturer: syz [ 1672.139829][T14241] usb 1-1: SerialNumber: syz [ 1673.243938][T13069] Bluetooth: hci6: command tx timeout [ 1673.774088][T13069] Bluetooth: hci4: command tx timeout [ 1674.144644][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 1674.325130][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 1674.461503][T14241] as10x_usb: device has been detected [ 1674.462243][T14241] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1674.480251][T14241] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1674.504957][T14241] as10x_usb: error during firmware upload part1 [ 1674.505671][T14241] Registered device Elgato EyeTV DTT Deluxe [ 1674.568712][T14241] usb 1-1: USB disconnect, device number 101 [ 1674.619812][T14241] Unregistered device Elgato EyeTV DTT Deluxe [ 1674.692227][T14241] as10x_usb: device has been disconnected [ 1675.347361][T13069] Bluetooth: hci6: command tx timeout [ 1675.964790][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 1676.095499][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 1676.834084][T19334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.834926][T19334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.835143][T19334] bridge_slave_1: entered allmulticast mode [ 1676.867844][T19334] bridge_slave_1: entered promiscuous mode [ 1680.406503][T13069] Bluetooth: hci6: command tx timeout [ 1686.946423][T19663] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4003'. [ 1687.344111][T15697] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1687.496419][T15697] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 1687.496447][T15697] usb 8-1: config 7 has no interface number 0 [ 1687.499954][T15697] usb 8-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1687.499983][T15697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.500002][T15697] usb 8-1: Product: syz [ 1687.500017][T15697] usb 8-1: Manufacturer: syz [ 1687.500031][T15697] usb 8-1: SerialNumber: syz [ 1687.938251][T13583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1687.941772][T13583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1687.945807][T13583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1687.955587][T13583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1687.960490][T13583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1690.093927][T13069] Bluetooth: hci3: command tx timeout [ 1690.105056][T15697] as10x_usb: device has been detected [ 1690.106067][T15697] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1690.318185][T15697] usb 8-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1690.353922][T15697] as10x_usb: error during firmware upload part1 [ 1690.354673][T15697] Registered device Elgato EyeTV DTT Deluxe [ 1690.385260][T15697] usb 8-1: USB disconnect, device number 23 [ 1690.445871][T15697] Unregistered device Elgato EyeTV DTT Deluxe [ 1690.456434][T15697] as10x_usb: device has been disconnected [ 1692.184036][T13069] Bluetooth: hci3: command tx timeout [ 1694.257238][T13069] Bluetooth: hci3: command tx timeout [ 1694.811099][T19567] chnl_net:caif_netlink_parms(): no params data found [ 1696.090836][T19587] chnl_net:caif_netlink_parms(): no params data found [ 1696.344684][T13069] Bluetooth: hci3: command tx timeout [ 1697.459025][T19757] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1697.685544][T19567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.685686][T19567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.685930][T19567] bridge_slave_0: entered allmulticast mode [ 1697.688784][T19567] bridge_slave_0: entered promiscuous mode [ 1697.743941][T14241] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1697.786699][T19567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.786835][T19567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.787056][T19567] bridge_slave_1: entered allmulticast mode [ 1697.789851][T19567] bridge_slave_1: entered promiscuous mode [ 1697.926335][T14241] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1697.926363][T14241] usb 1-1: config 7 has no interface number 0 [ 1697.929329][T14241] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1697.929357][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.929375][T14241] usb 1-1: Product: syz [ 1697.929388][T14241] usb 1-1: Manufacturer: syz [ 1697.929402][T14241] usb 1-1: SerialNumber: syz [ 1700.090691][T19567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.090908][T19587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.091026][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.091191][T19587] bridge_slave_0: entered allmulticast mode [ 1700.093728][T19587] bridge_slave_0: entered promiscuous mode [ 1700.137355][T19672] chnl_net:caif_netlink_parms(): no params data found [ 1700.174469][T19587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.176529][T19587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.176798][T19587] bridge_slave_1: entered allmulticast mode [ 1700.179595][T19587] bridge_slave_1: entered promiscuous mode [ 1700.201911][T19567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.481323][T14241] as10x_usb: device has been detected [ 