last executing test programs: 11m47.299340076s ago: executing program 2 (id=726): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 11m45.957953741s ago: executing program 2 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3ff, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0xb, 0xc, 0x7ff, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8086, 0x7, 0x6, 0x400}}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="85200000050000007065010008000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050012ceaded020000"], 0x0, 0xc2, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f0000000a80)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x5, 0x5, 0x209d7fcc}, 0x10, 0x94ab, r4, 0x5, 0x0, &(0x7f0000000580)=[{0x0, 0x1, 0xe, 0xc}, {0x1, 0x4, 0x10, 0x3}, {0x1, 0x2, 0x9, 0x5}, {0x400002, 0x4, 0x9, 0x6}, {0x0, 0x4, 0xd, 0x1}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex=r8, r9, 0x1d, 0x3c, 0x0, @prog_id=r10}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, r11}}, 0x18) 9m41.887093265s ago: executing program 2 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) waitid(0x0, r0, 0x0, 0x40000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x78}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb8242c965df", 0x98}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095deae2ef8cac1b43a5a076066e66475dcce825567809b2932bebc9ddc43ca9591939fcf99301c3fce694b8fc2436d7eeee41b23ad913dc068c35282af8247d346368d7b7d338beb610a8c70b3ab7c46bd7012d62d53b55f8cb50cdecc3bb7e71c26e5fe13ae154785bc58175f7dee3a63059d3cf061b6c77d5b5cfca42196011c7b38603fe62386d18b4c9ec55beec8fc8876b38d446051bd2c161aeb", 0x9f}, {&(0x7f0000000180)="267fee8bac", 0x5}, {&(0x7f00000008c0)="55ec3c0b6fde882da92a86ccf9682c2fad2e725c2fb81dddb84bc66603520e1ee959153381b3b913d660a597fb0b178afcc80c29a6f1fa3f379f22bf0da77598b116a0168c9eeb8321a5d6e69ef094f27d28554f05ed9115f2e94d6cce532850b8db30178992e1815acd5b", 0x6b}, {&(0x7f0000000980)="a0ec6ca0069aa3563485f724dd51748370389882e9c85ca8f0630bb2fb609ddcfa6aece36ddeadaa0ccabe26f65ba279800d5993c6718c666856b18ea1eb37779369c60bb27aa9fbd228b7abfa065b56352ac460152d0d5adc45a21192276ef18211c5f3cde5", 0x66}], 0x4, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x58}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0xa, @loopback, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="85e020390d3ac64decf4aa4d76f64ae54c4be74c2ffb15a6f72cc8df9633d54efc58d48d3806052c0452af77674b03467cd320d9dd82053a6fcac5cde7be207a384f4cfc80a234b9ea19096e45a487e3a301723963a23ce8c0bf69514cf79313f84d5c642b280cc1680b8cbc84c7eb00b1cad19b0b97407bfad6d93289d4e4575144c6316ff22c4b555b9a1e46a07d10b967fd345fbc99b6f92bcdc3ce6c19600e71aff739006186f67f67e980fdf270d7ef6ed942e02b578a31507a10839029905fad9bfcaf406a", 0xc8}], 0x1, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 9m38.556530027s ago: executing program 2 (id=857): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r2) socket$caif_seqpacket(0x25, 0x5, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) set_mempolicy(0xc002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 9m34.692029121s ago: executing program 2 (id=863): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0x40045010, &(0x7f0000000080)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000002000000000000000400070000000000100000000000000020"], 0x24, 0x0) 7m53.500955487s ago: executing program 3 (id=972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc4}}, 0x0) 7m53.224916385s ago: executing program 3 (id=973): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b000104"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mmap(&(0x7f00000cb000/0x4000)=nil, 0x4000, 0x6, 0x20010, r0, 0x7722d000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa4200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x20000000) socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x9, 0x6de381) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e1f, 0x0, @empty, 0x2}, 0x1c) syz_emit_ethernet(0x2b5, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x149a82, 0x0) fstat(r1, &(0x7f0000000640)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x6, @loopback, 0xb}}, 0x1, 0xd}, 0x0) 7m49.96864879s ago: executing program 3 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) waitid(0x0, r0, 0x0, 0x40000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x78}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb8242c965df", 0x98}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095deae2ef8cac1b43a5a076066e66475dcce825567809b2932bebc9ddc43ca9591939fcf99301c3fce694b8fc2436d7eeee41b23ad913dc068c35282af8247d346368d7b7d338beb610a8c70b3ab7c46bd7012d62d53b55f8cb50cdecc3bb7e71c26e5fe13ae154785bc58175f7dee3a63059d3cf061b6c77d5b5cfca42196011c7b38603fe62386d18b4c9ec55beec8fc8876b38d446051bd2c161aeb", 0x9f}, {&(0x7f0000000180)="267fee8bac", 0x5}, {&(0x7f00000008c0)="55ec3c0b6fde882da92a86ccf9682c2fad2e725c2fb81dddb84bc66603520e1ee959153381b3b913d660a597fb0b178afcc80c29a6f1", 0x36}, {&(0x7f0000000980)="a0ec6ca0069aa3563485f724dd51748370389882e9c85ca8f0630bb2fb609ddcfa6aece36ddeadaa0ccabe26f65ba279800d5993c6718c666856b18ea1eb37779369c60bb27aa9fbd228b7abfa065b56352ac460152d0d5adc45a21192276ef18211c5f3cde523", 0x67}], 0x4, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x58}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0xa, @loopback, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="85e020390d3ac64decf4aa4d76f64ae54c4be74c2ffb15a6f72cc8df9633d54efc58d48d3806052c0452af77674b03467cd320d9dd82053a6fcac5cde7be207a384f4cfc80a234b9ea19096e45a487e3a301723963a23ce8c0bf69514cf79313f84d5c642b280cc1680b8cbc84c7eb00b1cad19b0b97407bfad6d93289d4e4575144c6316ff22c4b555b9a1e46a07d10b967fd345fbc99b6f92bcdc3ce6c19600e71aff739006186f67f67e980fdf270d7ef6ed942e02b578a31507a10839029905fad9bfcaf406a", 0xc8}], 0x1, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 7m47.542169939s ago: executing program 3 (id=978): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r2) socket$caif_seqpacket(0x25, 0x5, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) set_mempolicy(0xc002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 7m44.286347084s ago: executing program 3 (id=982): openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a18014e2cd41a780a7c", 0x76}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=0x10000) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7m41.943070891s ago: executing program 3 (id=984): socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0xb0000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000060000000090a010400000000000000000700000001000a40000000000900020073797a31000000000900010073797a3000000000080005400000002124001180090001006d65746100000000140002800800014000000000080002400000000014000000100001005c000000000000000000000af6255b2aa2d866fef6d0d6228226a4a7dd6846e49c884db6c7ab6f075f7abfa865ab78a103efd9a8d4bf85c71fe1ffedaab8edefe6f5b3e5"], 0xa8}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffce4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0d6800201900"}) setreuid(0x0, 0x0) 7m14.324461313s ago: executing program 2 (id=875): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31"}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbf8}, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd0701009948010203010902"], 0x0) 4m4.630409844s ago: executing program 4 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) waitid(0x0, r0, 0x0, 0x40000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x78}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb8242c965df", 0x98}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095deae2ef8cac1b43a5a076066e66475dcce825567809b2932bebc9ddc43ca9591939fcf99301c3fce694b8fc2436d7eeee41b23ad913dc068c35282af8247d346368d7b7d338beb610a8c70b3ab7c46bd7012d62d53b55f8cb50cdecc3bb7e71c26e5fe13ae154785bc58175f7dee3a63059d3cf061b6c77d5b5cfca42196011c7b38603fe62386d18b4c9ec55beec8fc8876b38d446051bd2c161aeb", 0x9f}, {&(0x7f0000000180)="267fee8bac", 0x5}, {&(0x7f00000008c0)="55ec3c0b6fde882da92a86ccf9682c2fad2e725c2fb81dddb84bc66603520e1ee959153381b3b913d660a597fb0b178afcc80c29a6f1fa3f379f22bf0da77598b116a0168c9eeb8321a5d6e69ef094f27d28554f05ed9115f2e94d6cce532850b8db30178992e1815acd5b", 0x6b}, {&(0x7f0000000980)="a0ec6ca0069aa3563485f724dd51748370389882e9c85ca8f0630bb2fb609ddcfa6aece36ddeadaa0ccabe26f65ba279800d5993c6718c666856b18ea1eb37779369c60bb27aa9fbd228b7abfa065b56352ac460152d0d5adc45a21192276ef18211c5f3cde523e1beb6e18b92", 0x6d}], 0x4, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x58}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0xa, @loopback, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="85e020390d3ac64decf4aa4d76f64ae54c4be74c2ffb15a6f72cc8df9633d54efc58d48d3806052c0452af77674b03467cd320d9dd82053a6fcac5cde7be207a384f4cfc80a234b9ea19096e45a487e3a301723963a23ce8c0bf69514cf79313f84d5c64", 0x64}], 0x1, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 4m3.110890199s ago: executing program 4 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0) 4m0.973680353s ago: executing program 4 (id=1160): socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m0.737136871s ago: executing program 4 (id=1162): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$caif_seqpacket(0x25, 0x5, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) set_mempolicy(0xc002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 3m51.384832284s ago: executing program 4 (id=1169): socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m50.173279368s ago: executing program 4 (id=1170): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(0xffffffffffffffff) socket$caif_seqpacket(0x25, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) set_mempolicy(0xc002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 10.869875423s ago: executing program 1 (id=1345): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe800000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0x40045010, &(0x7f0000000080)) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000002000000000000000400070000000000100000000000000020"], 0x24, 0x0) 8.547053873s ago: executing program 0 (id=1346): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0x40045010, &(0x7f0000000080)) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000002000000000000000400070000000000100000000000000020"], 0x24, 0x0) 8.545337337s ago: executing program 1 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) waitid(0x0, r0, 0x0, 0x40000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x78}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb8242c965df", 0x98}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095deae2ef8cac1b43a5a076066e66475dcce825567809b2932bebc9ddc43ca9591939fcf99301c3fce694b8fc2436d7eeee41b23ad913dc068c35282af8247d346368d7b7d338beb610a8c70b3ab7c46bd7012d62d53b55f8cb50cdecc3bb7e71c26e5fe13ae154785bc58175f7dee3a63059d3cf061b6c77d5b5cfca42196011c7b38603fe62386d18b4c9ec55beec8fc8876b38d446051bd2c161aeb", 0x9f}, {&(0x7f00000008c0)="55ec3c0b6fde882da92a86ccf9682c2fad2e725c2fb81dddb84bc66603520e1ee959153381b3b913d660a597fb0b178afcc80c29a6f1fa3f379f22bf0da77598b116a0168c9eeb8321a5d6e69ef094f27d28554f05ed9115f2e94d6cce532850b8db30178992e1815acd", 0x6a}, {&(0x7f0000000980)="a0ec6ca0069aa3563485f724dd51748370389882e9c85ca8f0630bb2fb609ddcfa6aece36ddeadaa0ccabe26f65ba279800d5993c6718c666856b18ea1eb37779369c60bb27aa9fbd228b7abfa065b56352ac460152d0d5adc45a21192276ef18211c5f3cde523", 0x67}], 0x3, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x58}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0xa, @loopback, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="85e020390d3ac64decf4aa4d76f64ae54c4be74c2ffb15a6f72cc8df9633d54efc58d48d3806052c0452af77674b03467cd320d9dd82053a6fcac5cde7be207a384f4cfc80a234b9ea19096e45a487e3a301723963a23ce8c0bf69514cf79313f84d5c642b280cc1680b8cbc84c7eb00b1cad19b0b97407bfad6d93289d4e4575144c6316ff22c4b555b9a1e46a07d10b967fd345fbc99b6f92bcdc3ce6c19600e71aff739006186f67f67e980fdf270d7ef6ed942e02b578a31507a10839029905fad9bfcaf406a", 0xc8}], 0x1, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 7.269409354s ago: executing program 1 (id=1348): socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.138960699s ago: executing program 0 (id=1349): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0x40045010, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 5.796990522s ago: executing program 1 (id=1350): openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616f5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000400000000000000ff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"/816]}, 0x3a8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), 0x0}, 0x20) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a18014e2cd41a780a7c", 0x76}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=0x10000) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 5.567172706s ago: executing program 0 (id=1351): socket$inet6(0xa, 0x2, 0x38) r0 = memfd_create(&(0x7f0000000340)='-VT\xa6\xdd!\xcd\x0e\xdam\xe9\x9b\xfce\xfd\x0fL\xa2Q\x92\xb2\xc1y\xc1\x9e\xc2\x87Fv\xaf5\xc7\x98\xfd\xd6A\x98\xcf\xfdG\xb1\x18\xb1k:\x9a\x88\x96\x1d\xf6\x1c\x87\x99\x93\x99\x1d\xad\xfaP_\x04rw\xf7\xfc', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pwritev(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x6}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000440)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000880)={0x20, 0x0, 0x0, 0xffffffffffffffff, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x133080, 0x12a) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={&(0x7f0000000300), &(0x7f0000002500)}}, &(0x7f0000000200)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) 4.192333393s ago: executing program 1 (id=1352): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2.7239537s ago: executing program 1 (id=1353): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7fc}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ff7f000000000000000001820a741000000000006300"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xa89) sendto$inet(r1, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0) 2.699078088s ago: executing program 0 (id=1354): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_vif\x00') ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='vlan0\x00') bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[], 0x110) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r7 = syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x18, 0x20000000, r9) read$snddsp(r0, &(0x7f0000001300)=""/4099, 0x1003) 1.290142833s ago: executing program 0 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) waitid(0x0, r0, 0x0, 0x40000000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x78}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad30b68484b2c5f0967bc045f364223f332e0017021cd36885c5b27bf4f23c98d57c26ba1bd89adedae55ba15daa277b571a57962ce9c75c3d726f5528035c54efffe7e8a29b2e8c9c35b19e7c7a54883f023efb20b1549a6bc8255567da4e0167e36cf7aa39dfb5356330f0353455bcdd2f53d1d931db6a95cb2b3262bbe78eb9e64d1bc6e01e8dc956cb1a6e90b709d4e0cb8242c965df", 0x98}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)="2c0095deae2ef8cac1b43a5a076066e66475dcce825567809b2932bebc9ddc43ca9591939fcf99301c3fce694b8fc2436d7eeee41b23ad913dc068c35282af8247d346368d7b7d338beb610a8c70b3ab7c46bd7012d62d53b55f8cb50cdecc3bb7e71c26e5fe13ae154785bc58175f7dee3a63059d3cf061b6c77d5b5cfca42196011c7b38603fe62386d18b4c9ec55beec8fc8876b38d446051bd2c161aeb", 0x9f}, {&(0x7f00000008c0)="55ec3c0b6fde882da92a86ccf9682c2fad2e725c2fb81dddb84bc66603520e1ee959153381b3b913d660a597fb0b178afcc80c29a6f1fa3f379f22bf0da77598b116a0168c9eeb8321a5d6e69ef094f27d28554f05ed9115f2e94d6cce532850b8db30178992e1815acd", 