last executing test programs: 26m41.929463181s ago: executing program 0 (id=3486): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0xd000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0xdddd1000, 0x10, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xf, 0x1, 0x2, 0x0, 0x3, 0x1, 0xd, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x7, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x3, 0x1, 0x3, 0x9, 0xd, 0x6, 0x1, 0x4, 0x5, 0x4b}, {0x8000000, 0x8000000, 0xe, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0xfb, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x4, 0xf, 0x5, 0x7, 0x9, 0xf8}, {0x8080000, 0x8080000, 0x3, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0x80a0000, 0x9}, {0x1000, 0xffff}, 0x40010000, 0x0, 0x8080000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0xfffffffffffffffd) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 26m41.568299457s ago: executing program 0 (id=3489): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x26}, 0x10) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 26m41.347659516s ago: executing program 0 (id=3492): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 26m41.038204749s ago: executing program 0 (id=3496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m40.537362319s ago: executing program 0 (id=3502): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 26m39.514962605s ago: executing program 0 (id=3509): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000001c0)={0xbd6b, 0x4, 0x0, 0xf7ff, 0xdf, "4ae23ae17df2e9890009000005000000001000", 0x406, 0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3a) 26m24.431530668s ago: executing program 32 (id=3509): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000001c0)={0xbd6b, 0x4, 0x0, 0xf7ff, 0xdf, "4ae23ae17df2e9890009000005000000001000", 0x406, 0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3a) 21m28.68798338s ago: executing program 2 (id=6927): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) unshare(0x26020480) syz_open_dev$evdev(0x0, 0x200, 0x100080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) sendfile(r0, r1, 0x0, 0x20000023896) 21m28.567396028s ago: executing program 2 (id=6929): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r4, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004280)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x1, 0x4000, 0x4000000, r4, r5, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa8, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x26000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x101, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x529432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x3ff, 0x401, 0x6, 0x5, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0xfffffbff, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x8000, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x800001, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 21m28.38771723s ago: executing program 2 (id=6932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0x170) 21m28.271828479s ago: executing program 2 (id=6933): socket$inet(0x2, 0x3, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) 21m28.247319754s ago: executing program 2 (id=6934): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) write$FUSE_BMAP(r5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21m28.091800464s ago: executing program 2 (id=6936): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 21m2.54736194s ago: executing program 4 (id=6994): socket$inet(0x2, 0x3, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setresuid(0xee01, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xae47, 0x2, 0x1, 0x8}, 0x26, [0x8, 0x3ff, 0x9, 0x6, 0xbadc, 0x2, 0x80000001, 0x7, 0x1, 0x8, 0x4, 0xffff, 0x5, 0x7ff, 0x53, 0xf4f7, 0x77, 0x9, 0xfffffff9, 0x636a, 0xffff, 0x8, 0x255b, 0x81, 0x8, 0x7, 0xffffffff, 0x2, 0xfffffffd, 0x7, 0x5, 0x3, 0xfffffff7, 0x62dbf2cf, 0x9, 0x7, 0x4, 0xe72, 0x3acf, 0xa49, 0x0, 0xfff, 0x8, 0x3, 0x0, 0x7, 0x40, 0x6, 0x5, 0xfffffffd, 0x8, 0x8, 0x7f5, 0x400, 0xfffffff3, 0xf, 0x3, 0x1, 0x81, 0xb1a, 0x7, 0x3, 0x8001, 0x265b21d6], [0x7, 0x5, 0x7, 0x9, 0x8, 0xc, 0x7, 0x2, 0x0, 0x9371, 0x3ff, 0x9, 0x8, 0x5, 0x8, 0x1, 0x5, 0x6, 0x5, 0x5, 0x365, 0x3, 0x7, 0xff, 0x0, 0x42, 0x7, 0x0, 0x0, 0x101, 0xfffffff7, 0x2, 0x81, 0x3, 0x2, 0xf7, 0x80000000, 0x5, 0xaa3, 0x40, 0x8, 0x7, 0x80000001, 0x2, 0xf84e, 0xfffffffe, 0x1107, 0x5, 0x3, 0x5, 0x9, 0x501b, 0x4, 0x8, 0x0, 0x8, 0x5, 0x10000, 0x7, 0x8, 0x2, 0x800000, 0x1, 0xa840], [0xd, 0x1e9, 0x7, 0x8, 0xfff, 0xf, 0x7, 0x9, 0x62, 0x8, 0x6, 0x400000d3, 0x598b, 0x1, 0x3, 0x56d3, 0x9, 0x5, 0x2, 0x1, 0x3, 0x2, 0x8, 0x7, 0x40, 0x9, 0x200, 0xff, 0x7, 0x8001, 0xc, 0x3, 0x5, 0x4, 0x6, 0x0, 0xd3, 0x955b, 0x8001, 0x5, 0x1, 0x800, 0xc1e59a3d, 0x9, 0x1, 0xa76, 0x1, 0xfffffffd, 0x80, 0x3, 0x45, 0x2, 0x59, 0x5, 0xd91, 0x1, 0x8, 0xef, 0x7, 0x1c, 0xfffffff9, 0x3, 0x5], [0xc25, 0x40, 0x0, 0x2, 0xeb2d, 0x0, 0x9, 0x0, 0x4, 0x9, 0x558c, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0xb94, 0x3, 0x800, 0x8, 0x9, 0x7, 0x1, 0x3, 0x9, 0x910, 0x2, 0x9, 0x0, 0xfffffffa, 0x101, 0x3000, 0x35, 0x5, 0x1000, 0x9, 0x2, 0x6, 0x9, 0x6f5a506b, 0x8, 0x1, 0x5, 0x9, 0x41cc, 0x800, 0x101, 0xfff, 0x5, 0x0, 0x5, 0x34, 0x9, 0x8, 0x4, 0x7f, 0x3, 0xe29, 0x1, 0x4, 0x6, 0x0, 0xe, 0x1400000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) 20m58.62757274s ago: executing program 4 (id=7003): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa467", 0xb1, 0x0, 0x0, 0x0) 20m57.673807861s ago: executing program 4 (id=7005): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000001c0)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="9687c5a35657e7be50afcfa65975ee9f57c4123f0a37f136541ca9606587771f1ff67f8eab62b2869a54de35f206b3ccc45f10e394d3cfeeeccbc6e6fb9848481a7e531143270a701b1f32745e75ee4b153c121b8e68d3de7310b792c30ec083559dc8a9025710ee2f7809e490f6bfd974c2b90b53ba3609a40371dd2131f245fd66cda056d9f6975469242b4c91f65f2ef70121be0e2c3e382b863803ed4b2da2a259dd116588d4e8de2f2ddf48fe3af86d6677746ce1839611c99e9972ac0887e51eb58bd8960762d58412839d658e489c0597eb0f9351383fbcffa3f0a71c4612e58654c5", 0xe6}], 0x1) 20m48.372003646s ago: executing program 4 (id=7018): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) 20m43.231883816s ago: executing program 4 (id=7028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 20m41.741073096s ago: executing program 4 (id=7030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 20m24.879704434s ago: executing program 33 (id=7030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 18m28.079940917s ago: executing program 5 (id=7286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0xffffffffffdffffe, 0x1) 18m25.985471286s ago: executing program 5 (id=7287): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendto(0xffffffffffffffff, &(0x7f0000000140)="4c9e7c7e4eafe783643aea030babd56d90a00d126a73", 0x16, 0x40010, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x49, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x7, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4a004}, 0x44050) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff16, 0x240080c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a531"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) write$ppp(r4, &(0x7f0000000400)="b288edc8ac7679b138d030895fcaf7b2e4a0cb3fac3a307e319dcefd0c1f2e353706c87b8844bdffed6381716f597a8cba3524250da267ce77b7ce09428292b1789e3df0106f38900af8e529e3", 0x4d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x5, 0x0, 0x2, 0x4, 0x3, 0x1}, &(0x7f0000000280)=0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0x21, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000000)=0x200, 0x4) recvfrom$inet(r6, 0x0, 0x0, 0x120, 0x0, 0x0) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 18m23.314918797s ago: executing program 3 (id=7292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$tun(r0, &(0x7f0000003300)=ANY=[@ANYBLOB], 0xfea) 18m12.206900371s ago: executing program 5 (id=7297): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 18m12.15194428s ago: executing program 5 (id=7298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xfcff, 0x2000000, 0x0, 0x2, 0xfcff, &(0x7f00000002c0)="e074"}) 18m12.120572465s ago: executing program 5 (id=7299): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18m11.755871997s ago: executing program 3 (id=7300): io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) 18m10.583676568s ago: executing program 5 (id=7301): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10205, 0x2, 0x8000000, 0x2000, &(0x7f000010f000/0x2000)=nil}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 18m9.521079368s ago: executing program 3 (id=7302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1200000004000000090000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000bf61d79c7af300000000870900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0xfffffffd) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 18m8.087785348s ago: executing program 3 (id=7304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(0x0, &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 18m7.87820972s ago: executing program 3 (id=7305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_CMAP(r3, 0x4b70, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) timer_create(0x2, &(0x7f0000000180)={0x0, 0x9, 0x0, @tid=r0}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18m4.091709914s ago: executing program 3 (id=7307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000740)={r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) getrusage(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050b2bbd7000fcfbdf254a00000008000100000200303000000000303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f00000003c0)=""/79, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 17m54.969606044s ago: executing program 34 (id=7301): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10205, 0x2, 0x8000000, 0x2000, &(0x7f000010f000/0x2000)=nil}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 17m48.200573856s ago: executing program 35 (id=7307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000740)={r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) getrusage(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050b2bbd7000fcfbdf254a00000008000100000200303000000000303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f00000003c0)=""/79, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.445371319s ago: executing program 1 (id=8166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xfffffffffffffe80, &(0x7f0000000300)={@multicast, @random="000803006600", @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}}}}}, 0x0) 4.727755495s ago: executing program 1 (id=8167): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.730898501s ago: executing program 1 (id=8168): sched_setscheduler(0x0, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.571617107s ago: executing program 1 (id=8169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setuid(0xee01) syz_open_dev$video4linux(&(0x7f0000000000), 0x79, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="124437675b30efcddf090f05b7c2000000010902120001000000000904000000d8b96e0080b27ccdb369225f4642cf2c283a3f252a03"], 0x0) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) 372.712718ms ago: executing program 1 (id=8170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000818450d98744ec000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0x11adb81c, 0x10, @private0, @loopback, 0x1, 0x40, 0xcdd3, 0x9fc}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 0s ago: executing program 1 (id=8171): fremovexattr(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) unshare(0x20400) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_io_uring_setup(0x2fa2, &(0x7f0000001740)={0x0, 0xb403, 0x40, 0x2, 0x1dc}, &(0x7f0000000040), &(0x7f0000001800)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000018c0)={0x4000, 0x80, 0x8001}, 0x0) unshare(0x26020480) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): oth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1627.993242][T24696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1627.995973][T24696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1629.080657][T23327] usb 2-1: USB disconnect, device number 49 [ 1629.086071][T23327] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1630.869859][T18749] Bluetooth: hci1: command tx timeout [ 1630.965007][T24696] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1630.980352][T24696] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1630.983829][T24696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1630.985072][T24696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1630.985970][T24696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1633.411265][T18749] Bluetooth: hci1: command tx timeout [ 1633.411339][T18749] Bluetooth: hci6: command tx timeout [ 1633.574293][T19128] lec:lec_start_xmit: lec0:No lecd attached [ 1634.029997][T28764] chnl_net:caif_netlink_parms(): no params data found [ 1634.350028][T28602] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1634.483533][T28602] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1634.528112][T28602] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1634.660818][T28602] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1635.079338][T28764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.081606][T28764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.081837][T28764] bridge_slave_0: entered allmulticast mode [ 1635.084320][T28764] bridge_slave_0: entered promiscuous mode [ 1635.126257][T28764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.126372][T28764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.126571][T28764] bridge_slave_1: entered allmulticast mode [ 1635.131283][T28764] bridge_slave_1: entered promiscuous mode [ 1635.507682][T24696] Bluetooth: hci6: command tx timeout [ 1635.507717][T24696] Bluetooth: hci1: command tx timeout [ 1635.533094][T28764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1635.553792][T28617] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1635.754357][T28764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.770345][T28617] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1636.870089][T28617] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1636.965689][T28617] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1637.197431][T28764] team0: Port device team_slave_0 added [ 1637.254981][T28764] team0: Port device team_slave_1 added [ 1637.488913][T28764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.488929][T28764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.488954][T28764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.513508][T28764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.513525][T28764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.513549][T28764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.528027][T18749] Bluetooth: hci1: command tx timeout [ 1637.528066][T18749] Bluetooth: hci6: command tx timeout [ 1637.538847][T28778] chnl_net:caif_netlink_parms(): no params data found [ 1638.299036][T28764] hsr_slave_0: entered promiscuous mode [ 