1700.482182][T14241] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1700.530015][T14241] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1700.543965][T14241] as10x_usb: error during firmware upload part1 [ 1700.544706][T14241] Registered device Elgato EyeTV DTT Deluxe [ 1700.554931][T14241] usb 1-1: USB disconnect, device number 102 [ 1700.662720][T14241] Unregistered device Elgato EyeTV DTT Deluxe [ 1700.668032][T14241] as10x_usb: device has been disconnected [ 1700.958346][T19567] team0: Port device team_slave_0 added [ 1700.980555][T19587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.995467][ T6378] IPVS: stop unused estimator thread 0... [ 1701.018500][T19567] team0: Port device team_slave_1 added [ 1701.025415][T19587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.948847][T19567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.948865][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.948891][T19567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.952706][T19587] team0: Port device team_slave_0 added [ 1702.377648][T19567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.377666][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.377692][T19567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.381553][T19587] team0: Port device team_slave_1 added [ 1702.495857][T19672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.496049][T19672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.496538][T19672] bridge_slave_0: entered allmulticast mode [ 1702.499961][T19672] bridge_slave_0: entered promiscuous mode [ 1703.223478][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1703.223524][ T37] audit: type=1326 audit(1760498842.735:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.224673][ T37] audit: type=1326 audit(1760498842.745:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.225012][ T37] audit: type=1326 audit(1760498842.745:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.225444][ T37] audit: type=1326 audit(1760498842.745:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.225532][ T37] audit: type=1326 audit(1760498842.745:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.225567][ T37] audit: type=1326 audit(1760498842.745:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.225633][ T37] audit: type=1326 audit(1760498842.745:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.226002][ T37] audit: type=1326 audit(1760498842.745:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.226437][ T37] audit: type=1326 audit(1760498842.745:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1703.226598][ T37] audit: type=1326 audit(1760498842.745:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19796 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6361deec9 code=0x7ffc0000 [ 1705.225710][T19672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.225848][T19672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.226068][T19672] bridge_slave_1: entered allmulticast mode [ 1705.230561][T19672] bridge_slave_1: entered promiscuous mode [ 1705.352101][T19808] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4026'. [ 1705.763998][T15696] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1705.860569][T19587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.860586][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.860601][T19587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.916310][T15696] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1705.916337][T15696] usb 1-1: config 7 has no interface number 0 [ 1705.918719][T15696] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1705.918741][T15696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.918751][T15696] usb 1-1: Product: syz [ 1705.918758][T15696] usb 1-1: Manufacturer: syz [ 1705.918765][T15696] usb 1-1: SerialNumber: syz [ 1706.186540][T19587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.186558][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.186586][T19587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.191393][T19672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.545416][T19672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.645886][T19567] hsr_slave_0: entered promiscuous mode [ 1706.648395][T19567] hsr_slave_1: entered promiscuous mode [ 1707.456322][T19672] team0: Port device team_slave_0 added [ 1707.709688][T19672] team0: Port device team_slave_1 added [ 1707.838589][T19587] hsr_slave_0: entered promiscuous mode [ 1707.841820][T19587] hsr_slave_1: entered promiscuous mode [ 1707.855940][T19587] debugfs: 'hsr0' already exists in 'hsr' [ 1707.855969][T19587] Cannot create hsr debugfs directory [ 1710.749091][T15696] as10x_usb: device has been detected [ 1710.750128][T15696] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1710.756992][T19672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.757009][T19672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.757034][T19672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.812091][T15696] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1710.841331][T15696] as10x_usb: error during firmware upload part1 [ 1710.842078][T15696] Registered device Elgato EyeTV DTT Deluxe [ 1710.854628][T15696] usb 1-1: USB disconnect, device number 103 [ 1710.894102][T15696] Unregistered device Elgato EyeTV DTT Deluxe [ 1710.896505][T15696] as10x_usb: device has been disconnected [ 1712.726317][T19672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.726337][T19672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1712.726364][T19672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.875544][ T23] ================================================================== [ 1712.875561][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1712.875678][ T23] Read of size 8 at addr ffffc90005d6a090 by task irq_work/0/23 [ 1712.875694][ T23] [ 1712.875715][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1712.875737][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1712.875756][ T23] Call Trace: [ 1712.875767][ T23] [ 1712.875776][ T23] dump_stack_lvl+0x189/0x250 [ 1712.875819][ T23] ? run_irq_workd+0x116/0x190 [ 1712.875838][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.875860][ T23] ? __pfx__printk+0x10/0x10 [ 1712.875884][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1712.875924][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1712.875946][ T23] print_report+0xca/0x240 [ 1712.875970][ T23] ? run_irq_workd+0x116/0x190 [ 1712.875989][ T23] kasan_report+0x118/0x150 [ 1712.876036][ T23] ? run_irq_workd+0x116/0x190 [ 1712.876059][ T23] run_irq_workd+0x116/0x190 [ 1712.876078][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1712.876104][ T23] ? schedule+0x91/0x360 [ 1712.876245][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1712.876276][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1712.876292][ T23] smpboot_thread_fn+0x542/0xa60 [ 1712.876310][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1712.876331][ T23] kthread+0x711/0x8a0 [ 1712.876352][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1712.876369][ T23] ? __pfx_kthread+0x10/0x10 [ 1712.876387][ T23] ? rt_spin_unlock+0x150/0x200 [ 1712.876411][ T23] ? rt_spin_unlock+0x161/0x200 [ 1712.876430][ T23] ? __pfx_kthread+0x10/0x10 [ 1712.876451][ T23] ret_from_fork+0x4bc/0x870 [ 1712.876483][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1712.876511][ T23] ? __switch_to_asm+0x39/0x70 [ 1712.876533][ T23] ? __switch_to_asm+0x33/0x70 [ 1712.876554][ T23] ? __pfx_kthread+0x10/0x10 [ 1712.876575][ T23] ret_from_fork_asm+0x1a/0x30 [ 1712.876607][ T23] [ 1712.876614][ T23] [ 1712.876619][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1712.876644][ T23] Memory state around the buggy address: [ 1712.876655][ T23] ffffc90005d69f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1712.876667][ T23] ffffc90005d6a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1712.876680][ T23] >ffffc90005d6a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1712.876693][ T23] ^ [ 1712.876703][ T23] ffffc90005d6a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1712.876716][ T23] ffffc90005d6a180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1712.876725][ T23] ================================================================== [ 1712.876746][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1712.876759][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1712.876780][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1712.876791][ T23] Call Trace: [ 1712.876799][ T23] [ 1712.876806][ T23] dump_stack_lvl+0x99/0x250 [ 1712.876828][ T23] ? __asan_memcpy+0x40/0x70 [ 1712.876852][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.876874][ T23] ? __pfx__printk+0x10/0x10 [ 1712.876901][ T23] vpanic+0x237/0x6d0 [ 1712.876925][ T23] ? __pfx_vpanic+0x10/0x10 [ 1712.876946][ T23] panic+0xb9/0xc0 [ 1712.876963][ T23] ? __pfx_panic+0x10/0x10 [ 1712.876979][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1712.877032][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1712.877062][ T23] ? run_irq_workd+0x116/0x190 [ 1712.877089][ T23] check_panic_on_warn+0x89/0xb0 [ 1712.877112][ T23] ? run_irq_workd+0x116/0x190 [ 1712.877131][ T23] end_report+0x78/0x160 [ 1712.877150][ T23] kasan_report+0x129/0x150 [ 1712.877170][ T23] ? run_irq_workd+0x116/0x190 [ 1712.877193][ T23] run_irq_workd+0x116/0x190 [ 1712.877212][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1712.877231][ T23] ? schedule+0x91/0x360 [ 1712.877255][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1712.877273][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1712.877289][ T23] smpboot_thread_fn+0x542/0xa60 [ 1712.877306][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1712.877327][ T23] kthread+0x711/0x8a0 [ 1712.877348][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1712.877366][ T23] ? __pfx_kthread+0x10/0x10 [ 1712.877385][ T23] ? rt_spin_unlock+0x150/0x200 [ 1712.877408][ T23] ? rt_spin_unlock+0x161/0x200 [ 1712.877427][ T23] ? __pfx_kthread+0x10/0x10 [ 1712.877447][ T23] ret_from_fork+0x4bc/0x870 [ 1712.877472][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1712.877499][ T23] ? __switch_to_asm+0x39/0x70 [ 1712.877520][ T23] ? __switch_to_asm+0x33/0x70 [ 1712.877540][ T23] ? __pfx_kthread+0x10/0x10 [ 1712.877560][ T23] ret_from_fork_asm+0x1a/0x30 [ 1712.877589][ T23] [ 1712.877935][ T23] Kernel Offset: disabled