0x6a}, {&(0x7f0000000980)="a0ec6ca0069aa3563485f724dd51748370389882e9c85ca8f0630bb2fb609ddcfa6aece36ddeadaa0ccabe26f65ba279800d5993c6718c666856b18ea1eb37779369c60bb27aa9fbd228b7abfa065b56352ac460152d0d5adc45a21192276ef18211c5f3cde523", 0x67}], 0x3, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x58}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0xa, @loopback, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="85e020390d3ac64decf4aa4d76f64ae54c4be74c2ffb15a6f72cc8df9633d54efc58d48d3806052c0452af77674b03467cd320d9dd82053a6fcac5cde7be207a384f4cfc80a234b9ea19096e45a487e3a301723963a23ce8c0bf69514cf79313f84d5c642b280cc1680b8cbc84c7eb00b1cad19b0b97407bfad6d93289d4e4575144c6316ff22c4b555b9a1e46a07d10b967fd345fbc99b6f92bcdc3ce6c19600e71aff739006186f67f67e980fdf270d7ef6ed942e02b578a31507a10839029905fad9bfcaf406a", 0xc8}], 0x1, &(0x7f0000000c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x30}}], 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 0s ago: executing program 0 (id=1356): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe800000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0x40045010, &(0x7f0000000080)) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000002000000000000000400070000000000100000000000000020"], 0x24, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.861'. [ 1264.444927][T12075] netlink: 292 bytes leftover after parsing attributes in process `syz.1.996'. [ 1264.567820][ T9670] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1264.849201][T12104] syz.0.999 (12104): drop_caches: 2 [ 1265.368156][T12104] 9pnet: Could not find request transport: fd0x0000000000000008 [ 1266.072573][T12109] syz.1.1000 (12109): drop_caches: 2 [ 1266.143280][ T9670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.168398][ T9670] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1266.192079][ T9670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.265040][ T9670] usb 5-1: config 0 descriptor?? [ 1267.043549][T12114] syz.0.1001 (12114): drop_caches: 2 [ 1267.934664][T11995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.948384][ T9670] ath6kl: Unsupported hardware version: 0x0 [ 1267.970567][ T9670] ath6kl: Failed to init ath6kl core: -22 [ 1267.976842][T11995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.990661][ T9670] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1268.025151][T11995] bridge_slave_0: entered allmulticast mode [ 1268.056503][T11995] bridge_slave_0: entered promiscuous mode [ 1268.326479][T11995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.348898][ T5311] usb 5-1: USB disconnect, device number 11 [ 1268.350990][T11995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.347444][T11995] bridge_slave_1: entered allmulticast mode [ 1269.355718][T11995] bridge_slave_1: entered promiscuous mode [ 1269.994928][T11995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.695447][T12138] syz.4.1005 (12138): drop_caches: 2 [ 1272.776238][T11995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.533561][ T29] audit: type=1326 audit(1724722346.197:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.0.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98e3579e79 code=0x0 [ 1276.483013][T11995] team0: Port device team_slave_0 added [ 1276.654377][T11995] team0: Port device team_slave_1 added [ 1277.913016][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1279.219737][T12172] syz.4.1010 (12172): drop_caches: 2 [ 1280.446216][T12176] syz.0.1011 (12176): drop_caches: 2 [ 1280.471608][T12176] 9pnet_fd: Insufficient options for proto=fd [ 1281.146224][T11920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.177284][T11995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.207162][T11995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.351226][T12182] syz.4.1013 (12182): drop_caches: 2 [ 1281.636258][T11995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.468988][T11995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.488682][T11995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.597981][T11995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.515999][T12192] syz.4.1014 (12192): drop_caches: 2 [ 1284.188968][T11920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.808665][T12196] syz.4.1016 (12196): drop_caches: 2 [ 1286.261027][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.268271][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.310767][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.318193][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.736878][ T29] audit: type=1326 audit(1724722357.447:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.0.1018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98e3579e79 code=0x0 [ 1287.423195][T11995] hsr_slave_0: entered promiscuous mode [ 1287.676021][T11995] hsr_slave_1: entered promiscuous mode [ 1287.785903][T11995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1287.814810][T11995] Cannot create hsr debugfs directory [ 1287.940498][T12200] dlm: no locking on control device [ 1287.968017][T12200] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1017'. [ 1288.988175][ T29] audit: type=1326 audit(1724722359.357:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.1.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5efc779e79 code=0x0 [ 1291.275770][T12229] syz.1.1022 (12229): drop_caches: 2 [ 1293.017712][T12245] syz.1.1023 (12245): drop_caches: 2 [ 1293.441323][T11995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1293.617464][T11995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1293.697601][T11995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1293.776061][T11920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.805418][T11995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1294.553299][T11920] veth0_vlan: entered promiscuous mode [ 1294.785028][T11920] veth1_vlan: entered promiscuous mode [ 1294.957930][T11995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.178453][T11995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.201455][T11920] veth0_macvtap: entered promiscuous mode [ 1295.305411][T11920] veth1_macvtap: entered promiscuous mode [ 1295.410734][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.418477][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.732193][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.739487][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.893549][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.932161][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.979011][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.022703][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.094207][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.176452][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.229556][T11920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.445480][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.513961][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.566585][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.630497][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.667763][T11920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.703319][T11920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.782189][T11920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.246117][T12274] syz.4.1027 (12274): drop_caches: 2 [ 1298.097452][T12271] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1300.427363][ T5243] Bluetooth: hci0: command tx timeout [ 1303.145552][T11995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.462827][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1303.477518][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1303.486400][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1303.500092][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1303.529375][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1303.544774][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1303.871548][ T943] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1304.062994][ T943] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.084541][ T943] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1304.125287][ T943] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1304.142487][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.155173][ T943] usb 1-1: Product: syz [ 1304.160376][ T943] usb 1-1: Manufacturer: syz [ 1304.165424][ T943] usb 1-1: SerialNumber: syz [ 1304.423927][T11995] veth0_vlan: entered promiscuous mode [ 1304.545806][T11995] veth1_vlan: entered promiscuous mode [ 1305.015054][ T5229] usb 1-1: USB disconnect, device number 29 [ 1305.287320][ T1310] bridge_slave_1: left allmulticast mode [ 1305.293037][ T1310] bridge_slave_1: left promiscuous mode [ 1305.347466][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.423298][ T1310] bridge_slave_0: left allmulticast mode [ 1305.429942][ T1310] bridge_slave_0: left promiscuous mode [ 1305.435930][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.976903][T12333] syz.4.1035 (12333): drop_caches: 2 [ 1306.378590][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.463637][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.791871][ T5243] Bluetooth: hci0: command tx timeout [ 1307.129763][T12335] Zero length message leads to an empty skb [ 1308.004536][T12344] syz.0.1038 (12344): drop_caches: 2 [ 1308.836943][ T5243] Bluetooth: hci0: command tx timeout [ 1309.035150][T12354] syz.1.1040 (12354): drop_caches: 2 [ 1310.957106][ T5243] Bluetooth: hci0: command tx timeout [ 1311.489726][T12362] vivid-007: kernel_thread() failed [ 1312.187707][T12369] syz.1.1042 (12369): drop_caches: 2 [ 1313.047454][ T5243] Bluetooth: hci0: command tx timeout [ 1313.093287][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.557811][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.656878][ T1310] bond0 (unregistering): Released all slaves [ 1314.198277][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1314.209216][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1314.230970][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1314.243643][T12320] chnl_net:caif_netlink_parms(): no params data found [ 1314.306648][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1314.316205][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1314.337540][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1314.557329][ T1310] hsr_slave_0: left promiscuous mode [ 1314.610859][ T1310] hsr_slave_1: left promiscuous mode [ 1314.678069][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.685560][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.766378][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.808057][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.974725][ T1310] veth1_macvtap: left promiscuous mode [ 1315.103676][ T1310] veth0_macvtap: left promiscuous mode [ 1315.109594][ T1310] veth1_vlan: left promiscuous mode [ 1315.115049][ T1310] veth0_vlan: left promiscuous mode [ 1315.999041][T12387] vivid-007: kernel_thread() failed [ 1316.485458][ T5243] Bluetooth: hci5: command tx timeout [ 1316.748709][ T29] audit: type=1326 audit(1724722387.467:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.4.1047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd450979e79 code=0x0 [ 1317.369233][ T5208] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1318.317541][ T5208] usb 1-1: device descriptor read/all, error -71 [ 1318.508427][ T5243] Bluetooth: hci5: command tx timeout [ 1318.982088][T12406] syz.0.1049 (12406): drop_caches: 2 [ 1320.590987][ T5243] Bluetooth: hci5: command tx timeout [ 1321.359663][T12417] syz.4.1052 (12417): drop_caches: 2 [ 1322.667346][ T5243] Bluetooth: hci5: command tx timeout [ 1324.216145][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1326.507930][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1328.801724][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 1328.815094][ T29] audit: type=1326 audit(1724722398.177:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.1.1059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5efc779e79 code=0x0 [ 1329.106049][ T5323] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1329.571566][T12465] syz.1.1060 (12465): drop_caches: 2 [ 1332.085063][T12471] syz.1.1063 (12471): drop_caches: 2 [ 1333.779833][T12476] syz.4.1064 (12476): drop_caches: 2 [ 1336.253667][T12494] syz.0.1067 (12494): drop_caches: 2 [ 1338.013261][T12498] syz.4.1068 (12498): drop_caches: 2 [ 1339.213156][ T29] audit: type=1326 audit(1724722409.917:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.0.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98e3579e79 code=0x0 [ 1340.489609][T12509] syz.4.1070 (12509): drop_caches: 2 [ 1340.759547][T12509] 9pnet_fd: Insufficient options for proto=fd [ 1341.510854][T12514] syz.0.1071 (12514): drop_caches: 2 [ 1344.504897][T12528] syz.1.1074 (12528): drop_caches: 2 [ 1344.604585][T12528] 9pnet_fd: Insufficient options for proto=fd [ 1345.864148][T12536] syz.4.1075 (12536): drop_caches: 2 [ 1346.097437][T12536] 9pnet_fd: Insufficient options for proto=fd [ 1347.064263][T12320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.136874][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.176794][T12320] bridge_slave_0: entered allmulticast mode [ 1347.217923][T12320] bridge_slave_0: entered promiscuous mode [ 1347.230467][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.240863][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.254922][T12320] bridge_slave_1: entered allmulticast mode [ 1347.272202][T12320] bridge_slave_1: entered promiscuous mode [ 1347.327155][T12542] dlm: no locking on control device [ 1347.580394][T12542] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1076'. [ 1347.635365][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.763673][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.183728][T12320] team0: Port device team_slave_0 added [ 1348.333097][T12320] team0: Port device team_slave_1 added [ 1348.828586][ T9498] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.835945][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 1348.915918][ T29] audit: type=1326 audit(1724722419.627:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12555 comm="syz.4.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd450979e79 code=0x0 [ 1348.966652][T12561] dlm: no locking on control device [ 1349.034652][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.041959][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.163835][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.188505][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.301722][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.352844][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.535659][T12561] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1078'. [ 1350.429094][T12320] hsr_slave_0: entered promiscuous mode [ 1350.529040][T12320] hsr_slave_1: entered promiscuous mode [ 1350.556788][T12320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.575337][T12320] Cannot create hsr debugfs directory [ 1352.600385][T12579] syz.4.1081 (12579): drop_caches: 2 [ 1355.292476][T12378] chnl_net:caif_netlink_parms(): no params data found [ 1356.764453][ T5243] Bluetooth: hci1: command 0x1003 tx timeout [ 1356.772671][ T5233] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1357.249670][T12613] syz.0.1086 (12613): drop_caches: 2 [ 1359.636394][ T1310] bridge_slave_1: left allmulticast mode [ 1359.685919][ T1310] bridge_slave_1: left promiscuous mode [ 1359.749635][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.847787][ T1310] bridge_slave_0: left allmulticast mode [ 1360.137180][ T1310] bridge_slave_0: left promiscuous mode [ 1360.143048][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.396497][ T29] audit: type=1326 audit(1724722431.097:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.1.