1638.318418][T28764] hsr_slave_1: entered promiscuous mode [ 1639.048055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 1639.048094][ C0] lec:lec_tx_timeout: lec0 [ 1639.999345][T24696] Bluetooth: hci6: command tx timeout [ 1640.261425][T28778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.262183][T28778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.262363][T28778] bridge_slave_0: entered allmulticast mode [ 1640.268849][T28778] bridge_slave_0: entered promiscuous mode [ 1641.244578][T28778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.244732][T28778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.244992][T28778] bridge_slave_1: entered allmulticast mode [ 1641.251211][T28778] bridge_slave_1: entered promiscuous mode [ 1641.965200][T28778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.030452][T28778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.362184][T28778] team0: Port device team_slave_0 added [ 1644.050101][T28778] team0: Port device team_slave_1 added [ 1644.473970][T28778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.473985][T28778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.474004][T28778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.558894][T28778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.558909][T28778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.558928][T28778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.934102][T26483] Bluetooth: hci3: Frame reassembly failed (-84) [ 1645.024258][T28602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.471728][T28778] hsr_slave_0: entered promiscuous mode [ 1645.472594][T28778] hsr_slave_1: entered promiscuous mode [ 1645.473188][T28778] debugfs: 'hsr0' already exists in 'hsr' [ 1645.473204][T28778] Cannot create hsr debugfs directory [ 1646.151303][T28602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.202951][T28617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.219331][T26444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.219473][T26444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.278626][T26441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.278832][T26441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.402346][ T12] bridge_slave_1: left allmulticast mode [ 1646.402374][ T12] bridge_slave_1: left promiscuous mode [ 1646.402597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.458995][ T12] bridge_slave_0: left allmulticast mode [ 1646.459014][ T12] bridge_slave_0: left promiscuous mode [ 1646.459176][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.521314][ T12] bridge_slave_1: left allmulticast mode [ 1646.521335][ T12] bridge_slave_1: left promiscuous mode [ 1646.521522][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.599273][ T12] bridge_slave_0: left allmulticast mode [ 1646.599292][ T12] bridge_slave_0: left promiscuous mode [ 1646.599506][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.983124][T18749] Bluetooth: hci3: command 0x1003 tx timeout [ 1647.001653][T24696] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1652.448800][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.592344][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.789196][ T12] bond0 (unregistering): Released all slaves [ 1653.824008][T28909] futex_wake_op: syz.1.7899 tries to shift op by -1; fix this program [ 1655.695087][T18749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1655.861540][T18749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1655.879512][T18749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1655.884216][T18749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1655.886197][T18749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1656.099075][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.179171][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.221881][ T12] bond0 (unregistering): Released all slaves [ 1656.807270][T28617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1657.136100][ T12] hsr_slave_0: left promiscuous mode [ 1657.168448][ T12] hsr_slave_1: left promiscuous mode [ 1657.170459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.235113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.402275][ T12] hsr_slave_0: left promiscuous mode [ 1657.438351][ T12] hsr_slave_1: left promiscuous mode [ 1657.439025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.791460][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.010611][T18749] Bluetooth: hci3: command tx timeout [ 1659.611925][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1659.905992][T24696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1659.928665][T24696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1659.930205][T24696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1659.932084][T24696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1659.932954][T24696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1660.747440][T24696] Bluetooth: hci3: command tx timeout [ 1661.138850][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1662.029864][T24696] Bluetooth: hci4: command tx timeout [ 1662.838650][T24696] Bluetooth: hci3: command tx timeout [ 1664.088388][T24696] Bluetooth: hci4: command tx timeout [ 1664.888165][T24696] Bluetooth: hci3: command tx timeout [ 1665.578665][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1665.870504][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1666.168269][T24696] Bluetooth: hci4: command tx timeout [ 1668.272204][T24696] Bluetooth: hci4: command tx timeout [ 1668.971557][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.971655][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.974190][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1670.730967][T28764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1671.902909][T28764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1672.076728][T28764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1672.164272][T28764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1672.278160][ T5891] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1672.475324][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1672.475350][ T5891] usb 2-1: config 0 has no interface number 0 [ 1672.475396][ T5891] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.475418][ T5891] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.475441][ T5891] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1672.475454][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.576849][ T5891] usb 2-1: config 0 descriptor?? [ 1673.053029][ T5891] hid_parser_main: 15 callbacks suppressed [ 1673.053053][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.053085][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.053107][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.053129][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.053152][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.053174][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.053197][ T5891] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 1673.078254][ T5891] prodikeys 0003:041E:2801.000D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 1673.082520][ T5891] hid_prodikeys: hid-prodikeys: failed to find output report [ 1673.082520][ T5891] [ 1673.288713][T28914] chnl_net:caif_netlink_parms(): no params data found [ 1673.388687][T23327] usb 2-1: USB disconnect, device number 50 [ 1673.678852][T28941] chnl_net:caif_netlink_parms(): no params data found [ 1674.008133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 1674.008171][ C0] lec:lec_tx_timeout: lec0 [ 1676.375629][T28914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.375750][T28914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.375895][T28914] bridge_slave_0: entered allmulticast mode [ 1676.377448][T28914] bridge_slave_0: entered promiscuous mode [ 1677.277492][T28914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.277619][T28914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.277821][T28914] bridge_slave_1: entered allmulticast mode [ 1677.281673][T28914] bridge_slave_1: entered promiscuous mode [ 1677.610326][T28778] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1677.722966][T28914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.725695][T28778] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1677.776635][T28941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.776904][T28941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.777104][T28941] bridge_slave_0: entered allmulticast mode [ 1677.781980][T28941] bridge_slave_0: entered promiscuous mode [ 1677.798129][T28914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.798437][T28778] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1677.851875][T28941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.852042][T28941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.852240][T28941] bridge_slave_1: entered allmulticast mode [ 1677.853917][T28941] bridge_slave_1: entered promiscuous mode [ 1677.920024][T28778] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1678.401909][T28914] team0: Port device team_slave_0 added [ 1678.429683][T28941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.432116][T28914] team0: Port device team_slave_1 added [ 1678.444921][T28941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.531778][T28764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.160941][T28914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.160958][T28914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.160982][T28914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.345716][T28941] team0: Port device team_slave_0 added [ 1679.346904][T28914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.346919][T28914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.346943][T28914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.363130][T28941] team0: Port device team_slave_1 added [ 1679.780670][T28941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.780683][T28941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.780698][T28941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.073761][T28941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.073778][T28941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.073793][T28941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.353962][T28914] hsr_slave_0: entered promiscuous mode [ 1681.355438][T28914] hsr_slave_1: entered promiscuous mode [ 1681.356454][T28914] debugfs: 'hsr0' already exists in 'hsr' [ 1681.356479][T28914] Cannot create hsr debugfs directory [ 1681.360663][T28764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.689094][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.689314][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.735168][T28941] hsr_slave_0: entered promiscuous mode [ 1681.736937][T28941] hsr_slave_1: entered promiscuous mode [ 1681.745377][T28941] debugfs: 'hsr0' already exists in 'hsr' [ 1681.745406][T28941] Cannot create hsr debugfs directory [ 1681.950334][T26435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.950476][T26435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.582008][T28778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.004740][T28778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.044066][T26463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.050533][T26463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.391140][T26435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.391401][T26435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.585260][T28764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1686.787134][ T12] bridge_slave_1: left allmulticast mode [ 1686.787164][ T12] bridge_slave_1: left promiscuous mode [ 1686.787426][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.855328][ T12] bridge_slave_0: left allmulticast mode [ 1686.855358][ T12] bridge_slave_0: left promiscuous mode [ 1686.855594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.930936][ T12] bridge_slave_1: left allmulticast mode [ 1686.930956][ T12] bridge_slave_1: left promiscuous mode [ 1686.931121][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.989080][ T12] bridge_slave_0: left allmulticast mode [ 1686.989101][ T12] bridge_slave_0: left promiscuous mode [ 1686.989268][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.028954][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.108614][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.170369][ T12] bond0 (unregistering): Released all slaves [ 1689.546510][T18749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1689.567695][T18749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1689.576961][T18749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1689.612944][T18749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1689.613688][T18749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1691.119716][T18749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1691.123742][T18749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1691.125434][T18749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1691.126847][T18749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1691.135288][T18749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1691.220254][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.298805][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.360576][ T12] bond0 (unregistering): Released all slaves [ 1691.691497][T24696] Bluetooth: hci0: command tx timeout [ 1692.318189][ T12] hsr_slave_0: left promiscuous mode [ 1692.358158][ T12] hsr_slave_1: left promiscuous mode [ 1692.358862][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.409457][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.568180][ T12] hsr_slave_0: left promiscuous mode [ 1692.590384][ T12] hsr_slave_1: left promiscuous mode [ 1692.591159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.629136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.228288][T24696] Bluetooth: hci5: command tx timeout [ 1693.419299][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1693.589540][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1693.768078][T24696] Bluetooth: hci0: command tx timeout [ 1695.288127][T24696] Bluetooth: hci5: command tx timeout [ 1695.848048][T24696] Bluetooth: hci0: command tx timeout [ 1696.080321][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1696.238729][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1697.371499][T24696] Bluetooth: hci5: command tx timeout [ 1697.928130][T24696] Bluetooth: hci0: command tx timeout [ 1699.453812][T24696] Bluetooth: hci5: command tx timeout [ 1700.571649][T29077] chnl_net:caif_netlink_parms(): no params data found [ 1700.944946][T19128] lec:lec_start_xmit: lec0:No lecd attached [ 1702.180300][T29074] chnl_net:caif_netlink_parms(): no params data found [ 1702.651541][T29077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.651753][T29077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.651998][T29077] bridge_slave_0: entered allmulticast mode [ 1702.654360][T29077] bridge_slave_0: entered promiscuous mode [ 1702.709549][T29077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.709686][T29077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.709931][T29077] bridge_slave_1: entered allmulticast mode [ 1702.713014][T29077] bridge_slave_1: entered promiscuous mode [ 1703.127547][T29074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.127686][T29074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.129409][T29074] bridge_slave_0: entered allmulticast mode [ 1703.133407][T29074] bridge_slave_0: entered promiscuous mode [ 1703.150046][T29077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.190713][T29074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.190871][T29074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.191123][T29074] bridge_slave_1: entered allmulticast mode [ 1703.193944][T29074] bridge_slave_1: entered promiscuous mode [ 1703.202312][T29077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.765208][T29074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.854166][T29077] team0: Port device team_slave_0 added [ 1704.879793][T29074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.911184][T29077] team0: Port device team_slave_1 added [ 1705.540209][T29074] team0: Port device team_slave_0 added [ 1705.720065][T29077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.720077][T29077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.720091][T29077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.729615][T29074] team0: Port device team_slave_1 added [ 1705.731489][T28914] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1706.007940][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 1706.007975][ C0] lec:lec_tx_timeout: lec0 [ 1706.376781][T29077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.376797][T29077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.376815][T29077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.519182][T28914] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1706.651739][T28914] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1706.984313][T29074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.984331][T29074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.984356][T29074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.986092][T28914] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1707.082792][T29074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.082809][T29074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.082834][T29074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.894195][T29077] hsr_slave_0: entered promiscuous mode [ 1707.895063][T29077] hsr_slave_1: entered promiscuous mode [ 1707.895631][T29077] debugfs: 'hsr0' already exists in 'hsr' [ 1707.895647][T29077] Cannot create hsr debugfs directory [ 1707.908154][T28069] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1708.082971][T28069] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1708.083006][T28069] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.083023][T28069] usb 2-1: config 0 has no interface number 0 [ 1708.086573][T28069] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1708.086600][T28069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.086618][T28069] usb 2-1: Product: syz [ 1708.086631][T28069] usb 2-1: Manufacturer: syz [ 1708.086644][T28069] usb 2-1: SerialNumber: syz [ 1708.146597][T28069] usb 2-1: config 0 descriptor?? [ 1708.159223][T28069] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 1708.274383][T29074] hsr_slave_0: entered promiscuous mode [ 1708.275211][T29074] hsr_slave_1: entered promiscuous mode [ 1708.275782][T29074] debugfs: 'hsr0' already exists in 'hsr' [ 1708.275798][T29074] Cannot create hsr debugfs directory [ 1708.277318][T28941] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1708.337363][T28941] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1708.476023][T28941] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1708.665359][T28941] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1710.213506][T28914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.266945][T28914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.531788][T26441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.532071][T26441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.551879][T28941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.567765][T26441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.575397][T26441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.643297][T28941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.701372][T28927] usb 2-1: USB disconnect, device number 51 [ 1710.714153][T26443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.720282][T26443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.835159][T26435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.838926][T26435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.264703][ T12] bridge_slave_1: left allmulticast mode [ 1711.264732][ T12] bridge_slave_1: left promiscuous mode [ 1711.265007][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.339642][ T12] bridge_slave_0: left allmulticast mode [ 1711.339673][ T12] bridge_slave_0: left promiscuous mode [ 1711.339931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.413140][ T12] bridge_slave_1: left allmulticast mode [ 1711.413171][ T12] bridge_slave_1: left promiscuous mode [ 1711.413413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.469840][ T12] bridge_slave_0: left allmulticast mode [ 1711.469870][ T12] bridge_slave_0: left promiscuous mode [ 1711.470270][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.179802][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.228651][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.280683][ T12] bond0 (unregistering): Released all slaves [ 1718.342473][T18749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1718.360175][T18749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1718.361758][T18749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1718.364074][T18749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1718.364831][T18749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1719.839412][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1719.899436][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.920587][ T12] bond0 (unregistering): Released all slaves [ 1720.411384][T24696] Bluetooth: hci1: command tx timeout [ 1720.940401][ T12] hsr_slave_0: left promiscuous mode [ 1721.017945][ T12] hsr_slave_1: left promiscuous mode [ 1721.019084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.309634][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.361746][T18749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1721.440623][T18749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1721.456311][T18749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1721.462706][T18749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1721.496775][T18749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1721.588400][ T12] hsr_slave_0: left promiscuous mode [ 1721.608354][ T12] hsr_slave_1: left promiscuous mode [ 1721.609253][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.649108][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.508474][T18749] Bluetooth: hci1: command tx timeout [ 1723.209329][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1723.458601][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1723.551394][T18749] Bluetooth: hci4: command tx timeout [ 1724.568122][T18749] Bluetooth: hci1: command tx timeout [ 1725.630981][T18749] Bluetooth: hci4: command tx timeout [ 1726.648144][T18749] Bluetooth: hci1: command tx timeout [ 1727.069932][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1727.329089][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1727.708155][T18749] Bluetooth: hci4: command tx timeout [ 1729.792224][T18749] Bluetooth: hci4: command tx timeout [ 1730.414660][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.414759][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.416719][T29244] bridge0: port 1(bond0) entered blocking state [ 1730.416912][T29244] bridge0: port 1(bond0) entered disabled state [ 1730.417143][T29244] bond0: entered allmulticast mode [ 1730.417159][T29244] bond_slave_0: entered allmulticast mode [ 1730.417178][T29244] bond_slave_1: entered allmulticast mode [ 1730.423346][T29244] bond0: entered promiscuous mode [ 1730.423366][T29244] bond_slave_0: entered promiscuous mode [ 1730.423402][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1730.423597][T29244] bond_slave_1: entered promiscuous mode [ 1731.865699][T29252] input: syz1 as /devices/virtual/input/input9 [ 1732.853979][T29224] chnl_net:caif_netlink_parms(): no params data found [ 1734.564065][T29238] chnl_net:caif_netlink_parms(): no params data found [ 1734.855104][T29224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.855213][T29224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.855418][T29224] bridge_slave_0: entered allmulticast mode [ 1734.857722][T29224] bridge_slave_0: entered promiscuous mode [ 1734.917349][T29224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.917459][T29224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.917654][T29224] bridge_slave_1: entered allmulticast mode [ 1734.920063][T29224] bridge_slave_1: entered promiscuous mode [ 1736.173531][T29224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.373302][T29224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.565326][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6140 ms [ 1736.565365][ C0] lec:lec_tx_timeout: lec0 [ 1738.596032][T29306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7958'. [ 1738.687460][T26447] Bluetooth: hci3: Frame reassembly failed (-84) [ 1738.687547][T26447] Bluetooth: hci3: Frame reassembly failed (-84) [ 1738.687610][T26447] Bluetooth: hci3: Frame reassembly failed (-84) [ 1738.687671][T26447] Bluetooth: hci3: Frame reassembly failed (-84) [ 1738.687725][T26447] Bluetooth: hci3: Frame reassembly failed (-84) [ 1738.687779][T26447] Bluetooth: hci3: Frame reassembly failed (-84) [ 1738.808292][T29224] team0: Port device team_slave_0 added [ 1738.810275][T29238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.810445][T29238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.810655][T29238] bridge_slave_0: entered allmulticast mode [ 1738.812751][T29238] bridge_slave_0: entered promiscuous mode [ 1738.818976][T29224] team0: Port device team_slave_1 added [ 1738.865773][T29238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.866314][T29238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.866592][T29238] bridge_slave_1: entered allmulticast mode [ 1738.869512][T29238] bridge_slave_1: entered promiscuous mode [ 1739.221371][T29224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.221383][T29224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.221397][T29224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.230412][T29238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.241282][T29224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.241297][T29224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.241323][T29224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.251365][T29238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.545378][T29238] team0: Port device team_slave_0 added [ 1739.718422][T29238] team0: Port device team_slave_1 added [ 1739.965985][T29224] hsr_slave_0: entered promiscuous mode [ 1739.966848][T29224] hsr_slave_1: entered promiscuous mode [ 1740.160380][T29077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1740.280550][T29077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1740.310022][T29238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.310039][T29238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.310064][T29238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.313161][T29077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1740.540996][T29238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.541011][T29238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.541031][T29238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.683235][T29077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1740.729679][T24696] Bluetooth: hci3: command 0x1003 tx timeout [ 1740.733650][T18749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1743.194556][T29238] hsr_slave_0: entered promiscuous mode [ 1743.196020][T29238] hsr_slave_1: entered promiscuous mode [ 1743.196988][T29238] debugfs: 'hsr0' already exists in 'hsr' [ 1743.197019][T29238] Cannot create hsr debugfs directory [ 1743.277451][T29074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1743.397393][T29074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1743.456148][T29327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1743.587369][T29074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1743.857439][T29074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1747.545712][T29077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1747.867591][ T12] bridge_slave_1: left allmulticast mode [ 1747.867619][ T12] bridge_slave_1: left promiscuous mode [ 1747.868105][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.952345][ T12] bridge_slave_0: left allmulticast mode [ 1747.952376][ T12] bridge_slave_0: left promiscuous mode [ 1747.952626][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.014920][ T12] bridge_slave_1: left allmulticast mode [ 1748.014951][ T12] bridge_slave_1: left promiscuous mode [ 1748.015205][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.105165][ T12] bridge_slave_0: left allmulticast mode [ 1748.105185][ T12] bridge_slave_0: left promiscuous mode [ 1748.105338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.348901][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.408655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.430545][ T12] bond0 (unregistering): Released all slaves [ 1752.857457][T24696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1752.880045][T24696] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1752.882210][T24696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1752.883356][T24696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1752.884388][T24696] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1754.879241][T18749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1754.885370][T18749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1754.886812][T18749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1754.890832][T18749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1754.891644][T18749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1754.991151][T24696] Bluetooth: hci3: command tx timeout [ 1756.968028][T24696] Bluetooth: hci6: command tx timeout [ 1757.068175][T24696] Bluetooth: hci3: command tx timeout [ 1757.670230][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1757.748795][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1757.774648][ T12] bond0 (unregistering): Released all slaves [ 1757.836700][T29074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.067968][T24696] Bluetooth: hci6: command tx timeout [ 1759.137930][T24696] Bluetooth: hci3: command tx timeout [ 1760.923434][T29392] netlink: 'syz.1.7976': attribute