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5efc779e79 code=0x0 [ 1361.936765][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1361.953375][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1361.998456][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1362.022398][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1362.031149][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1362.039338][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1363.186951][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.251827][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.289882][ T1310] bond0 (unregistering): Released all slaves [ 1364.247224][ T5233] Bluetooth: hci1: command tx timeout [ 1364.280911][T12651] syz.0.1092 (12651): drop_caches: 2 [ 1365.734959][ T1310] hsr_slave_0: left promiscuous mode [ 1366.211457][ T1310] hsr_slave_1: left promiscuous mode [ 1366.239462][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.601833][ T5233] Bluetooth: hci1: command tx timeout [ 1366.655811][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.203780][ T1310] veth1_vlan: left promiscuous mode [ 1367.209589][ T1310] veth0_vlan: left promiscuous mode [ 1367.255703][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.262162][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.403439][T12676] syz.1.1096 (12676): drop_caches: 2 [ 1368.667196][ T5243] Bluetooth: hci1: command tx timeout [ 1369.725288][T12683] dlm: no locking on control device [ 1370.372786][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1370.616510][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1370.747639][ T5243] Bluetooth: hci1: command tx timeout [ 1371.576152][T12693] vivid-007: kernel_thread() failed [ 1372.124809][T12690] vivid-003: disconnect [ 1373.723455][T12688] vivid-003: reconnect [ 1373.884263][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1373.894671][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1373.904412][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1373.913994][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1373.959929][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1373.967888][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1375.220916][T12716] syz.0.1104 (12716): drop_caches: 2 [ 1376.110651][ T5243] Bluetooth: hci0: command tx timeout [ 1377.628543][T12378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.641877][T12378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.694798][T12378] bridge_slave_0: entered allmulticast mode [ 1377.717459][T12378] bridge_slave_0: entered promiscuous mode [ 1377.853953][T12727] dlm: no locking on control device [ 1377.959541][T12683] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1098'. [ 1378.187144][ T5243] Bluetooth: hci0: command tx timeout [ 1378.297767][T12727] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1107'. [ 1378.684168][T12733] syz.4.1108 (12733): drop_caches: 2 [ 1380.267198][ T5243] Bluetooth: hci0: command tx timeout [ 1380.327533][T12737] vivid-004: disconnect [ 1381.015657][T12735] vivid-004: reconnect [ 1382.735930][T12748] syz.0.1111 (12748): drop_caches: 2 [ 1383.917787][T12748] 9pnet_fd: Insufficient options for proto=fd [ 1384.427589][ T5243] Bluetooth: hci0: command tx timeout [ 1386.354721][T12773] vivid-007: kernel_thread() failed [ 1386.982686][T12788] syz.1.1116 (12788): drop_caches: 2 [ 1387.042491][T12788] 9pnet_fd: Insufficient options for proto=fd [ 1388.233046][T12641] chnl_net:caif_netlink_parms(): no params data found [ 1389.883204][ T1310] bridge_slave_0: left allmulticast mode [ 1389.897043][ T1310] bridge_slave_0: left promiscuous mode [ 1389.918820][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.959342][ T1310] bridge_slave_1: left allmulticast mode [ 1389.971928][ T1310] bridge_slave_1: left promiscuous mode [ 1389.979261][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.994186][ T1310] bridge_slave_0: left allmulticast mode [ 1390.000983][ T1310] bridge_slave_0: left promiscuous mode [ 1390.017291][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1390.052988][T12810] syz.4.1119 (12810): drop_caches: 2 [ 1390.158762][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.351182][ T25] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1390.377109][ T25] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1390.386571][ T25] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.399977][ T25] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1390.416563][ T25] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1390.438884][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.470491][ T25] usb 2-1: Product: syz [ 1390.483039][ T25] usb 2-1: Manufacturer: syz [ 1390.508997][ T25] usb 2-1: SerialNumber: syz [ 1391.227838][ T1310] bond0 (unregistering): Released all slaves [ 1391.458100][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.578391][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.640538][ T1310] bond0 (unregistering): Released all slaves [ 1391.830289][T12701] chnl_net:caif_netlink_parms(): no params data found [ 1391.937138][ T25] usb 2-1: USB disconnect, device number 5 [ 1392.690784][T12825] syz.1.1121 (12825): drop_caches: 2 [ 1394.073371][T12834] syz.1.1124 (12834): drop_caches: 2 [ 1395.212573][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.242325][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.257554][T12641] bridge_slave_0: entered allmulticast mode [ 1395.266157][T12641] bridge_slave_0: entered promiscuous mode [ 1395.424079][ T1310] hsr_slave_0: left promiscuous mode [ 1395.462836][ T1310] hsr_slave_1: left promiscuous mode [ 1395.475292][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.876767][T12841] syz.4.1125 (12841): drop_caches: 2 [ 1396.463419][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.333441][ T29] audit: type=1326 audit(1724722468.047:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.1.1126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5efc779e79 code=0x0 [ 1404.300469][T12883] syz.4.1135 (12883): drop_caches: 2 [ 1407.423680][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1408.553997][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1409.682031][T12641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.692161][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.700533][T12641] bridge_slave_1: entered allmulticast mode [ 1409.708758][T12641] bridge_slave_1: entered promiscuous mode [ 1411.431593][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.469211][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.517290][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.540049][T12701] bridge_slave_0: entered allmulticast mode [ 1411.549058][T12701] bridge_slave_0: entered promiscuous mode [ 1411.561405][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.568871][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.576251][T12701] bridge_slave_1: entered allmulticast mode [ 1411.587299][T12701] bridge_slave_1: entered promiscuous mode [ 1411.673053][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.235689][T12641] team0: Port device team_slave_0 added [ 1412.379302][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1412.393241][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1412.401614][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1412.457605][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1412.465970][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1412.473724][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1412.635542][T12928] syz.4.1144 (12928): drop_caches: 2 [ 1413.771238][T12701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.854493][T12641] team0: Port device team_slave_1 added [ 1413.931924][T12934] syz.1.1145 (12934): drop_caches: 2 [ 1413.956302][T12934] 9pnet_fd: Insufficient options for proto=fd [ 1414.042010][T12701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.297439][T12942] syz.4.1146 (12942): drop_caches: 2 [ 1414.344994][T12942] 9pnet_fd: Insufficient options for proto=fd [ 1414.529732][ T5233] Bluetooth: hci2: command tx timeout [ 1414.817669][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.392274][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.419187][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.593674][T12701] team0: Port device team_slave_0 added [ 1415.659095][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.687148][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.976821][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.450544][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1416.738926][ T5243] Bluetooth: hci2: command tx timeout [ 1416.926045][T12701] team0: Port device team_slave_1 added [ 1417.196439][T12701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.212863][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.257678][T12701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.365460][T12701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.397093][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.425177][T12701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.536264][T12641] hsr_slave_0: entered promiscuous mode [ 1417.556903][T12641] hsr_slave_1: entered promiscuous mode [ 1417.563868][T12641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.588828][T12641] Cannot create hsr debugfs directory [ 1418.052268][T12701] hsr_slave_0: entered promiscuous mode [ 1418.059923][T12701] hsr_slave_1: entered promiscuous mode [ 1418.066666][T12701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1418.074533][T12701] Cannot create hsr debugfs directory [ 1418.343937][T12964] syz.1.1148 (12964): drop_caches: 2 [ 1418.614520][ T5233] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1419.055503][ T5233] Bluetooth: hci2: command tx timeout [ 1419.713351][T12970] syz.4.1149 (12970): drop_caches: 2 [ 1420.932988][ T1310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.009642][T12974] syz.1.1150 (12974): drop_caches: 2 [ 1421.078073][ T5243] Bluetooth: hci2: command tx timeout [ 1421.366197][T12978] syz.4.1151 (12978): drop_caches: 2 [ 1421.514101][T12978] 9pnet_fd: Insufficient options for proto=fd [ 1422.518359][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1422.536183][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1422.557308][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1422.578975][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1422.589103][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1422.596828][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1422.602337][ T1310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.025347][T12923] chnl_net:caif_netlink_parms(): no params data found [ 1423.183342][ T1310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.572914][T12496] Bluetooth: hci5: Frame reassembly failed (-84) [ 1424.209717][ T1310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.667413][ T5233] Bluetooth: hci1: command tx timeout [ 1424.827818][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.835225][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.853404][T12923] bridge_slave_0: entered allmulticast mode [ 1424.872977][T12923] bridge_slave_0: entered promiscuous mode [ 1425.100944][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.120327][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.128624][T12923] bridge_slave_1: entered allmulticast mode [ 1425.141483][T12923] bridge_slave_1: entered promiscuous mode [ 1425.227634][T13013] syz.1.1155 (13013): drop_caches: 2 [ 1425.547228][ T5243] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1425.784165][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.812711][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.518019][T13018] syz.4.1156 (13018): drop_caches: 2 [ 1426.812911][ T5243] Bluetooth: hci1: command tx timeout [ 1427.566864][ T1310] bridge_slave_1: left allmulticast mode [ 1427.587045][ T1310] bridge_slave_1: left promiscuous mode [ 1427.602669][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.632783][ T1310] bridge_slave_0: left allmulticast mode [ 1427.657298][ T1310] bridge_slave_0: left promiscuous mode [ 1427.664224][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.908508][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.915023][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.988625][ T5243] Bluetooth: hci1: command tx timeout [ 1430.056790][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.187241][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.211310][ T1310] bond0 (unregistering): Released all slaves [ 1431.070522][ T5243] Bluetooth: hci1: command tx timeout [ 1431.910464][T13040] syz.1.1161 (13040): drop_caches: 2 [ 1434.064954][T13047] vivid-007: kernel_thread() failed [ 1434.533975][T12923] team0: Port device team_slave_0 added [ 1434.734736][T13055] syz.1.1164 (13055): drop_caches: 2 [ 1434.794019][T13055] 9pnet_fd: Insufficient options for proto=fd [ 1436.100429][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1436.115302][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1436.181144][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1436.198237][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1436.208441][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1436.218754][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1436.245967][T12923] team0: Port device team_slave_1 added [ 1436.347159][T13062] vivid-003: disconnect [ 1437.107718][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.114825][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.227124][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.334882][ T1310] hsr_slave_0: left promiscuous mode [ 1437.348382][ T1310] hsr_slave_1: left promiscuous mode [ 1437.363457][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.392155][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.419664][T13059] vivid-003: reconnect [ 1437.493036][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.537136][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.701710][ T1310] veth1_macvtap: left promiscuous mode [ 1437.744724][ T1310] veth0_macvtap: left promiscuous mode [ 1437.775639][ T1310] veth1_vlan: left promiscuous mode [ 1437.798564][ T1310] veth0_vlan: left promiscuous mode [ 1438.922529][ T5233] Bluetooth: hci5: command tx timeout [ 1439.597875][T13084] syz.1.1167 (13084): drop_caches: 2 [ 1439.872573][T13084] 9pnet_fd: Insufficient options for proto=fd [ 1441.109757][T13088] syz.1.1168 (13088): drop_caches: 2 [ 1441.383552][ T5233] Bluetooth: hci5: command tx timeout [ 1443.467181][ T5233] Bluetooth: hci5: command tx timeout [ 1443.953320][T13102] syz.1.1172 (13102): drop_caches: 2 [ 1444.177360][T13102] 9pnet_fd: Insufficient options for proto=fd [ 1445.547279][ T5233] Bluetooth: hci5: command tx timeout [ 1447.128718][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1447.490524][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1452.481383][T13137] syz.1.1179 (13137): drop_caches: 2 [ 1452.655624][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.710764][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.944894][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.274951][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1453.286580][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1453.337334][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1453.352989][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1453.361174][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1453.369231][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1453.447152][T12981] chnl_net:caif_netlink_parms(): no params data found [ 1453.942947][T12923] hsr_slave_0: entered promiscuous mode [ 1454.000136][T12923] hsr_slave_1: entered promiscuous mode [ 