type 27 has an invalid length. [ 1760.968274][ T12] hsr_slave_0: left promiscuous mode [ 1760.988372][ T12] hsr_slave_1: left promiscuous mode [ 1760.989398][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.031751][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.130317][T24696] Bluetooth: hci6: command tx timeout [ 1761.168221][ T12] hsr_slave_0: left promiscuous mode [ 1761.188160][ T12] hsr_slave_1: left promiscuous mode [ 1761.188855][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.208147][T24696] Bluetooth: hci3: command tx timeout [ 1761.239055][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.362883][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1762.629973][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1763.211284][T24696] Bluetooth: hci6: command tx timeout [ 1765.978993][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1766.249407][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1770.063541][T29224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1770.995423][T29224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1771.203631][T29359] chnl_net:caif_netlink_parms(): no params data found [ 1771.214089][T29224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1772.321555][ T1228] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1772.693687][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.693913][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.703943][ T1228] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1772.703971][ T1228] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1772.703990][ T1228] usb 2-1: Manufacturer: syz [ 1772.715337][ T1228] usb 2-1: config 0 descriptor?? [ 1773.297537][ T1228] usbhid 2-1:0.0: can't add hid device: -32 [ 1773.315898][ T1228] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1773.693314][T29368] chnl_net:caif_netlink_parms(): no params data found [ 1774.262552][T29224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1774.622858][T29238] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1774.675110][T29238] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1774.835202][T29238] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1775.052306][T29238] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1775.180886][T29359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.181089][T29359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.181298][T29359] bridge_slave_0: entered allmulticast mode [ 1775.183169][T29359] bridge_slave_0: entered promiscuous mode [ 1775.194914][T29368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.195039][T29368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.195290][T29368] bridge_slave_0: entered allmulticast mode [ 1775.198811][T29368] bridge_slave_0: entered promiscuous mode [ 1775.202259][T29359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.202380][T29359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.202579][T29359] bridge_slave_1: entered allmulticast mode [ 1775.206202][T29359] bridge_slave_1: entered promiscuous mode [ 1775.315768][T29368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.316591][T29368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.316852][T29368] bridge_slave_1: entered allmulticast mode [ 1775.324660][T29368] bridge_slave_1: entered promiscuous mode [ 1775.461920][ T5891] usb 2-1: USB disconnect, device number 52 [ 1775.905180][T29359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.960736][T29368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.969845][T29359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.976896][T29368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.444651][T29359] team0: Port device team_slave_0 added [ 1776.457710][T29368] team0: Port device team_slave_0 added [ 1776.471949][T29359] team0: Port device team_slave_1 added [ 1776.473968][T29368] team0: Port device team_slave_1 added [ 1777.080461][T29359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.080479][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.080495][T29359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.082308][T29368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.082320][T29368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.082334][T29368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.392347][T29359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.392359][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.392374][T29359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.393319][T29368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.393329][T29368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.393344][T29368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.063643][T29359] hsr_slave_0: entered promiscuous mode [ 1778.065095][T29359] hsr_slave_1: entered promiscuous mode [ 1778.066147][T29359] debugfs: 'hsr0' already exists in 'hsr' [ 1778.066170][T29359] Cannot create hsr debugfs directory [ 1778.106468][T29368] hsr_slave_0: entered promiscuous mode [ 1778.114160][T29368] hsr_slave_1: entered promiscuous mode [ 1778.115136][T29368] debugfs: 'hsr0' already exists in 'hsr' [ 1778.115156][T29368] Cannot create hsr debugfs directory [ 1778.145963][T18749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1778.166443][T18749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1778.168980][T18749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1778.171931][T18749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1778.172715][T18749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1780.248113][T18749] Bluetooth: hci0: command tx timeout [ 1780.250791][T29446] netlink: 'syz.1.7983': attribute type 27 has an invalid length. [ 1782.331275][T18749] Bluetooth: hci0: command tx timeout [ 1783.397280][T24696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1783.415967][T24696] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1783.417592][T24696] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1783.421589][T24696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1783.422734][T24696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1784.491923][T24696] Bluetooth: hci0: command tx timeout [ 1785.453841][T24696] Bluetooth: hci1: command tx timeout [ 1786.599662][T24696] Bluetooth: hci0: command tx timeout [ 1787.262977][T29434] chnl_net:caif_netlink_parms(): no params data found [ 1787.543569][T24696] Bluetooth: hci1: command tx timeout [ 1789.608064][T24696] Bluetooth: hci1: command tx timeout [ 1789.787646][T29434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.795654][T29434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.795927][T29434] bridge_slave_0: entered allmulticast mode [ 1789.812109][T29434] bridge_slave_0: entered promiscuous mode [ 1789.835465][T29434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.835755][T29434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.835993][T29434] bridge_slave_1: entered allmulticast mode [ 1789.862827][T29434] bridge_slave_1: entered promiscuous mode [ 1790.407318][T29434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1790.435285][T29434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.764536][T29434] team0: Port device team_slave_0 added [ 1790.778557][T29459] chnl_net:caif_netlink_parms(): no params data found [ 1790.802897][T29434] team0: Port device team_slave_1 added [ 1791.562075][T29434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.562093][T29434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.562126][T29434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.625849][T29434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.625866][T29434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.625891][T29434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.691041][T24696] Bluetooth: hci1: command tx timeout [ 1791.943424][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.943497][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.945685][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1794.091150][T29516] serio: Serial port ptm0 [ 1794.140685][T29459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.140865][T29459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.141126][T29459] bridge_slave_0: entered allmulticast mode [ 1794.143411][T29459] bridge_slave_0: entered promiscuous mode [ 1794.156911][T29434] hsr_slave_0: entered promiscuous mode [ 1794.159797][T29434] hsr_slave_1: entered promiscuous mode [ 1794.160730][T29434] debugfs: 'hsr0' already exists in 'hsr' [ 1794.160753][T29434] Cannot create hsr debugfs directory [ 1794.161308][T29459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.161462][T29459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.161647][T29459] bridge_slave_1: entered allmulticast mode [ 1794.170997][T29459] bridge_slave_1: entered promiscuous mode [ 1794.334049][ T12] bridge_slave_1: left allmulticast mode [ 1794.334079][ T12] bridge_slave_1: left promiscuous mode [ 1794.334321][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.410463][ T12] bridge_slave_0: left allmulticast mode [ 1794.410502][ T12] bridge_slave_0: left promiscuous mode [ 1794.410820][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.471463][ T12] bridge_slave_1: left allmulticast mode [ 1794.471485][ T12] bridge_slave_1: left promiscuous mode [ 1794.471638][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.529036][ T12] bridge_slave_0: left allmulticast mode [ 1794.529056][ T12] bridge_slave_0: left promiscuous mode [ 1794.529338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.591608][ T12] bridge_slave_1: left allmulticast mode [ 1794.591629][ T12] bridge_slave_1: left promiscuous mode [ 1794.591795][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.659146][ T12] bridge_slave_0: left allmulticast mode [ 1794.659227][ T12] bridge_slave_0: left promiscuous mode [ 1794.659406][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.281507][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1796.383631][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1796.441401][ T12] bond0 (unregistering): Released all slaves [ 1797.077746][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 1797.077785][ C0] lec:lec_tx_timeout: lec0 [ 1802.041393][ T5891] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1802.118801][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.190537][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1802.190570][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 1802.190611][ T5891] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1802.190623][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.193694][ T5891] usb 2-1: config 0 descriptor?? [ 1802.194453][T29544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1802.212986][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1802.275891][ T12] bond0 (unregistering): Released all slaves [ 1802.643799][ T5891] cypress 0003:04B4:DE64.000E: item fetching failed at offset 0/3 [ 1802.644647][ T5891] cypress 0003:04B4:DE64.000E: parse failed [ 1802.644713][ T5891] cypress 0003:04B4:DE64.000E: probe with driver cypress failed with error -22 [ 1802.877652][ T1228] usb 2-1: USB disconnect, device number 53 [ 1804.098951][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.189516][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.250070][ T12] bond0 (unregistering): Released all slaves [ 1805.129584][T29459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.162122][T29459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.632647][T29459] team0: Port device team_slave_0 added [ 1805.636500][T29459] team0: Port device team_slave_1 added [ 1805.858396][T23334] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1805.860839][ T12] hsr_slave_0: left promiscuous mode [ 1805.890289][ T12] hsr_slave_1: left promiscuous mode [ 1805.891814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.934256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.018028][T23334] usb 2-1: Using ep0 maxpacket: 32 [ 1806.019844][T23334] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1806.019869][T23334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.023015][T23334] usb 2-1: config 0 descriptor?? [ 1806.078050][ T12] hsr_slave_0: left promiscuous mode [ 1806.118016][ T12] hsr_slave_1: left promiscuous mode [ 1806.119940][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.141486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.278343][ T12] hsr_slave_0: left promiscuous mode [ 1806.298144][ T12] hsr_slave_1: left promiscuous mode [ 1806.299298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.322140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.209547][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1807.368997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1809.051490][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1809.238996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1811.028825][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1811.093349][T23334] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1811.171431][T23334] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1811.171481][T23334] dib0700: firmware download failed at 7 with -22 [ 1811.229173][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1812.172180][T29459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.172191][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.172206][T29459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.190246][T29459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.190262][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.190285][T29459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.364194][ T5891] usb 2-1: USB disconnect, device number 54 [ 1812.657383][T29459] hsr_slave_0: entered promiscuous mode [ 1812.659491][T29459] hsr_slave_1: entered promiscuous mode [ 1814.297415][T18749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1814.317256][T18749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1814.391744][T18749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1814.406804][T18749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1814.415807][T18749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1816.008355][T29564] chnl_net:caif_netlink_parms(): no params data found [ 1816.542744][T18749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1816.556218][T18749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1816.571389][T18749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1816.649936][T18749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1816.650077][T18749] Bluetooth: hci3: command tx timeout [ 1816.741384][T18749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1818.290504][T29564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.290582][T29564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.290779][T29564] bridge_slave_0: entered allmulticast mode [ 1818.292527][T29564] bridge_slave_0: entered promiscuous mode [ 1818.325156][T29564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.325289][T29564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.325494][T29564] bridge_slave_1: entered allmulticast mode [ 1818.361225][T29564] bridge_slave_1: entered promiscuous mode [ 1818.721857][T29564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1818.728138][T24696] Bluetooth: hci3: command tx timeout [ 1818.793935][T29564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.808069][T18749] Bluetooth: hci4: command tx timeout [ 1819.048752][T29611] 9pnet_fd: Insufficient options for proto=fd [ 1819.058395][T29611] netlink: 'syz.1.8013': attribute type 16 has an invalid length. [ 1819.058442][T29611] netlink: 'syz.1.8013': attribute type 17 has an invalid length. [ 1819.444534][T29611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1819.463881][T29611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.938268][T29611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1820.476252][T29564] team0: Port device team_slave_0 added [ 1820.807980][T18749] Bluetooth: hci3: command tx timeout [ 1820.851677][T29564] team0: Port device team_slave_1 added [ 1820.891604][T18749] Bluetooth: hci4: command tx timeout [ 1821.376698][T29564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1821.376715][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.376739][T29564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1821.393319][T19128] lec:lec_start_xmit: lec0:No lecd attached [ 1822.461152][T29564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.461169][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.461194][T29564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.585117][T29434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1823.715113][T18749] Bluetooth: hci3: command tx timeout [ 1823.715150][T18749] Bluetooth: hci4: command tx timeout [ 1823.756709][T29434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1823.799056][T29434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1824.064588][T29434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1824.256735][T29564] hsr_slave_0: entered promiscuous mode [ 1824.257633][T29564] hsr_slave_1: entered promiscuous mode [ 1824.259043][T29564] debugfs: 'hsr0' already exists in 'hsr' [ 1824.259068][T29564] Cannot create hsr debugfs directory [ 1824.558340][T29594] chnl_net:caif_netlink_parms(): no params data found [ 1824.581085][T29459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1824.640394][T29459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1824.759899][T29459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1824.906722][T29459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1825.321491][T29594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.321626][T29594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.321883][T29594] bridge_slave_0: entered allmulticast mode [ 1825.324860][T29594] bridge_slave_0: entered promiscuous mode [ 1825.351482][T29594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.351608][T29594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.352200][T29594] bridge_slave_1: entered allmulticast mode [ 1825.355446][T29594] bridge_slave_1: entered promiscuous mode [ 1825.645349][T29594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.877528][T24696] Bluetooth: hci4: command tx timeout [ 1825.914097][T29594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.048086][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1827.048122][ C0] lec:lec_tx_timeout: lec0 [ 1827.214790][T29594] team0: Port device team_slave_0 added [ 1827.218182][T28927] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1827.227345][T29594] team0: Port device team_slave_1 added [ 1827.378459][T28927] usb 2-1: Using ep0 maxpacket: 16 [ 1827.383856][T28927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.383880][T28927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1827.397515][T28927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1827.397542][T28927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.397552][T28927] usb 2-1: Product: syz [ 1827.397559][T28927] usb 2-1: Manufacturer: syz [ 1827.397566][T28927] usb 2-1: SerialNumber: syz [ 1827.538315][T29594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1827.538328][T29594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.538350][T29594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1827.549504][T29594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1827.549520][T29594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.549544][T29594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.657651][T28927] usb 2-1: 0:2 : does not exist [ 1827.670144][T28927] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1827.700149][T28927] usb 2-1: USB disconnect, device number 55 [ 1827.767134][T29633] udevd[29633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.849831][T29594] hsr_slave_0: entered promiscuous mode [ 1827.850752][T29594] hsr_slave_1: entered promiscuous mode [ 1827.851356][T29594] debugfs: 'hsr0' already exists in 'hsr' [ 1827.851371][T29594] Cannot create hsr debugfs directory [ 1829.242306][T29434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1829.396188][ T12] bridge_slave_1: left allmulticast mode [ 1829.396210][ T12] bridge_slave_1: left promiscuous mode [ 1829.396389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.459030][ T12] bridge_slave_0: left allmulticast mode [ 1829.459051][ T12] bridge_slave_0: left promiscuous mode [ 1829.459235][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.520680][ T12] bridge_slave_1: left allmulticast mode [ 1829.520706][ T12] bridge_slave_1: left promiscuous mode [ 1829.520849][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.579034][ T12] bridge_slave_0: left allmulticast mode [ 1829.579055][ T12] bridge_slave_0: left promiscuous mode [ 1829.579211][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.644281][ T12] bridge_slave_1: left allmulticast mode [ 1829.644303][ T12] bridge_slave_1: left promiscuous mode [ 1829.644454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.771321][ T12] bridge_slave_0: left allmulticast mode [ 1829.771342][ T12] bridge_slave_0: left promiscuous mode [ 1829.771490][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.175418][T29675] binder: 29672:29675 ioctl c0306201 200000000040 returned -14 [ 1831.218965][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.308834][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.374195][ T12] bond0 (unregistering): Released all slaves [ 1831.668947][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.769146][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.853282][ T12] bond0 (unregistering): Released all slaves [ 1833.789076][T28927] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1833.908646][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1833.960461][T28927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.960486][T28927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1833.961780][T28927] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1833.961821][T28927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1833.961834][T28927] usb 2-1: SerialNumber: syz [ 1834.041415][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1834.103411][ T12] bond0 (unregistering): Released all slaves [ 1834.637084][T29434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.679731][T29459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.994718][T26463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.994909][T26463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.180910][T26463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.181120][T26463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.339492][ T12] hsr_slave_0: left promiscuous mode [ 1835.358252][ T12] hsr_slave_1: left promiscuous mode [ 1835.359295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.411901][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.548040][ T12] hsr_slave_0: left promiscuous mode [ 1835.567992][ T12] hsr_slave_1: left promiscuous mode [ 1835.570590][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.619787][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.778184][ T12] hsr_slave_0: left promiscuous mode [ 1835.798517][ T12] hsr_slave_1: left promiscuous mode [ 1835.801868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.853452][T28927] usb 2-1: 0:2 : does not exist [ 1835.883322][T28927] usb 2-1: USB disconnect, device number 56 [ 1835.911143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.956987][T29690] udevd[29690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1838.719448][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1838.879300][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1840.166741][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1840.175119][T24696] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1840.186246][T24696] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1840.188511][T24696] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1840.190365][T24696] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1840.191176][T24696] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1840.388634][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1841.558485][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1841.688604][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1842.329650][T24696] Bluetooth: hci5: command tx timeout [ 1842.594457][T29459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.631609][T26457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.634505][T26457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.705742][T26457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.705895][T26457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.409959][T24696] Bluetooth: hci5: command tx timeout [ 1844.932713][T29707] chnl_net:caif_netlink_parms(): no params data found [ 1845.270883][T18749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1845.304138][T18749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1845.317249][T18749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1845.322109][T18749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1845.330110][T18749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1845.757459][T29707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.757586][T29707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.758069][T29707] bridge_slave_0: entered allmulticast mode [ 1845.761697][T29707] bridge_slave_0: entered promiscuous mode [ 1845.768594][T29707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.768713][T29707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.768915][T29707] bridge_slave_1: entered allmulticast mode [ 1845.771992][T29707] bridge_slave_1: entered promiscuous mode [ 1846.170382][T29707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.278211][T29707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.630947][T18749] Bluetooth: hci5: command tx timeout [ 1847.448114][T18749] Bluetooth: hci0: command tx timeout [ 1847.582677][T29707] team0: Port device team_slave_0 added [ 1847.726411][T29707] team0: Port device team_slave_1 added [ 1847.726926][T29564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1847.859471][T29564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1848.110163][T29564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1848.236237][T29707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1848.236254][T29707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1848.236279][T29707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1848.238341][T29564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1848.365490][T29707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.365508][T29707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1848.365535][T29707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1848.648819][T18749] Bluetooth: hci5: command tx timeout [ 1848.955160][T29707] hsr_slave_0: entered promiscuous mode [ 1848.959019][T29707] hsr_slave_1: entered promiscuous mode [ 1848.960096][T29707] debugfs: 'hsr0' already exists in 'hsr' [ 1848.960120][T29707] Cannot create hsr debugfs directory [ 1848.987397][T29594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1849.107212][T29594] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1849.372560][T29594] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1849.538214][T18749] Bluetooth: hci0: command tx timeout [ 1849.538293][T29594] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1850.424508][T29747] chnl_net:caif_netlink_parms(): no params data found [ 1852.190916][T18749] Bluetooth: hci0: command tx timeout [ 1852.794173][T29747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.794456][T29747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.794686][T29747] bridge_slave_0: entered allmulticast mode [ 1852.797655][T29747] bridge_slave_0: entered promiscuous mode [ 1852.999332][T29747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.999440][T29747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.999667][T29747] bridge_slave_1: entered allmulticast mode [ 1853.001279][T29747] bridge_slave_1: entered promiscuous mode [ 1853.294941][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.295012][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.299534][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1854.431336][T24696] Bluetooth: hci0: command tx timeout [ 1854.487768][T29747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.606237][T29747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.091447][T29747] team0: Port device team_slave_0 added [ 1855.100445][T29747] team0: Port device team_slave_1 added [ 1855.132083][T29811] netlink: 'syz.1.8043': attribute type 27 has an invalid length. [ 1855.533740][T29747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.533757][T29747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.533782][T29747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.670212][T29747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.670223][T29747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.670238][T29747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.675336][ T12] bridge_slave_1: left allmulticast mode [ 1855.675356][ T12] bridge_slave_1: left promiscuous mode [ 1855.675588][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.779033][ T12] bridge_slave_0: left allmulticast mode [ 1855.779053][ T12] bridge_slave_0: left promiscuous mode [ 1855.779237][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.828210][ T5891] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1855.842755][ T12] bridge_slave_1: left allmulticast mode [ 1855.842784][ T12] bridge_slave_1: left promiscuous mode [ 1855.843018][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.902929][ T12] bridge_slave_0: left allmulticast mode [ 1855.902950][ T12] bridge_slave_0: left promiscuous mode [ 1855.903105][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.983714][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.983786][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.983819][ T5891] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1855.983830][ T5891] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1855.983842][ T5891] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1855.986105][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1855.986133][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.986143][ T5891] usb 2-1: Product: syz [ 1855.986151][ T5891] usb 2-1: Manufacturer: syz [ 1855.986158][ T5891] usb 2-1: SerialNumber: syz [ 1856.006907][ T5891] cdc_mbim 2-1:1.0: skipping garbage [ 1856.621347][ T5891] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 1856.621431][ T5891] cdc_mbim 2-1:1.0: bind() failure [ 1856.633955][ T5891] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1856.633999][ T5891] cdc_ncm 2-1:1.1: bind() failure [ 1858.118832][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.188852][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.231802][ T12] bond0 (unregistering): Released all slaves [ 1858.601689][T28927] usb 2-1: USB disconnect, device number 57 [ 1859.539065][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1859.539113][ T37] audit: type=1326 audit(2000001447.439:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29815 comm="syz.1.8045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x0 [ 1859.755257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6450 ms [ 1859.755297][ C0] lec:lec_tx_timeout: lec0 [ 1861.088571][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1861.148605][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1861.210693][ T12] bond0 (unregistering): Released all slaves [ 1861.239614][T29818] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1861.533238][T29564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.862505][T29747] hsr_slave_0: entered promiscuous mode [ 1861.863479][T29747] hsr_slave_1: entered promiscuous mode [ 1861.864088][T29747] debugfs: 'hsr0' already exists in 'hsr' [ 1861.864107][T29747] Cannot create hsr debugfs directory [ 1862.170008][ T12] hsr_slave_0: left promiscuous mode [ 1862.188118][ T12] hsr_slave_1: left promiscuous mode [ 1862.188851][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.229278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1863.372609][ T12] hsr_slave_0: left promiscuous mode [ 1863.625339][ T12] hsr_slave_1: left promiscuous mode [ 1863.626259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.669168][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.569800][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1865.910097][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1866.272018][T29836] overlayfs: workdir and upperdir must be separate subtrees [ 1867.019440][T29841] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1867.024995][T29841] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1870.671255][T29853] binder_alloc: 29850: binder_alloc_buf, no vma [ 1873.503468][T29866] netlink: 'syz.1.8057': attribute type 4 has an invalid length. [ 1873.666255][T29867] netlink: 'syz.1.8057': attribute type 4 has an invalid length. [ 1876.579224][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1876.759157][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1877.589896][T18749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1877.593394][T18749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1877.594878][T18749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1877.597194][T18749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1877.630906][T18749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1879.071512][T18749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1879.075031][T18749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1879.121822][T18749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1879.124030][T18749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1879.125266][T18749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1879.756578][T24696] Bluetooth: hci1: command tx timeout [ 1879.801756][T29707] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1879.895412][T29707] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1880.000901][T29707] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1880.513637][T29707] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1880.893598][T29887] futex_wake_op: syz.1.8061 tries to shift op by 144; fix this program [ 1881.232357][T24696] Bluetooth: hci6: command tx timeout [ 1881.767954][T24696] Bluetooth: hci1: command tx timeout [ 1882.167157][T29871] chnl_net:caif_netlink_parms(): no params data found [ 1882.679744][T29876] chnl_net:caif_netlink_parms(): no params data found [ 1883.102196][T29871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.102405][T29871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.102673][T29871] bridge_slave_0: entered allmulticast mode [ 1883.105625][T29871] bridge_slave_0: entered promiscuous mode [ 1883.203060][T29871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.203212][T29871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.203469][T29871] bridge_slave_1: entered allmulticast mode [ 1883.229546][T29871] bridge_slave_1: entered promiscuous mode [ 1883.288086][T24696] Bluetooth: hci6: command tx timeout [ 1884.391945][T24696] Bluetooth: hci1: command tx timeout [ 1884.650939][T29876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.651012][T29876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.651148][T29876] bridge_slave_0: entered allmulticast mode [ 1884.652859][T29876] bridge_slave_0: entered promiscuous mode [ 1884.692084][T29871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.692288][T29876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.693475][T29876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.693650][T29876] bridge_slave_1: entered allmulticast mode [ 1884.695889][T29876] bridge_slave_1: entered promiscuous mode [ 1884.773658][T29871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.728180][T24696] Bluetooth: hci6: command tx timeout [ 1886.414279][T24696] Bluetooth: hci1: command tx timeout [ 1886.532531][T29707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1886.734633][T29876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1886.771412][T29871] team0: Port device team_slave_0 added [ 1886.775354][T29876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.776888][T29747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1887.826057][T29871] team0: Port device team_slave_1 added [ 1888.079589][T24696] Bluetooth: hci6: command tx timeout [ 1888.302749][T29747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1889.446220][T29747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1889.542401][T29876] team0: Port device team_slave_0 added [ 1889.703553][T29747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1889.722365][T29871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1889.722382][T29871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1889.722407][T29871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1889.725331][T29876] team0: Port device team_slave_1 added [ 1889.783206][T29871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.783224][T29871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1889.783250][T29871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1890.007306][T19128] lec:lec_start_xmit: lec0:No lecd attached [ 1890.239948][T29876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1890.239960][T29876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1890.239974][T29876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1890.242630][T29707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1890.245601][T29876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1890.245612][T29876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1890.245627][T29876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1890.764523][T29871] hsr_slave_0: entered promiscuous mode [ 1890.766221][T29871] hsr_slave_1: entered promiscuous mode [ 1890.773883][T26435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.774164][T26435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.395686][T24696] Bluetooth: hci6: command 0x0405 tx timeout [ 1892.131223][T26469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.131421][T26469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.161837][T29876] hsr_slave_0: entered promiscuous mode [ 1892.163218][T29876] hsr_slave_1: entered promiscuous mode [ 1892.164160][T29876] debugfs: 'hsr0' already exists in 'hsr' [ 1892.164185][T29876] Cannot create hsr debugfs directory [ 1895.707902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 1895.707939][ C0] lec:lec_tx_timeout: lec0 [ 1897.293667][T29999] binder: 29996:29999 ioctl c0306201 200000000040 returned -14 [ 1897.298964][T29999] binder: 29996:29999 ioctl c0306201 200000000640 returned -22 [ 1900.824048][T29747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1901.183834][T29747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.263564][T29933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.263738][T29933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.381949][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.382158][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.755426][ T12] bridge_slave_1: left allmulticast mode [ 1901.755455][ T12] bridge_slave_1: left promiscuous mode [ 1901.755700][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.847131][ T12] bridge_slave_0: left allmulticast mode [ 1901.847162][ T12] bridge_slave_0: left promiscuous mode [ 1901.847448][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.951044][ T12] bridge_slave_1: left allmulticast mode [ 1901.951074][ T12] bridge_slave_1: left promiscuous mode [ 1901.951322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.030110][ T12] bridge_slave_0: left allmulticast mode [ 1902.030142][ T12] bridge_slave_0: left promiscuous mode [ 1902.030421][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.744856][T24696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1902.751328][T24696] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1902.762377][T24696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1902.763497][T24696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1902.765408][T24696] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1904.861642][T24696] Bluetooth: hci3: command tx timeout [ 1906.783423][T18749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1906.831300][T18749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1906.849279][T18749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1906.859462][T18749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1906.861246][T18749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1906.887901][T24696] Bluetooth: hci3: command tx timeout [ 1908.371920][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1908.904992][T18749] Bluetooth: hci4: command tx timeout [ 1908.968475][T24696] Bluetooth: hci3: command tx timeout [ 1909.298655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1909.360124][ T12] bond0 (unregistering): Released all slaves [ 1910.188615][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1910.268539][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1910.331213][ T12] bond0 (unregistering): Released all slaves [ 1911.207939][T18749] Bluetooth: hci4: command tx timeout [ 1911.207973][T18749] Bluetooth: hci3: command tx timeout [ 1913.624498][T24696] Bluetooth: hci4: command tx timeout [ 1914.308062][ T12] hsr_slave_0: left promiscuous mode [ 1914.347965][ T12] hsr_slave_1: left promiscuous mode [ 1914.349113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.409720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.558237][ T12] hsr_slave_0: left promiscuous mode [ 1914.579311][ T12] hsr_slave_1: left promiscuous mode [ 1914.580689][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.629204][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.744365][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.744437][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.748645][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1915.350618][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1915.519291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1915.690965][T24696] Bluetooth: hci4: command tx timeout [ 1916.574396][T30092] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1918.688612][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1918.848778][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1920.058399][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 1920.058433][ C0] lec:lec_tx_timeout: lec0 [ 1920.785107][T30029] chnl_net:caif_netlink_parms(): no params data found [ 1920.928171][T29871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1921.204680][ T37] audit: type=1326 audit(2000001509.179:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.204738][ T37] audit: type=1326 audit(2000001509.179:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.204783][ T37] audit: type=1326 audit(2000001509.179:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.205139][ T37] audit: type=1326 audit(2000001509.179:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.205188][ T37] audit: type=1326 audit(2000001509.179:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.205317][ T37] audit: type=1326 audit(2000001509.179:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.206792][ T37] audit: type=1326 audit(2000001509.179:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.220955][ T37] audit: type=1326 audit(2000001509.179:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.221021][ T37] audit: type=1326 audit(2000001509.179:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.221060][ T37] audit: type=1326 audit(2000001509.179:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30116 comm="syz.1.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1921.232794][T30044] chnl_net:caif_netlink_parms(): no params data found [ 1921.252461][T29871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1921.485338][T29871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1921.585921][T29871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1922.137649][T30029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.137776][T30029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.141225][T30029] bridge_slave_0: entered allmulticast mode [ 1922.164198][T30029] bridge_slave_0: entered promiscuous mode [ 1922.213993][T30029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.214174][T30029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.214410][T30029] bridge_slave_1: entered allmulticast mode [ 1922.217148][T30029] bridge_slave_1: entered promiscuous mode [ 1922.828064][T30044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.828197][T30044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.828453][T30044] bridge_slave_0: entered allmulticast mode [ 1922.835933][T30044] bridge_slave_0: entered promiscuous mode [ 1922.850601][T30029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.876126][T30044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.876352][T30044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.876624][T30044] bridge_slave_1: entered allmulticast mode [ 1922.884816][T30044] bridge_slave_1: entered promiscuous mode [ 1922.891124][T30029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1922.891202][T29876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1923.441596][T29876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1923.581480][T29876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1923.626000][T30044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1923.632608][T30029] team0: Port device team_slave_0 added [ 1923.641915][T29876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1923.712978][T30044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.714736][T30029] team0: Port device team_slave_1 added [ 1924.691017][T30044] team0: Port device team_slave_0 added [ 1924.692647][T30029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1924.692658][T30029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1924.692672][T30029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1924.700968][T30044] team0: Port device team_slave_1 added [ 1924.702547][T30029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1924.702562][T30029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1924.702588][T30029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.077606][T30044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.077624][T30044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.077650][T30044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.119087][T30044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.119104][T30044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.119130][T30044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.863648][T30029] hsr_slave_0: entered promiscuous mode [ 1925.864600][T30029] hsr_slave_1: entered promiscuous mode [ 1925.865194][T30029] debugfs: 'hsr0' already exists in 'hsr' [ 1925.865210][T30029] Cannot create hsr debugfs directory [ 1926.851332][T30044] hsr_slave_0: entered promiscuous mode [ 1926.852237][T30044] hsr_slave_1: entered promiscuous mode [ 1926.852822][T30044] debugfs: 'hsr0' already exists in 'hsr' [ 1926.852845][T30044] Cannot create hsr debugfs directory [ 1929.956334][T29871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.923222][T29871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1930.941517][T29876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.953342][T29930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.954246][T29930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1930.977472][T29930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.977698][T29930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1931.046917][T29876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1931.091004][T26444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.105209][T26444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1931.187284][ T12] bridge_slave_1: left allmulticast mode [ 1931.187312][ T12] bridge_slave_1: left promiscuous mode [ 1931.187557][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.268859][ T12] bridge_slave_0: left allmulticast mode [ 1931.268879][ T12] bridge_slave_0: left promiscuous mode [ 1931.269046][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.365350][ T12] bridge_slave_1: left allmulticast mode [ 1931.365382][ T12] bridge_slave_1: left promiscuous mode [ 1931.365617][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.460114][ T12] bridge_slave_0: left allmulticast mode [ 1931.460143][ T12] bridge_slave_0: left promiscuous mode [ 1931.460403][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.248808][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1935.331595][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1935.370656][ T12] bond0 (unregistering): Released all slaves [ 1938.300091][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.358710][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.400334][ T12] bond0 (unregistering): Released all slaves [ 1938.704043][T29930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.704220][T29930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1939.178013][ T12] hsr_slave_0: left promiscuous mode [ 1939.238199][ T12] hsr_slave_1: left promiscuous mode [ 1939.239338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.299834][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.676304][T24696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1939.691714][T24696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1939.693252][T24696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1939.694421][T24696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1939.695221][T24696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1940.028125][ T12] hsr_slave_0: left promiscuous mode [ 1940.068213][ T12] hsr_slave_1: left promiscuous mode [ 1940.068982][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1940.091261][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.889092][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1941.148853][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1941.768153][T24696] Bluetooth: hci0: command tx timeout [ 1942.281845][T18749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1942.295148][T18749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1942.296630][T18749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1942.300555][T18749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1942.301388][T18749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1943.977381][T18749] Bluetooth: hci0: command tx timeout [ 1945.077882][T18749] Bluetooth: hci1: command tx timeout [ 1945.307126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1945.361847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.056300][T18749] Bluetooth: hci0: command tx timeout [ 1946.208976][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.310316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.373277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.452394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.521907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.602903][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.693008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.791090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.910907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.998434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.128330][T18749] Bluetooth: hci1: command tx timeout [ 1947.378858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.383032][T30235] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1947.588458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.639694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.693774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.706837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.707557][T18749] Bluetooth: hci0: command tx timeout [ 1948.761580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.818594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.218022][T18749] Bluetooth: hci1: command tx timeout [ 1949.259164][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1949.508917][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1951.288100][T18749] Bluetooth: hci1: command tx timeout [ 1953.129791][T18749] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1954.646490][ T5871] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1954.833410][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.835793][ T5871] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1954.835819][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1954.835837][ T5871] usb 2-1: Product: syz [ 1954.835850][ T5871] usb 2-1: Manufacturer: syz [ 1954.835863][ T5871] usb 2-1: SerialNumber: syz [ 1954.850153][ T5871] usb 2-1: config 0 descriptor?? [ 1954.912648][ T5871] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1954.997348][T30247] udevd[30247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1956.936500][T30207] chnl_net:caif_netlink_parms(): no params data found [ 1956.951103][T30214] chnl_net:caif_netlink_parms(): no params data found [ 1957.002231][T30029] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1957.060300][T30029] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1957.398655][T30029] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1957.486675][T23331] usb 2-1: USB disconnect, device number 58 [ 1957.553239][T30029] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1958.291834][T30207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.291959][T30207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.292143][T30207] bridge_slave_0: entered allmulticast mode [ 1958.293780][T30207] bridge_slave_0: entered promiscuous mode [ 1958.333031][T30214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.333121][T30214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.333251][T30214] bridge_slave_0: entered allmulticast mode [ 1958.334913][T30214] bridge_slave_0: entered promiscuous mode [ 1958.345770][T30207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.345902][T30207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.346223][T30207] bridge_slave_1: entered allmulticast mode [ 1958.351997][T30207] bridge_slave_1: entered promiscuous mode [ 1958.510108][T30214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.510255][T30214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.510463][T30214] bridge_slave_1: entered allmulticast mode [ 1958.513472][T30214] bridge_slave_1: entered promiscuous mode [ 1959.969834][T30207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.047997][T30044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1961.082039][T30207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1961.086075][T30214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.102539][T30044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1961.570264][T30214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1961.572272][T30044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1961.948380][T30044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1962.001825][T30207] team0: Port device team_slave_0 added [ 1962.166406][T30207] team0: Port device team_slave_1 added [ 1962.213409][T30214] team0: Port device team_slave_0 added [ 1962.411015][T30214] team0: Port device team_slave_1 added [ 1962.722295][T30207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1962.722306][T30207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1962.722320][T30207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1962.852747][T30207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.852758][T30207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1962.852772][T30207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1963.352093][T30214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1963.352105][T30214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1963.352120][T30214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1963.369790][T30214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1963.369807][T30214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1963.369833][T30214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.320785][T30207] hsr_slave_0: entered promiscuous mode [ 1964.322243][T30207] hsr_slave_1: entered promiscuous mode [ 1964.323229][T30207] debugfs: 'hsr0' already exists in 'hsr' [ 1964.323254][T30207] Cannot create hsr debugfs directory [ 1965.009810][T24696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1965.015982][T24696] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1965.017464][T24696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1965.019088][T24696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1965.030975][T24696] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1965.366099][T30214] hsr_slave_0: entered promiscuous mode [ 1965.367490][T30214] hsr_slave_1: entered promiscuous mode [ 1965.385524][T30214] debugfs: 'hsr0' already exists in 'hsr' [ 1965.385552][T30214] Cannot create hsr debugfs directory [ 1966.298167][T19128] lec:lec_start_xmit: lec0:No lecd attached [ 1966.907910][ T1228] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1967.058169][ T1228] usb 2-1: Using ep0 maxpacket: 32 [ 1967.060647][ T1228] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1967.060672][ T1228] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1967.060692][ T1228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1967.060756][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1967.060774][ T1228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1967.060794][ T1228] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1967.060830][ T1228] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1967.060849][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.070226][ T1228] usb 2-1: config 0 descriptor?? [ 1967.131442][T18749] Bluetooth: hci3: command tx timeout [ 1967.293571][ T1228] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1967.352645][ T1228] usb 2-1: USB disconnect, device number 59 [ 1967.359333][ T1228] usblp0: removed [ 1967.789326][ T1228] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1967.948205][ T1228] usb 2-1: Using ep0 maxpacket: 32 [ 1967.952630][ T1228] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1967.952656][ T1228] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1967.952674][ T1228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1967.952808][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1967.952834][ T1228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1967.952856][ T1228] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1967.952897][ T1228] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1967.952917][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.968860][ T1228] usb 2-1: config 0 descriptor?? [ 1968.182818][ T1228] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1968.489523][ C0] usblp0: nonzero read bulk status received: -71 [ 1968.489939][ T1228] usb 2-1: USB disconnect, device number 60 [ 1968.703885][T30334] usblp0: removed [ 1968.916531][T30316] chnl_net:caif_netlink_parms(): no params data found [ 1969.063841][T24696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1969.079943][T24696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1969.081484][T24696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1969.082619][T24696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1969.110573][T24696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1969.208141][T18749] Bluetooth: hci3: command tx timeout [ 1971.224288][T18749] Bluetooth: hci4: command tx timeout [ 1971.411365][T24696] Bluetooth: hci3: command tx timeout [ 1971.568441][ T12] bridge_slave_1: left allmulticast mode [ 1971.568470][ T12] bridge_slave_1: left promiscuous mode [ 1971.568707][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.631549][ T12] bridge_slave_0: left allmulticast mode [ 1971.631579][ T12] bridge_slave_0: left promiscuous mode [ 1971.631858][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.702290][ T12] bridge_slave_1: left allmulticast mode [ 1971.702320][ T12] bridge_slave_1: left promiscuous mode [ 1971.702566][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.779017][ T12] bridge_slave_0: left allmulticast mode [ 1971.779047][ T12] bridge_slave_0: left promiscuous mode [ 