1454.017465][T12923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1454.025090][T12923] Cannot create hsr debugfs directory [ 1454.423974][T12981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.431453][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.439971][T12981] bridge_slave_0: entered allmulticast mode [ 1454.448752][T12981] bridge_slave_0: entered promiscuous mode [ 1454.481070][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.519564][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.555215][T12981] bridge_slave_1: entered allmulticast mode [ 1454.569851][T12981] bridge_slave_1: entered promiscuous mode [ 1455.598312][ T5233] Bluetooth: hci0: command tx timeout [ 1455.974604][T12981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.081626][T12981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.248303][T13164] syz.1.1182 (13164): drop_caches: 2 [ 1456.310821][T13164] 9pnet_fd: Insufficient options for proto=fd [ 1457.175069][T12981] team0: Port device team_slave_0 added [ 1457.465120][ T1310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.595977][T12981] team0: Port device team_slave_1 added [ 1457.627557][ T5233] Bluetooth: hci0: command tx timeout [ 1457.891692][ T1310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.942417][T12981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.957367][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.990446][T12981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.146254][ T1310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.175703][T12981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.184002][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1458.220202][T12981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.267128][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1458.493638][ T9] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1458.517125][ T9] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1458.526126][ T9] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.537177][ T9] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1458.553020][ T1310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.582653][T13057] chnl_net:caif_netlink_parms(): no params data found [ 1458.590307][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1458.602502][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.611709][ T9] usb 2-1: Product: syz [ 1458.616158][ T9] usb 2-1: Manufacturer: syz [ 1458.622985][ T9] usb 2-1: SerialNumber: syz [ 1458.929064][T12981] hsr_slave_0: entered promiscuous mode [ 1458.939472][T12981] hsr_slave_1: entered promiscuous mode [ 1458.955594][T12981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.974710][T12981] Cannot create hsr debugfs directory [ 1459.073963][T13138] chnl_net:caif_netlink_parms(): no params data found [ 1459.707121][ T5233] Bluetooth: hci0: command tx timeout [ 1460.131184][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.179198][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.224075][T13057] bridge_slave_0: entered allmulticast mode [ 1460.287840][T13057] bridge_slave_0: entered promiscuous mode [ 1460.606026][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.630171][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.638511][T13057] bridge_slave_1: entered allmulticast mode [ 1460.650785][T13057] bridge_slave_1: entered promiscuous mode [ 1460.752124][ T9] usb 2-1: USB disconnect, device number 6 [ 1460.970059][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.987249][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.994603][T13138] bridge_slave_0: entered allmulticast mode [ 1461.015104][T13138] bridge_slave_0: entered promiscuous mode [ 1461.278506][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.285831][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.302798][T13138] bridge_slave_1: entered allmulticast mode [ 1461.313705][T13138] bridge_slave_1: entered promiscuous mode [ 1461.359627][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.599064][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.997771][ T5233] Bluetooth: hci0: command tx timeout [ 1462.020635][ T1310] bridge_slave_1: left allmulticast mode [ 1462.026347][ T1310] bridge_slave_1: left promiscuous mode [ 1462.043252][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.069835][ T1310] bridge_slave_0: left allmulticast mode [ 1462.082784][ T1310] bridge_slave_0: left promiscuous mode [ 1462.093634][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.116785][ T1310] bridge_slave_1: left allmulticast mode [ 1462.127042][ T1310] bridge_slave_1: left promiscuous mode [ 1462.145290][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.161593][ T1310] bridge_slave_0: left allmulticast mode [ 1462.177007][ T1310] bridge_slave_0: left promiscuous mode [ 1462.184141][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.210722][ T1310] bridge_slave_1: left allmulticast mode [ 1462.228732][ T1310] bridge_slave_1: left promiscuous mode [ 1462.234653][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.255450][ T1310] bridge_slave_0: left allmulticast mode [ 1462.277361][ T1310] bridge_slave_0: left promiscuous mode [ 1462.283400][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.836861][T13209] syz.1.1185 (13209): drop_caches: 2 [ 1465.274019][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.306681][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.331083][ T1310] bond0 (unregistering): Released all slaves [ 1465.377713][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.467810][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.547279][ T1310] bond0 (unregistering): Released all slaves [ 1465.583875][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.631032][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.654829][ T1310] bond0 (unregistering): Released all slaves [ 1466.446866][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.521234][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.748633][T12923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1466.854737][T13057] team0: Port device team_slave_0 added [ 1467.055646][T13225] syz.1.1189 (13225): drop_caches: 2 [ 1467.285362][T12923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1467.914184][T13138] team0: Port device team_slave_0 added [ 1467.939866][T13057] team0: Port device team_slave_1 added [ 1467.953714][T13138] team0: Port device team_slave_1 added [ 1468.030050][T12923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1468.246125][T12923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1468.368403][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.375506][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.405949][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.469100][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.476113][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.513987][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.714238][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.734416][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.817206][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.860345][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.879892][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.927499][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.025794][ T1310] hsr_slave_0: left promiscuous mode [ 1469.047301][ T1310] hsr_slave_1: left promiscuous mode [ 1469.065085][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.076190][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.096052][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.106526][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.134954][ T1310] hsr_slave_0: left promiscuous mode [ 1469.148304][ T1310] hsr_slave_1: left promiscuous mode [ 1469.164667][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.174454][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.187934][ T1310] hsr_slave_0: left promiscuous mode [ 1469.202584][ T1310] hsr_slave_1: left promiscuous mode [ 1469.210532][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.229760][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.286687][ T1310] veth1_macvtap: left promiscuous mode [ 1469.292438][ T1310] veth0_macvtap: left promiscuous mode [ 1469.299445][ T1310] veth1_vlan: left promiscuous mode [ 1469.304961][ T1310] veth0_vlan: left promiscuous mode [ 1469.628115][T13247] vivid-003: disconnect [ 1470.273609][T13245] vivid-003: reconnect [ 1471.300599][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1471.458851][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1472.289252][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1472.301048][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1472.309766][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1472.319628][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1472.335677][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1472.343931][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1472.772016][T13259] syz.1.1193 (13259): drop_caches: 2 [ 1474.055858][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1474.132903][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1474.554904][ T5243] Bluetooth: hci4: command tx timeout [ 1475.688110][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1475.744270][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1476.197528][ T9670] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1476.397416][ T9670] usb 2-1: Using ep0 maxpacket: 8 [ 1476.473872][ T9670] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.507068][ T9670] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1476.519011][ T9670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.534980][ T9670] usb 2-1: config 0 descriptor?? [ 1476.570982][ T9670] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1476.587155][ T5243] Bluetooth: hci4: command tx timeout [ 1477.182628][T13138] hsr_slave_0: entered promiscuous mode [ 1477.198819][T13138] hsr_slave_1: entered promiscuous mode [ 1477.265467][T13057] hsr_slave_0: entered promiscuous mode [ 1477.314608][T13057] hsr_slave_1: entered promiscuous mode [ 1477.323852][T13057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1477.338621][T13057] Cannot create hsr debugfs directory [ 1478.477114][T10100] usb 2-1: USB disconnect, device number 7 [ 1478.677319][ T5243] Bluetooth: hci4: command tx timeout [ 1478.850200][T12981] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1479.007741][T12981] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1479.906235][T12981] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1480.400786][T13057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1480.805012][ T5243] Bluetooth: hci4: command tx timeout [ 1481.583194][T13057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1481.666387][T13057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1481.745168][T13057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1482.011517][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1482.022978][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1482.035689][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1482.048003][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1482.056125][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1482.063778][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1482.156342][T13253] chnl_net:caif_netlink_parms(): no params data found [ 1482.248917][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1483.039745][T13317] 9pnet_fd: Insufficient options for proto=fd [ 1483.700567][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.737387][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.748655][T13253] bridge_slave_0: entered allmulticast mode [ 1483.785071][T13253] bridge_slave_0: entered promiscuous mode [ 1483.879152][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.905553][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.930515][T13253] bridge_slave_1: entered allmulticast mode [ 1483.952242][T13253] bridge_slave_1: entered promiscuous mode [ 1484.109409][ T5243] Bluetooth: hci1: command tx timeout [ 1484.432002][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.562011][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.578196][ T1310] bridge_slave_1: left allmulticast mode [ 1484.583912][ T1310] bridge_slave_1: left promiscuous mode [ 1484.598707][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.629104][ T1310] bridge_slave_0: left allmulticast mode [ 1484.635001][ T1310] bridge_slave_0: left promiscuous mode [ 1484.643296][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.027729][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.063679][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.095543][ T1310] bond0 (unregistering): Released all slaves [ 1485.459852][ T1310] hsr_slave_0: left promiscuous mode [ 1485.466687][ T1310] hsr_slave_1: left promiscuous mode [ 1485.490971][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.500562][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.944009][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1486.005097][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1486.189641][ T5243] Bluetooth: hci1: command tx timeout [ 1486.409193][T13138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1487.100699][T13253] team0: Port device team_slave_0 added [ 1487.123006][T13253] team0: Port device team_slave_1 added [ 1487.296854][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.314517][T13138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1487.387723][T13138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1487.454493][T13138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1487.717061][T13345] syz.1.1203 (13345): drop_caches: 2 [ 1488.184268][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.267634][ T5243] Bluetooth: hci1: command tx timeout [ 1488.440047][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.560824][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.578862][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.585873][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.612513][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.641351][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.726202][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.733512][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.795496][T13303] chnl_net:caif_netlink_parms(): no params data found [ 1488.992989][T12496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.000327][T12496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.138870][T13253] hsr_slave_0: entered promiscuous mode [ 1489.160743][T13253] hsr_slave_1: entered promiscuous mode [ 1489.163540][T13352] dlm: no locking on control device [ 1489.187044][T13253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1489.202620][T13253] Cannot create hsr debugfs directory [ 1489.479006][T13352] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1204'. [ 1490.040429][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.053972][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.085964][T13303] bridge_slave_0: entered allmulticast mode [ 1490.101280][T13303] bridge_slave_0: entered promiscuous mode [ 1490.122305][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.138096][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.148402][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.175627][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.183644][T13303] bridge_slave_1: entered allmulticast mode [ 1490.197252][T13303] bridge_slave_1: entered promiscuous mode [ 1490.347135][ T5243] Bluetooth: hci1: command tx timeout [ 1490.641027][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.672080][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.888628][T13303] team0: Port device team_slave_0 added [ 1490.914285][T13303] team0: Port device team_slave_1 added [ 1491.007119][ T943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1491.076318][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.083876][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.116309][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.216794][ T943] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1491.226086][ T943] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1491.243787][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.261484][ T943] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.273437][ T943] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1491.283053][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.283105][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.341368][ T943] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1491.351034][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.362120][ T943] usb 2-1: Product: syz [ 1491.377816][ T943] usb 2-1: Manufacturer: syz [ 1491.401367][ T943] usb 2-1: SerialNumber: syz [ 1492.070687][T13303] hsr_slave_0: entered promiscuous mode [ 1492.120959][T13303] hsr_slave_1: entered promiscuous mode [ 1492.166377][T13303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1492.186376][T13303] Cannot create hsr debugfs directory [ 1492.838905][ T1310] bridge_slave_1: left allmulticast mode [ 1492.844825][ T1310] bridge_slave_1: left promiscuous mode [ 1492.857687][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.869287][ T1310] bridge_slave_0: left allmulticast mode [ 1492.875180][ T1310] bridge_slave_0: left promiscuous mode [ 1492.893811][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.024855][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1493.041478][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1493.054117][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1493.073489][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1493.084617][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1493.095743][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1493.341614][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.363399][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.385827][ T1310] bond0 (unregistering): Released all slaves [ 1493.565117][T13138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.726407][ T943] usb 2-1: USB disconnect, device number 8 [ 1493.861746][T13138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.909033][ T1310] hsr_slave_0: left promiscuous mode [ 1493.919427][ T1310] hsr_slave_1: left promiscuous mode [ 1493.926237][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.944247][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.089295][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1495.270449][ T5233] Bluetooth: hci2: command tx timeout [ 1495.444750][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1496.030943][T12496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.038311][T12496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.131091][T12496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.138441][T12496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.264401][T13253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1497.302300][T13253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1497.312343][ T5233] Bluetooth: hci2: command tx timeout [ 1497.776839][T13401] syz.1.1209 (13401): drop_caches: 2 [ 1499.000292][T13253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1499.049545][T13253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1499.398444][ T5233] Bluetooth: hci2: command tx timeout [ 1499.564200][T13253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.672813][T13407] dlm: no locking on control device [ 1499.919434][T13407] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1210'. [ 1499.968323][T13253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.590570][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.597909][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.810712][T13378] chnl_net:caif_netlink_parms(): no params data found [ 1500.869513][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.876789][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.022907][T13303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1501.066830][T13303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1501.112634][T13303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1501.221133][T13303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1501.369568][T13420] 9pnet_fd: Insufficient options for proto=fd [ 1501.577852][ T5233] Bluetooth: hci2: command tx timeout [ 1502.005346][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.257489][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.264853][T13378] bridge_slave_0: entered allmulticast mode [ 1502.294984][T13378] bridge_slave_0: entered promiscuous mode [ 1502.342894][T13138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.385505][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.415878][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.437829][T13378] bridge_slave_1: entered allmulticast mode [ 1502.468126][T13378] bridge_slave_1: entered promiscuous mode [ 1502.813953][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.830668][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.144021][ T1310] bridge_slave_1: left allmulticast mode [ 1503.158416][ T1310] bridge_slave_1: left promiscuous mode [ 1503.171621][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.215336][ T1310] bridge_slave_0: left allmulticast mode [ 1503.231208][ T1310] bridge_slave_0: left promiscuous mode [ 1503.239938][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.337563][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1503.613072][ T25] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1503.624887][ T25] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1503.637825][ T25] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.648689][ T25] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1503.670306][ T25] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1503.692496][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.722219][ T25] usb 2-1: Product: syz [ 1503.726500][ T25] usb 2-1: Manufacturer: syz [ 1503.739049][ T25] usb 2-1: SerialNumber: syz [ 1504.003503][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.021763][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.042919][ T1310] bond0 (unregistering): Released all slaves [ 1504.160914][T13378] team0: Port device team_slave_0 added [ 1504.246879][T13378] team0: Port device team_slave_1 added [ 1504.392633][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.404788][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.439630][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.483260][ T1310] hsr_slave_0: left promiscuous mode [ 1504.498316][ T1310] hsr_slave_1: left promiscuous mode [ 1504.506334][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.521401][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.263003][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 1505.370411][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 1505.752084][ T25] usb 2-1: USB disconnect, device number 9 [ 1506.482600][T13438] vivid-003: disconnect [ 1507.058177][T13436] vivid-003: reconnect [ 1507.133959][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.151823][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.202980][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.685601][T13378] hsr_slave_0: entered promiscuous mode [ 1508.054054][T13378] hsr_slave_1: entered promiscuous mode [ 1508.337383][T13378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1508.367312][T13378] Cannot create hsr debugfs directory [ 1508.525523][T13138] veth0_vlan: entered promiscuous mode [ 1509.004905][T13450] syz.1.1216 (13450): drop_caches: 2 [ 1509.805436][T13138] veth1_vlan: entered promiscuous mode [ 1509.906555][T13303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.064049][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.193705][T13303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.253004][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.260264][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.312545][T13138] veth0_macvtap: entered promiscuous mode [ 1510.399047][T13456] syz.1.1217 (13456): drop_caches: 2 [ 1510.453465][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.460784][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.522323][T13138] veth1_macvtap: entered promiscuous mode [ 1510.866358][T13253] veth0_vlan: entered promiscuous mode [ 1510.929696][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1510.965719][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.988187][T13138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.034305][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1511.061510][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.084285][T13138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.156940][T13253] veth1_vlan: entered promiscuous mode [ 1511.191741][T13138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.215968][T13138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.225755][T13138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.237106][T13138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.451899][T13378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1511.511117][T13378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1511.549061][T13378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1511.661252][T13378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1511.831516][T13253] veth0_macvtap: entered promiscuous mode [ 1512.076025][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.105190][T13253] veth1_macvtap: entered promiscuous mode [ 1512.124057][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.164977][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.182929][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.194728][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.206440][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.223713][T13253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.321126][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.338802][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.351745][T13253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.363480][T13253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.379938][T13253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.408444][T13253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.417305][T13253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.428138][T13253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.447345][T13253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.498033][T13303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.560947][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1513.431245][T13469] syz.1.1219 (13469): drop_caches: 2 [ 1514.485660][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.787415][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.795473][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.864214][T13303] veth0_vlan: entered promiscuous mode [ 1514.951820][T13378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.642092][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1515.652827][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1515.666727][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1515.678480][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1515.692742][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1515.706460][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1515.935029][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.942352][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.978087][T13303] veth1_vlan: entered promiscuous mode [ 1516.032783][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.040134][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.115788][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.153636][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.540639][ T1054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.031028][T13487] syz.0.1140 (13487): drop_caches: 2 [ 1520.952071][T13488] syz.1.1221 (13488): drop_caches: 2 [ 1522.087179][ T5243] Bluetooth: hci0: command tx timeout [ 1522.504402][ T1054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.658989][T13497] syz.0.1222 (13497): drop_caches: 2 [ 1523.612198][ T1054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.801339][T13303] veth0_macvtap: entered promiscuous mode [ 1523.993466][ T1054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.107206][ T5233] Bluetooth: hci0: command tx timeout [ 1524.279215][T13303] veth1_macvtap: entered promiscuous mode [ 1524.985301][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.046992][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.089653][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.116375][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.132404][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.149587][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.200889][T13303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.382677][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.417303][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.460842][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.487557][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.513827][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.551201][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.599594][T13303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.673385][ T1054] bridge_slave_1: left allmulticast mode [ 1525.682519][ T1054] bridge_slave_1: left promiscuous mode [ 1525.707719][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.739516][ T1054] bridge_slave_0: left allmulticast mode [ 1525.745182][ T1054] bridge_slave_0: left promiscuous mode [ 1525.760947][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.200717][ T5233] Bluetooth: hci0: command tx timeout [ 1526.407215][T13536] syz.0.1225 (13536): drop_caches: 2 [ 1528.267661][ T5233] Bluetooth: hci0: command tx timeout [ 1528.516268][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.556409][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.595357][ T1054] bond0 (unregistering): Released all slaves [ 1528.731503][T13303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.750822][T13303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.761493][T13303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.776160][T13303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.893561][T13475] chnl_net:caif_netlink_parms(): no params data found [ 1529.320378][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.677051][ T5208] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1530.131165][ T5208] usb 2-1: Using ep0 maxpacket: 8 [ 1530.175921][ T5208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.225360][ T5208] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1530.252270][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.273904][ T5208] usb 2-1: config 0 descriptor?? [ 1530.304043][ T5208] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1530.394734][ T1054] hsr_slave_0: left promiscuous mode [ 1530.415746][ T1054] hsr_slave_1: left promiscuous mode [ 1530.438134][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.449879][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.468504][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.487271][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.571512][ T1054] veth1_macvtap: left promiscuous mode [ 1530.582734][ T1054] veth0_macvtap: left promiscuous mode [ 1530.588668][ T1054] veth1_vlan: left promiscuous mode [ 1530.594131][ T1054] veth0_vlan: left promiscuous mode [ 1531.904528][ T9] usb 2-1: USB disconnect, device number 10 [ 1532.187477][ T5243] Bluetooth: hci5: command 0x1003 tx timeout [ 1532.202314][ T5233] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1532.500695][T13603] syz.1.1230 (13603): drop_caches: 2 [ 1534.465087][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 1534.680741][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 1538.742688][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.758718][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.789901][T13475] bridge_slave_0: entered allmulticast mode [ 1538.818540][T13475] bridge_slave_0: entered promiscuous mode [ 1538.874046][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1538.921519][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.939283][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.953833][T13475] bridge_slave_1: entered allmulticast mode [ 1539.007120][T13475] bridge_slave_1: entered promiscuous mode [ 1539.333655][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.340869][ T2506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.388039][ T2506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.393311][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.666377][T13666] syz.1.1237 (13666): drop_caches: 2 [ 1540.717703][T13475] team0: Port device team_slave_0 added [ 1540.805814][T13475] team0: Port device team_slave_1 added [ 1541.037371][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.058889][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.147223][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.189050][T13378] veth0_vlan: entered promiscuous mode [ 1541.222964][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.256638][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.342383][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.644800][T13680] syz.0.1239 (13680): drop_caches: 2 [ 1542.308062][T13378] veth1_vlan: entered promiscuous mode [ 1542.865522][T13475] hsr_slave_0: entered promiscuous mode [ 1542.898220][T13475] hsr_slave_1: entered promiscuous mode [ 1543.140340][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1543.155370][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1543.174229][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1543.187748][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1543.198369][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1543.210141][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1543.305471][T12496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.560217][T12496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.792478][T12496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.022219][T12496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.383420][ T5243] Bluetooth: hci1: command tx timeout [ 1545.639133][T13378] veth0_macvtap: entered promiscuous mode [ 1545.842468][T13378] veth1_macvtap: entered promiscuous mode [ 1546.926101][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.948015][T13713] dlm: no locking on control device [ 1546.985359][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.353725][T13719] syz.1.1244 (13719): drop_caches: 2 [ 1547.647630][ T5243] Bluetooth: hci1: command tx timeout [ 1547.932884][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.222016][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.232168][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.243042][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.255963][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.478440][T13713] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1243'. [ 1548.504917][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.523531][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.535521][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.556101][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.574716][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.592562][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.614434][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.766387][T13378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.795258][T13378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.808855][T13378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.818941][T13378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.848929][T12496] bridge_slave_1: left allmulticast mode [ 1548.854714][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1548.854747][T12496] bridge_slave_1: left promiscuous mode [ 1548.879170][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.911532][T12496] bridge_slave_0: left allmulticast mode [ 1548.918984][T12496] bridge_slave_0: left promiscuous mode [ 1548.924905][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.107611][ T9] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1549.117097][ T9] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1549.135621][ T9] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.156662][ T9] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1549.185375][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1549.195602][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.204363][ T9] usb 2-1: Product: syz [ 1549.220396][ T9] usb 2-1: Manufacturer: syz [ 1549.225414][ T9] usb 2-1: SerialNumber: syz [ 1549.707285][ T5233] Bluetooth: hci1: command tx timeout [ 1549.845529][T12496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.860345][T12496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.877533][T12496] bond0 (unregistering): Released all slaves [ 1549.998642][T13733] syz.0.1247 (13733): drop_caches: 2 [ 1551.256255][T13687] chnl_net:caif_netlink_parms(): no params data found [ 1551.348023][ T9] usb 2-1: USB disconnect, device number 11 [ 1551.563592][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.570810][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.787183][ T5233] Bluetooth: hci1: command tx timeout [ 1551.972060][T13746] dlm: no locking on control device [ 1552.018238][T13746] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1249'. [ 1552.429143][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.450923][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.459595][T13687] bridge_slave_0: entered allmulticast mode [ 1552.470579][T13687] bridge_slave_0: entered promiscuous mode [ 1552.709248][T12496] hsr_slave_0: left promiscuous mode [ 1552.737450][T12496] hsr_slave_1: left promiscuous mode [ 1552.761844][T12496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.784226][T12496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.876104][T12496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.921683][T12496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.036618][T12496] veth1_macvtap: left promiscuous mode [ 1553.042960][T12496] veth0_macvtap: left promiscuous mode [ 1553.063476][T12496] veth1_vlan: left promiscuous mode [ 1553.093871][T12496] veth0_vlan: left promiscuous mode [ 1553.696259][T13768] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1555.100182][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1555.111733][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1555.596024][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1555.612929][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1555.827382][ T5243] Bluetooth: hci0: command tx timeout [ 1556.509126][ T9498] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1556.520051][ T9498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1557.859848][T12496] team0 (unregistering): Port device team_slave_1 removed [ 1558.058039][T12496] team0 (unregistering): Port device team_slave_0 removed [ 1558.059544][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1558.377119][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1558.446506][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.487840][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1558.531009][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.566847][ T25] usb 1-1: config 0 descriptor?? [ 1558.588101][ T9498] Bluetooth: hci5: command tx timeout [ 1558.619212][ T25] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1559.307542][ T5229] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1559.512138][ T5229] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1559.544198][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.553253][ T5229] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1559.571867][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.606172][ T5229] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.622131][T13687] bridge_slave_1: entered allmulticast mode [ 1559.670164][ T5229] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1559.678235][T13687] bridge_slave_1: entered promiscuous mode [ 1559.710784][ T5229] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1559.760279][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.847910][ T5229] usb 2-1: Product: syz [ 1559.852134][ T5229] usb 2-1: Manufacturer: syz [ 1559.856773][ T5229] usb 2-1: SerialNumber: syz [ 1560.254500][ T943] usb 1-1: USB disconnect, device number 32 [ 1560.437104][T13687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.503132][T13687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.673746][ T9498] Bluetooth: hci5: command tx timeout [ 1561.043965][T13475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1561.086355][T13475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1561.226051][T13687] team0: Port device team_slave_0 added [ 1561.238616][T13475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1561.303033][T13687] team0: Port device team_slave_1 added [ 1561.311450][T13475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1561.447226][ T1855] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1561.529666][T13687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.580588][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.670698][ T1855] usb 1-1: config index 0 descriptor too short (expected 10770, got 27) [ 1561.684773][T13687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.701773][ T1855] usb 1-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1561.732089][ T1855] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.792074][T13687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.796375][ T1855] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1561.839353][ T1855] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1561.864983][ T1855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.867575][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.895275][ T1855] usb 1-1: Product: syz [ 1561.923235][ T1855] usb 1-1: Manufacturer: syz [ 1561.961133][ T1855] usb 1-1: SerialNumber: syz [ 1561.977170][ T5229] usb 2-1: USB disconnect, device number 12 [ 1562.043187][T13687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.650442][T13819] syz.1.1258 (13819): drop_caches: 2 [ 1562.750537][ T9498] Bluetooth: hci5: command tx timeout [ 1562.935743][T13819] 9pnet_fd: Insufficient options for proto=fd [ 1563.819173][T13687] hsr_slave_0: entered promiscuous mode [ 1563.863325][T13687] hsr_slave_1: entered promiscuous mode [ 1563.891512][T13687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.899986][T13687] Cannot create hsr debugfs directory [ 1563.908430][ T1855] usb 1-1: USB disconnect, device number 33 [ 1564.083396][T12496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.325944][T13832] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1564.515972][T12496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.766174][T12496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.827587][ T9498] Bluetooth: hci5: command tx timeout [ 1565.073141][T13837] dlm: no locking on control device [ 1565.095167][T12496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.260117][T13837] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1261'. [ 1566.348002][ T9498] Bluetooth: hci0: command tx timeout [ 1566.484493][T13775] chnl_net:caif_netlink_parms(): no params data found [ 1568.008010][T13856] vivid-007: kernel_thread() failed [ 1568.196491][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.608386][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.615651][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.664019][T13775] bridge_slave_0: entered allmulticast mode [ 1568.684975][T13775] bridge_slave_0: entered promiscuous mode [ 1568.714713][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.734769][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.748524][T13775] bridge_slave_1: entered allmulticast mode [ 1568.780228][T13775] bridge_slave_1: entered promiscuous mode [ 1568.820717][T12496] bridge_slave_1: left allmulticast mode [ 1568.945332][T12496] bridge_slave_1: left promiscuous mode [ 1569.015274][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.772438][T12496] bridge_slave_0: left allmulticast mode [ 1569.791829][T12496] bridge_slave_0: left promiscuous mode [ 1569.815224][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.149256][ T9670] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1570.354180][ T9670] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1570.382336][ T9670] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1570.441231][ T9670] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.611830][ T9670] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1570.658528][ T9670] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1570.814596][ T9670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.824009][ T9670] usb 2-1: Product: syz [ 1570.832380][ T9670] usb 2-1: Manufacturer: syz [ 1570.837471][ T9670] usb 2-1: SerialNumber: syz [ 1571.126217][T13888] vivid-001: disconnect [ 1571.830028][T13886] vivid-001: reconnect [ 1572.207247][ T9670] usb 2-1: USB disconnect, device number 13 [ 1572.905474][T13897] syz.1.1270 (13897): drop_caches: 2 [ 1573.039942][T13897] 9pnet_fd: Insufficient options for proto=fd [ 1574.027718][T13891] dlm: no locking on control device [ 1574.158006][T12496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.269999][T12496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.338362][T12496] bond0 (unregistering): Released all slaves [ 1575.169513][T13891] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1269'. [ 1575.440749][T13775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.590701][T12496] hsr_slave_0: left promiscuous mode [ 1575.640337][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.650299][T12496] hsr_slave_1: left promiscuous mode [ 1575.656781][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.666322][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.677425][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.699148][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1575.710131][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1575.740065][T12496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.777248][T12496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.803674][T12496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.827432][T12496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.899211][T12496] veth1_macvtap: left promiscuous mode [ 1575.915983][T12496] veth0_macvtap: left promiscuous mode [ 1575.922063][T12496] veth1_vlan: left promiscuous mode [ 1575.928437][T12496] veth0_vlan: left promiscuous mode [ 1577.695676][T13918] syz.1.1274 (13918): drop_caches: 2 [ 1577.797380][ T9498] Bluetooth: hci2: command tx timeout [ 1579.586854][T13922] dlm: no locking on control device [ 1579.867654][ T9498] Bluetooth: hci2: command tx timeout [ 1580.091717][T12496] team0 (unregistering): Port