1971.779320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.327838][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6030 ms [ 1972.327874][ C0] lec:lec_tx_timeout: lec0 [ 1972.750064][T30373] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1972.995973][T30378] netlink: 'syz.1.8155': attribute type 27 has an invalid length. [ 1973.471197][T18749] Bluetooth: hci4: command tx timeout [ 1973.471233][T18749] Bluetooth: hci3: command tx timeout [ 1974.089357][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1974.168526][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1974.190393][ T12] bond0 (unregistering): Released all slaves [ 1975.548019][T18749] Bluetooth: hci4: command tx timeout [ 1976.029232][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1976.088820][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1976.140785][ T12] bond0 (unregistering): Released all slaves [ 1976.171544][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.171641][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.174796][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1976.330665][T30316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.330805][T30316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.331023][T30316] bridge_slave_0: entered allmulticast mode [ 1976.334175][T30316] bridge_slave_0: entered promiscuous mode [ 1976.683491][T30316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.683619][T30316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.683897][T30316] bridge_slave_1: entered allmulticast mode [ 1976.716552][T30316] bridge_slave_1: entered promiscuous mode [ 1977.607911][T18749] Bluetooth: hci4: command tx timeout [ 1978.961621][T30316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.995038][T30316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1979.281302][ T12] hsr_slave_0: left promiscuous mode [ 1979.317970][ T12] hsr_slave_1: left promiscuous mode [ 1979.318963][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.359576][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.568144][ T12] hsr_slave_0: left promiscuous mode [ 1979.608165][ T12] hsr_slave_1: left promiscuous mode [ 1979.609499][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.648951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.207901][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 1981.207933][ C0] lec:lec_tx_timeout: lec0 [ 1981.889590][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1981.936961][T30422] netlink: 'syz.1.8162': attribute type 27 has an invalid length. [ 1982.187487][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1985.298828][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1985.458802][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1988.176089][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1988.176107][ T37] audit: type=1326 audit(2000001576.139:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.176597][ T37] audit: type=1326 audit(2000001576.139:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.176780][ T37] audit: type=1326 audit(2000001576.139:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.176941][ T37] audit: type=1326 audit(2000001576.139:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.177200][ T37] audit: type=1326 audit(2000001576.139:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f5d23b829 code=0x7ffc0000 [ 1988.177239][ T37] audit: type=1326 audit(2000001576.139:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f5d23b829 code=0x7ffc0000 [ 1988.177262][ T37] audit: type=1326 audit(2000001576.139:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.177284][ T37] audit: type=1326 audit(2000001576.139:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.177306][ T37] audit: type=1326 audit(2000001576.139:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.177333][ T37] audit: type=1326 audit(2000001576.139:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30423 comm="syz.1.8163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d29f749 code=0x7ffc0000 [ 1988.234854][T30316] team0: Port device team_slave_0 added [ 1988.298661][T30316] team0: Port device team_slave_1 added [ 1989.590286][T30316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1989.590302][T30316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1989.590329][T30316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1989.601593][T30316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1989.601610][T30316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1989.601634][T30316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1991.056659][T30316] hsr_slave_0: entered promiscuous mode [ 1991.075795][T30316] hsr_slave_1: entered promiscuous mode [ 1991.762616][T30354] chnl_net:caif_netlink_parms(): no params data found [ 1993.830675][T30467] overlayfs: overlapping lowerdir path [ 1994.800625][T30354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.802248][T30354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.802511][T30354] bridge_slave_0: entered allmulticast mode [ 1994.808049][T30354] bridge_slave_0: entered promiscuous mode [ 1994.849033][T30354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.849176][T30354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.849403][T30354] bridge_slave_1: entered allmulticast mode [ 1994.852306][T30354] bridge_slave_1: entered promiscuous mode [ 1995.145882][T30354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1995.226191][T30354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1995.468176][T30354] team0: Port device team_slave_0 added [ 1995.488450][T30354] team0: Port device team_slave_1 added [ 1996.086460][T30207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1996.125044][T30354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.125060][T30354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.125086][T30354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.180037][T30207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1996.227034][T30354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.227051][T30354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.227077][T30354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.659496][T30511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8170'. [ 1996.933788][T30207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1996.957654][T30207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1997.027637][T29933] Bluetooth: hci5: Frame reassembly failed (-84) [ 1997.947094][T30354] hsr_slave_0: entered promiscuous mode [ 1997.949999][T30354] hsr_slave_1: entered promiscuous mode [ 1997.951138][T30354] debugfs: 'hsr0' already exists in 'hsr' [ 1997.951162][T30354] Cannot create hsr debugfs directory [ 1999.011830][T30214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1999.048157][T18749] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1999.065218][ T12] bridge_slave_1: left allmulticast mode [ 1999.065247][ T12] bridge_slave_1: left promiscuous mode [ 1999.065507][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.209785][ T12] bridge_slave_0: left allmulticast mode [ 1999.209817][ T12] bridge_slave_0: left promiscuous mode [ 1999.210093][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.295564][ T12] bridge_slave_1: left allmulticast mode [ 1999.295585][ T12] bridge_slave_1: left promiscuous mode [ 1999.295741][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.363068][ T12] bridge_slave_0: left allmulticast mode [ 1999.363100][ T12] bridge_slave_0: left promiscuous mode [ 1999.363354][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.208678][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2000.289181][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2000.371099][ T12] bond0 (unregistering): Released all slaves [ 2000.839584][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2000.929606][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2001.001077][ T12] bond0 (unregistering): Released all slaves [ 2001.049429][T30214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2001.178041][T30214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2001.364116][T30214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2001.838163][ T12] hsr_slave_0: left promiscuous mode [ 2001.890232][ T12] hsr_slave_1: left promiscuous mode [ 2001.891217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2001.929027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2002.159450][ T12] hsr_slave_0: left promiscuous mode [ 2002.178102][ T12] hsr_slave_1: left promiscuous mode [ 2002.179056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2002.208350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2003.200114][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2003.408771][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2005.378894][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2005.578734][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2006.898054][T30316] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2006.949894][T30316] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2006.949991][ T5786] ------------[ cut here ]------------ [ 2006.950008][ T5786] WARNING: CPU: 1 PID: 5786 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 2006.950047][ T5786] Modules linked in: [ 2006.950081][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2006.950102][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2006.950117][ T5786] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2006.950141][ T5786] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 72 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 3e 04 09 0f 1f 40 00 90 90 [ 2006.950158][ T5786] RSP: 0018:ffffc90004b2fd00 EFLAGS: 00010287 [ 2006.950174][ T5786] RAX: 74a51803965a8e00 RBX: ffff88805400da00 RCX: 0000000000000000 [ 2006.950187][ T5786] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 2006.950200][ T5786] RBP: ffffc90004b2fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 2006.950214][ T5786] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff110051964cd [ 2006.950228][ T5786] R13: 0000000000004300 R14: ffff88805400da08 R15: ffff888031e59e00 [ 2006.950242][ T5786] FS: 0000555580f1c500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 2006.950258][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2006.950271][ T5786] CR2: 00007f0ba3f67d60 CR3: 000000003d984000 CR4: 00000000003526f0 [ 2006.950287][ T5786] Call Trace: [ 2006.950300][ T5786] [ 2006.950311][ T5786] do_exit+0x105/0x2300 [ 2006.950345][ T5786] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2006.950372][ T5786] ? __pfx_do_exit+0x10/0x10 [ 2006.950397][ T5786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2006.950425][ T5786] ? rt_spin_unlock+0x161/0x200 [ 2006.950446][ T5786] do_group_exit+0x21c/0x2d0 [ 2006.950472][ T5786] __x64_sys_exit_group+0x3f/0x40 [ 2006.950485][ T5786] x64_sys_call+0x21f7/0x2200 [ 2006.950501][ T5786] do_syscall_64+0xfa/0xfa0 [ 2006.950521][ T5786] ? lockdep_hardirqs_on+0x9c/0x150 [ 2006.950539][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.950555][ T5786] ? clear_bhb_loop+0x60/0xb0 [ 2006.950574][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.950589][ T5786] RIP: 0033:0x7f0ba31df749 [ 2006.950605][ T5786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2006.950617][ T5786] RSP: 002b:00007ffded07d368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2006.950630][ T5786] RAX: ffffffffffffffda RBX: 00007f0ba3280488 RCX: 00007f0ba31df749 [ 2006.950640][ T5786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 2006.950648][ T5786] RBP: 00007f0ba32804b0 R08: 00007ffded07b106 R09: 0000000000000000 [ 2006.950657][ T5786] R10: 000000000000000a R11: 0000000000000246 R12: 000000000000000b [ 2006.950665][ T5786] R13: 0000000000000000 R14: 0000555580f35510 R15: 00007ffded07d520 [ 2006.950687][ T5786] [ 2006.950698][ T5786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2006.950711][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2006.950731][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2006.950742][ T5786] Call Trace: [ 2006.950750][ T5786] [ 2006.950758][ T5786] dump_stack_lvl+0x99/0x250 [ 2006.950783][ T5786] ? __asan_memcpy+0x40/0x70 [ 2006.950804][ T5786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2006.950828][ T5786] ? __pfx__printk+0x10/0x10 [ 2006.950864][ T5786] vpanic+0x237/0x6d0 [ 2006.950887][ T5786] ? __pfx_vpanic+0x10/0x10 [ 2006.950915][ T5786] panic+0xb9/0xc0 [ 2006.950928][ T5786] ? __pfx_panic+0x10/0x10 [ 2006.950957][ T5786] __warn+0x31b/0x4b0 [ 2006.950972][ T5786] ? kcov_task_exit+0x13c/0x150 [ 2006.950992][ T5786] ? kcov_task_exit+0x13c/0x150 [ 2006.951011][ T5786] report_bug+0x2be/0x4f0 [ 2006.951031][ T5786] ? kcov_task_exit+0x13c/0x150 [ 2006.951050][ T5786] ? kcov_task_exit+0x13c/0x150 [ 2006.951067][ T5786] ? kcov_task_exit+0x13e/0x150 [ 2006.951085][ T5786] handle_bug+0x84/0x160 [ 2006.951100][ T5786] exc_invalid_op+0x1a/0x50 [ 2006.951115][ T5786] asm_exc_invalid_op+0x1a/0x20 [ 2006.951129][ T5786] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2006.951147][ T5786] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 72 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 3e 04 09 0f 1f 40 00 90 90 [ 2006.951160][ T5786] RSP: 0018:ffffc90004b2fd00 EFLAGS: 00010287 [ 2006.951171][ T5786] RAX: 74a51803965a8e00 RBX: ffff88805400da00 RCX: 0000000000000000 [ 2006.951182][ T5786] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 2006.951192][ T5786] RBP: ffffc90004b2fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 2006.951202][ T5786] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff110051964cd [ 2006.951213][ T5786] R13: 0000000000004300 R14: ffff88805400da08 R15: ffff888031e59e00 [ 2006.951229][ T5786] ? rt_spin_lock+0x1c1/0x3e0 [ 2006.951253][ T5786] do_exit+0x105/0x2300 [ 2006.951280][ T5786] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2006.951299][ T5786] ? __pfx_do_exit+0x10/0x10 [ 2006.951318][ T5786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2006.951341][ T5786] ? rt_spin_unlock+0x161/0x200 [ 2006.951360][ T5786] do_group_exit+0x21c/0x2d0 [ 2006.951377][ T5786] __x64_sys_exit_group+0x3f/0x40 [ 2006.951391][ T5786] x64_sys_call+0x21f7/0x2200 [ 2006.951406][ T5786] do_syscall_64+0xfa/0xfa0 [ 2006.951425][ T5786] ? lockdep_hardirqs_on+0x9c/0x150 [ 2006.951444][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.951465][ T5786] ? clear_bhb_loop+0x60/0xb0 [ 2006.951483][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.951496][ T5786] RIP: 0033:0x7f0ba31df749 [ 2006.951508][ T5786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2006.951520][ T5786] RSP: 002b:00007ffded07d368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2006.951534][ T5786] RAX: ffffffffffffffda RBX: 00007f0ba3280488 RCX: 00007f0ba31df749 [ 2006.951545][ T5786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 2006.951554][ T5786] RBP: 00007f0ba32804b0 R08: 00007ffded07b106 R09: 0000000000000000 [ 2006.951563][ T5786] R10: 000000000000000a R11: 0000000000000246 R12: 000000000000000b [ 2006.951572][ T5786] R13: 0000000000000000 R14: 0000555580f35510 R15: 00007ffded07d520 [ 2006.951596][ T5786] [ 2006.953761][ T5786] Kernel Offset: disabled