device team_slave_1 removed [ 1580.184087][T12496] team0 (unregistering): Port device team_slave_0 removed [ 1580.450306][T13926] dlm: no locking on control device [ 1581.192501][T13775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.414431][T13922] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1275'. [ 1581.433041][T13926] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1276'. [ 1581.589146][T13775] team0: Port device team_slave_0 added [ 1581.744551][T13775] team0: Port device team_slave_1 added [ 1581.947668][ T9498] Bluetooth: hci2: command tx timeout [ 1581.961799][T13775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.970105][T13775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.052102][T13775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.169530][ T1855] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1582.184860][T13775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.212320][T13775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.304771][T13775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.487507][ T1855] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1582.538293][ T1855] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1582.576256][ T1855] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.637049][ T1855] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1582.718738][ T1855] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1582.747272][ T1855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.756250][ T1855] usb 2-1: Product: syz [ 1582.767349][ T1855] usb 2-1: Manufacturer: syz [ 1582.774149][ T1855] usb 2-1: SerialNumber: syz [ 1583.126971][T13941] syz.0.1278 (13941): drop_caches: 2 [ 1584.037136][ T9498] Bluetooth: hci2: command tx timeout [ 1584.161757][T13775] hsr_slave_0: entered promiscuous mode [ 1584.193504][T13775] hsr_slave_1: entered promiscuous mode [ 1584.206527][T13775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1584.216714][T13775] Cannot create hsr debugfs directory [ 1585.234763][T13949] vivid-007: kernel_thread() failed [ 1585.590300][ T1855] usb 2-1: USB disconnect, device number 14 [ 1585.717466][T13687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1586.170710][T13958] syz.0.1280 (13958): drop_caches: 2 [ 1586.544492][T13687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1586.793258][T13687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1587.374594][T13687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1587.567697][ T1855] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1587.781426][ T1855] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1587.804014][ T1855] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1587.824639][ T1855] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.835818][ T1855] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1587.850776][ T1855] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1587.877162][ T1855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.888197][ T1855] usb 2-1: Product: syz [ 1587.896848][ T1855] usb 2-1: Manufacturer: syz [ 1587.907379][ T1855] usb 2-1: SerialNumber: syz [ 1587.987044][ T9670] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1588.193117][ T9670] usb 1-1: Using ep0 maxpacket: 8 [ 1588.217706][ T9670] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.252353][ T9670] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1588.267454][ T9670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.294044][ T9670] usb 1-1: config 0 descriptor?? [ 1588.332757][ T9670] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1588.816794][T13903] chnl_net:caif_netlink_parms(): no params data found [ 1589.247970][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.255603][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.276280][T13903] bridge_slave_0: entered allmulticast mode [ 1589.298575][T13903] bridge_slave_0: entered promiscuous mode [ 1589.362295][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.373605][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.397615][T13903] bridge_slave_1: entered allmulticast mode [ 1589.414244][T13903] bridge_slave_1: entered promiscuous mode [ 1589.593566][T13687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.621657][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.666173][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.855290][ T1855] usb 2-1: USB disconnect, device number 15 [ 1589.950810][T13903] team0: Port device team_slave_0 added [ 1590.049293][T13903] team0: Port device team_slave_1 added [ 1590.757217][T13985] syz.1.1283 (13985): drop_caches: 2 [ 1591.746569][ T5208] usb 1-1: USB disconnect, device number 34 [ 1591.916261][T13991] syz.1.1284 (13991): drop_caches: 2 [ 1592.021763][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.052208][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.233816][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.367578][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.906180][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.970759][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.182742][T13999] syz.0.1285 (13999): drop_caches: 2 [ 1596.176054][ T9498] Bluetooth: hci4: command 0x0406 tx timeout [ 1596.575597][T13687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.653686][T12496] bridge_slave_1: left allmulticast mode [ 1596.679913][T12496] bridge_slave_1: left promiscuous mode [ 1596.709743][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.848171][T12496] bridge_slave_0: left allmulticast mode [ 1596.855204][T12496] bridge_slave_0: left promiscuous mode [ 1596.861316][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.541199][T14014] vivid-007: kernel_thread() failed [ 1599.117617][T10100] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1599.447935][T10100] usb 1-1: config index 0 descriptor too short (expected 10770, got 27) [ 1599.456313][T10100] usb 1-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1599.527217][T10100] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.543150][T10100] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1599.564315][T10100] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1599.578853][T10100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.606276][T10100] usb 1-1: Product: syz [ 1599.625248][T10100] usb 1-1: Manufacturer: syz [ 1599.646409][T10100] usb 1-1: SerialNumber: syz [ 1599.688774][T14030] dlm: no locking on control device [ 1599.725535][T10100] usb 1-1: can't set config #48, error -71 [ 1599.743958][T10100] usb 1-1: USB disconnect, device number 35 [ 1600.065453][T14036] syz.0.1291 (14036): drop_caches: 2 [ 1600.134890][T14036] 9pnet_fd: Insufficient options for proto=fd [ 1601.285838][T12496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.378326][T12496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.428319][T12496] bond0 (unregistering): Released all slaves [ 1601.635525][T14030] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1290'. [ 1601.989599][T13903] hsr_slave_0: entered promiscuous mode [ 1602.030598][T13903] hsr_slave_1: entered promiscuous mode [ 1602.078166][T13903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1602.085792][T13903] Cannot create hsr debugfs directory [ 1602.115494][ T1855] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1602.260362][T12496] hsr_slave_0: left promiscuous mode [ 1602.377381][ T1855] usb 1-1: Using ep0 maxpacket: 8 [ 1602.437698][T12496] hsr_slave_1: left promiscuous mode [ 1602.437754][ T1855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.500516][T12496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.548316][ T1855] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1602.574897][T12496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.586983][ T1855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.649159][ T1855] usb 1-1: config 0 descriptor?? [ 1602.681334][ T1855] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1603.956048][T14058] vivid-007: kernel_thread() failed [ 1605.413375][ T1855] usb 1-1: USB disconnect, device number 36 [ 1605.928389][ T29] audit: type=1326 audit(1724722676.627:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.1.1295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5efc779e79 code=0x0 [ 1606.000557][T14078] syz.0.1296 (14078): drop_caches: 2 [ 1606.025846][T14078] 9pnet_fd: Insufficient options for proto=fd [ 1606.567648][ T9498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1606.640574][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1606.652289][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1606.718788][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1606.736949][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1606.749710][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1607.131209][T12496] team0 (unregistering): Port device team_slave_1 removed [ 1607.171300][T12496] team0 (unregistering): Port device team_slave_0 removed [ 1607.603208][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1608.717754][ T943] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1608.910509][ T5243] Bluetooth: hci0: command tx timeout [ 1608.969913][ T943] usb 2-1: config index 0 descriptor too short (expected 10770, got 27) [ 1608.997526][T13775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1609.026956][ T943] usb 2-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1609.035809][ T943] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.049458][T13775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1609.114923][T13775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1609.154251][ T943] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1609.265155][ T943] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1609.288954][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1609.296070][T13775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1609.319491][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.359392][ T943] usb 2-1: Product: syz [ 1609.363689][ T943] usb 2-1: Manufacturer: syz [ 1609.404458][ T943] usb 2-1: SerialNumber: syz [ 1609.530011][ T9] usb 1-1: config index 0 descriptor too short (expected 10770, got 27) [ 1609.586989][ T9] usb 1-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1609.595832][ T9] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.715710][ T9] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1609.766729][ T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1609.819944][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.871814][ T9] usb 1-1: Product: syz [ 1609.884346][ T9] usb 1-1: Manufacturer: syz [ 1609.914296][ T9] usb 1-1: SerialNumber: syz [ 1610.146944][ C0] hrtimer: interrupt took 134538 ns [ 1610.987152][ T5243] Bluetooth: hci0: command tx timeout [ 1611.273225][ T943] usb 2-1: USB disconnect, device number 16 [ 1611.717623][T14076] chnl_net:caif_netlink_parms(): no params data found [ 1611.729069][ T9] usb 1-1: USB disconnect, device number 37 [ 1611.932990][T13775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.198419][T14113] syz.0.1302 (14113): drop_caches: 2 [ 1613.028569][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.034955][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.077029][ T5243] Bluetooth: hci0: command tx timeout [ 1613.940697][ T1855] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1613.953283][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.981036][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.011788][T14076] bridge_slave_0: entered allmulticast mode [ 1614.053458][T14076] bridge_slave_0: entered promiscuous mode [ 1614.146977][ T1855] usb 2-1: Using ep0 maxpacket: 8 [ 1614.209293][ T1855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.252995][ T1855] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1614.291368][ T1855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.360990][ T1855] usb 2-1: config 0 descriptor?? [ 1614.402764][T14076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.404789][ T1855] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1614.445847][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.545768][T14076] bridge_slave_1: entered allmulticast mode [ 1614.630709][T14076] bridge_slave_1: entered promiscuous mode [ 1614.687549][T14131] syz.0.1304 (14131): drop_caches: 2 [ 1614.903575][T12496] bridge_slave_1: left allmulticast mode [ 1614.950254][T12496] bridge_slave_1: left promiscuous mode [ 1614.978428][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.018323][T12496] bridge_slave_0: left allmulticast mode [ 1615.024039][T12496] bridge_slave_0: left promiscuous mode [ 1615.069241][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.082066][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1615.092064][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1615.101263][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1615.111952][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1615.121806][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1615.132635][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1615.151655][ T5233] Bluetooth: hci0: command tx timeout [ 1615.837401][ T9670] usb 2-1: USB disconnect, device number 17 [ 1617.227422][ T5243] Bluetooth: hci1: command tx timeout [ 1617.321415][T12496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.377903][T12496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.411679][T12496] bond0 (unregistering): Released all slaves [ 1617.457538][T13903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1617.493126][T13903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1617.950215][T14162] syz.1.1306 (14162): drop_caches: 2 [ 1618.887306][T13903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1618.916658][T13903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1618.990236][T14167] syz.0.1307 (14167): drop_caches: 2 [ 1619.307190][ T5243] Bluetooth: hci1: command tx timeout [ 1619.791411][T14076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.813339][T14076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.492015][T12496] hsr_slave_0: left promiscuous mode [ 1620.509216][T12496] hsr_slave_1: left promiscuous mode [ 1620.516143][T12496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.528048][T12496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.387318][ T5243] Bluetooth: hci1: command tx timeout [ 1621.584388][T14179] dlm: no locking on control device [ 1621.794003][T12496] team0 (unregistering): Port device team_slave_1 removed [ 1621.890048][T12496] team0 (unregistering): Port device team_slave_0 removed [ 1622.080314][T14183] dlm: no locking on control device [ 1622.877275][T14179] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1310'. [ 1622.911510][T14183] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1311'. [ 1623.033229][T14076] team0: Port device team_slave_0 added [ 1623.044473][T14076] team0: Port device team_slave_1 added [ 1623.289452][T14076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.360572][T14076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.477056][ T5243] Bluetooth: hci1: command tx timeout [ 1623.498115][T14076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.795977][T14076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1623.803956][T14076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.847657][T14076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.860750][T14189] dlm: no locking on control device [ 1624.161536][T14189] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1312'. [ 1625.376268][T14076] hsr_slave_0: entered promiscuous mode [ 1625.446414][T14076] hsr_slave_1: entered promiscuous mode [ 1625.708368][T14205] syz.0.1314 (14205): drop_caches: 2 [ 1625.731958][T14205] 9pnet_fd: Insufficient options for proto=fd [ 1627.377926][T14219] syz.0.1315 (14219): drop_caches: 2 [ 1629.515247][T14138] chnl_net:caif_netlink_parms(): no params data found [ 1630.045022][T14237] syz.1.1319 (14237): drop_caches: 2 [ 1630.531129][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.885196][T14138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.935678][T14138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.111132][T14266] syz.1.1322 (14266): drop_caches: 2 [ 1634.176349][T14266] 9pnet_fd: Insufficient options for proto=fd [ 1634.422844][T14138] bridge_slave_0: entered allmulticast mode [ 1634.502924][T14138] bridge_slave_0: entered promiscuous mode [ 1634.929336][T14138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.936654][T14138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.948160][T14138] bridge_slave_1: entered allmulticast mode [ 1634.967615][T14138] bridge_slave_1: entered promiscuous mode [ 1634.991849][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.125174][T14276] syz.1.1324 (14276): drop_caches: 2 [ 1636.154989][T14276] 9pnet_fd: Insufficient options for proto=fd [ 1636.382749][T14138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.064558][T14279] dlm: no locking on control device [ 1637.259348][T14138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.537244][T14279] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1325'. [ 1637.596839][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1637.608440][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1637.617755][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1637.627734][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1637.636284][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1637.735979][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1638.003732][T14138] team0: Port device team_slave_0 added [ 1638.115963][T14138] team0: Port device team_slave_1 added [ 1638.254679][T12496] bridge_slave_1: left allmulticast mode [ 1638.260881][T12496] bridge_slave_1: left promiscuous mode [ 1638.271049][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.423631][T14290] syz.1.1326 (14290): drop_caches: 2 [ 1638.510665][T12496] bridge_slave_0: left allmulticast mode [ 1638.516761][T12496] bridge_slave_0: left promiscuous mode [ 1638.524434][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.889922][T14294] syz.1.1327 (14294): drop_caches: 2 [ 1639.954632][T14294] 9pnet_fd: Insufficient options for proto=fd [ 1640.054472][ T5233] Bluetooth: hci2: command tx timeout [ 1640.135133][T12496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.207916][T12496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.268455][T12496] bond0 (unregistering): Released all slaves [ 1640.802429][T14138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.820547][T14138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.885780][T14138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.912615][T14138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.931677][T14138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.968820][T14138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.023999][T12496] hsr_slave_0: left promiscuous mode [ 1641.032486][T12496] hsr_slave_1: left promiscuous mode [ 1641.053584][T12496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.066472][T12496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.107060][ T5233] Bluetooth: hci2: command tx timeout [ 1643.396527][T14307] syz.0.1330 (14307): drop_caches: 2 [ 1644.187002][ T5233] Bluetooth: hci2: command tx timeout [ 1644.345604][T12496] team0 (unregistering): Port device team_slave_1 removed [ 1644.445760][T12496] team0 (unregistering): Port device team_slave_0 removed [ 1645.560975][T14313] vivid-007: kernel_thread() failed [ 1646.132669][T14320] syz.0.1332 (14320): drop_caches: 2 [ 1646.297173][ T5233] Bluetooth: hci2: command tx timeout [ 1646.597694][T14138] hsr_slave_0: entered promiscuous mode [ 1646.622379][T14138] hsr_slave_1: entered promiscuous mode [ 1646.645038][T14138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1646.664609][T14138] Cannot create hsr debugfs directory [ 1647.447461][T14076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1647.484748][T14076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1647.611712][T14076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1647.767940][T14076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1648.798068][T10100] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1649.277641][T10100] usb 1-1: Using ep0 maxpacket: 8 [ 1649.313443][T10100] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.358585][T10100] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1649.394476][T10100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.475009][T10100] usb 1-1: config 0 descriptor?? [ 1649.506452][T10100] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1650.138528][T14285] chnl_net:caif_netlink_parms(): no params data found [ 1651.105119][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.115710][ T5229] usb 1-1: USB disconnect, device number 38 [ 1651.147426][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.175065][T14285] bridge_slave_0: entered allmulticast mode [ 1651.207711][T14285] bridge_slave_0: entered promiscuous mode [ 1651.400876][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.420524][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.444556][T14285] bridge_slave_1: entered allmulticast mode [ 1651.807293][T14371] syz.0.1336 (14371): drop_caches: 2 [ 1651.973114][T14285] bridge_slave_1: entered promiscuous mode [ 1652.550736][T12496] bridge_slave_1: left allmulticast mode [ 1652.575505][T12496] bridge_slave_1: left promiscuous mode [ 1652.614459][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.668623][T12496] bridge_slave_0: left allmulticast mode [ 1652.674785][T12496] bridge_slave_0: left promiscuous mode [ 1652.744553][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.513333][T14381] syz.0.1337 (14381): drop_caches: 2 [ 1653.741178][T14381] 9pnet_fd: Insufficient options for proto=fd [ 1657.052947][T14396] vivid-007: kernel_thread() failed [ 1657.494952][T12496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.523254][T12496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.561495][T12496] bond0 (unregistering): Released all slaves [ 1658.055881][T14406] syz.0.1343 (14406): drop_caches: 2 [ 1658.966266][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.120540][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.179104][T14402] dlm: no locking on control device [ 1659.278602][T12496] hsr_slave_0: left promiscuous mode [ 1659.359741][T12496] hsr_slave_1: left promiscuous mode [ 1659.394276][T12496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.434954][T12496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.504869][T14412] dlm: no locking on control device [ 1660.195927][T12496] team0 (unregistering): Port device team_slave_1 removed [ 1660.313999][T12496] team0 (unregistering): Port device team_slave_0 removed [ 1661.012319][T14285] team0: Port device team_slave_0 added [ 1661.030676][T14402] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1342'. [ 1661.088221][T14412] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1344'. [ 1661.171622][T14285] team0: Port device team_slave_1 added [ 1661.255658][T14138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1661.457899][T14418] syz.1.1345 (14418): drop_caches: 2 [ 1661.593152][T14138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1661.675828][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.709396][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.828278][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.892082][T14138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1662.283008][T14138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1662.356809][T14076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.419737][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.440635][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.515798][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.865604][T14285] hsr_slave_0: entered promiscuous mode [ 1662.887081][T14285] hsr_slave_1: entered promiscuous mode [ 1662.901853][T14285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1662.928504][T14285] Cannot create hsr debugfs directory [ 1665.440226][T14450] syz.0.1349 (14450): drop_caches: 2 [ 1666.517490][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1666.529225][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1666.542871][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1666.553094][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1666.562064][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1666.571429][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1667.519439][T14463] vivid-007: kernel_thread() failed [ 1668.547492][T14473] syz.1.1352 (14473): drop_caches: 2 [ 1668.587109][ T5243] Bluetooth: hci0: command tx timeout [ 1668.616629][T14138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.673079][T14138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.111882][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.119252][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.194563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.201820][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.767535][T14285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1669.977722][T14285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1670.088786][T14285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1670.283019][T14285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1670.356276][ T2562] bridge_slave_1: left allmulticast mode [ 1670.374019][ T2562] bridge_slave_1: left promiscuous mode [ 1670.399382][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.491074][ T2562] bridge_slave_0: left allmulticast mode [ 1670.540684][ T2562] bridge_slave_0: left promiscuous mode [ 1670.585128][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.667078][ T5243] Bluetooth: hci0: command tx timeout [ 1672.622215][T14504] syz.0.1356 (14504): drop_caches: 2 [ 1672.863738][ T5243] Bluetooth: hci0: command tx timeout [ 1673.462347][T14504] list_del corruption, ffff88806fdaf2e0->next is LIST_POISON1 (dead000000000100) [ 1673.473143][T14504] ------------[ cut here ]------------ [ 1673.479071][T14504] kernel BUG at lib/list_debug.c:56! [ 1673.484450][T14504] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 1673.491446][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.0.1356 Not tainted 6.11.0-rc5-syzkaller #0 [ 1673.500541][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1673.510609][T14504] RIP: 0010:__list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.517796][T14504] Code: c7 c7 a0 9d b0 8b e8 97 a2 e1 fc 90 0f 0b 48 c7 c7 00 9e b0 8b e8 88 a2 e1 fc 90 0f 0b 48 c7 c7 60 9e b0 8b e8 79 a2 e1 fc 90 <0f> 0b 48 89 ca 48 c7 c7 c0 9e b0 8b e8 67 a2 e1 fc 90 0f 0b 48 89 [ 1673.537448][T14504] RSP: 0018:ffffc90003227988 EFLAGS: 00010282 [ 1673.543569][T14504] RAX: 000000000000004e RBX: ffff88806fdaf220 RCX: ffffc9000e952000 [ 1673.551561][T14504] RDX: 0000000000000000 RSI: ffffffff816b9846 RDI: 0000000000000005 [ 1673.559565][T14504] RBP: ffff88806939d400 R08: 0000000000000005 R09: 0000000000000000 [ 1673.568017][T14504] R10: 0000000080000001 R11: fffffffffffd0830 R12: ffff88806e2cf030 [ 1673.576044][T14504] R13: 0000000000000005 R14: ffff88806fdaf2e0 R15: ffff88806fdaf2e8 [ 1673.584030][T14504] FS: 00007f75218876c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1673.593051][T14504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1673.599837][T14504] CR2: 0000001b305f5ff8 CR3: 000000005c1f6000 CR4: 00000000003506f0 [ 1673.607851][T14504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1673.615853][T14504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1673.623856][T14504] Call Trace: [ 1673.627151][T14504] [ 1673.630094][T14504] ? show_regs+0x8c/0xa0 [ 1673.634465][T14504] ? die+0x36/0xa0 [ 1673.638225][T14504] ? do_trap+0x232/0x430 [ 1673.642503][T14504] ? __list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.648959][T14504] ? __list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.655405][T14504] ? do_error_trap+0xf4/0x230 [ 1673.660132][T14504] ? __list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.666582][T14504] ? handle_invalid_op+0x34/0x40 [ 1673.671551][T14504] ? __list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.677999][T14504] ? exc_invalid_op+0x2e/0x50 [ 1673.682787][T14504] ? asm_exc_invalid_op+0x1a/0x20 [ 1673.687878][T14504] ? vprintk+0x86/0xa0 [ 1673.691987][T14504] ? __list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.698450][T14504] ? __list_del_entry_valid_or_report+0x107/0x1c0 [ 1673.704916][T14504] ? __pfx_p9_fd_cancelled+0x10/0x10 [ 1673.710362][T14504] p9_fd_cancelled+0xa2/0x2a0 [ 1673.715110][T14504] ? __pfx_p9_fd_cancelled+0x10/0x10 [ 1673.720481][T14504] p9_client_flush.isra.0+0x34b/0x420 [ 1673.725914][T14504] ? __pfx_p9_client_flush.isra.0+0x10/0x10 [ 1673.731879][T14504] ? _raw_spin_unlock+0x28/0x50 [ 1673.736837][T14504] ? p9_fd_cancel+0x96/0x290 [ 1673.741487][T14504] p9_client_rpc+0xaef/0xc10 [ 1673.746113][T14504] ? __pfx_p9_client_rpc+0x10/0x10 [ 1673.751255][T14504] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1673.757390][T14504] p9_client_getattr_dotl+0xba/0x1e0 [ 1673.762719][T14504] v9fs_fid_iget_dotl+0x1e3/0x390 [ 1673.767817][T14504] v9fs_mount+0x518/0xa50 [ 1673.772173][T14504] ? __pfx_v9fs_mount+0x10/0x10 [ 1673.777050][T14504] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 1673.782788][T14504] ? cap_capable+0x1cf/0x240 [ 1673.787449][T14504] ? __pfx_v9fs_mount+0x10/0x10 [ 1673.792330][T14504] legacy_get_tree+0x109/0x220 [ 1673.797158][T14504] vfs_get_tree+0x8f/0x380 [ 1673.801604][T14504] path_mount+0x14e6/0x1f20 [ 1673.806222][T14504] ? __pfx_path_mount+0x10/0x10 [ 1673.811180][T14504] ? putname+0x12e/0x170 [ 1673.815464][T14504] ? putname+0x12e/0x170 [ 1673.819734][T14504] __x64_sys_mount+0x294/0x320 [ 1673.824518][T14504] ? __pfx___x64_sys_mount+0x10/0x10 [ 1673.829832][T14504] do_syscall_64+0xcd/0x250 [ 1673.834424][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.840343][T14504] RIP: 0033:0x7f7520b79e79 [ 1673.844781][T14504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1673.864415][T14504] RSP: 002b:00007f7521887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1673.872854][T14504] RAX: ffffffffffffffda RBX: 00007f7520d16130 RCX: 00007f7520b79e79 [ 1673.880846][T14504] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 1673.888852][T14504] RBP: 00007f7520be793e R08: 0000000020000280 R09: 0000000000000000 [ 1673.896936][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.904921][T14504] R13: 0000000000000000 R14: 00007f7520d16130 R15: 00007ffde9a73d48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1673.912915][T14504] [ 1673.915957][T14504] Modules linked in: [ 1673.921507][T14504] ---[ end trace 0000000000000000 ]--- [ 1673.928909][T14504] RIP: 0010:__list_del_entry_valid_or_report+0x108/0x1c0 [ 1673.936019][T14504] Code: c7 c7 a0 9d b0 8b e8 97 a2 e1 fc 90 0f 0b 48 c7 c7 00 9e b0 8b e8 88 a2 e1 fc 90 0f 0b 48 c7 c7 60 9e b0 8b e8 79 a2 e1 fc 90 <0f> 0b 48 89 ca 48 c7 c7 c0 9e b0 8b e8 67 a2 e1 fc 90 0f 0b 48 89 [ 1673.955896][T14504] RSP: 0018:ffffc90003227988 EFLAGS: 00010282 [ 1673.962071][T14504] RAX: 000000000000004e RBX: ffff88806fdaf220 RCX: ffffc9000e952000 [ 1673.970227][T14504] RDX: 0000000000000000 RSI: ffffffff816b9846 RDI: 0000000000000005 [ 1673.978309][T14504] RBP: ffff88806939d400 R08: 0000000000000005 R09: 0000000000000000 [ 1673.987580][T14504] R10: 0000000080000001 R11: fffffffffffd0830 R12: ffff88806e2cf030 [ 1673.995622][T14504] R13: 0000000000000005 R14: ffff88806fdaf2e0 R15: ffff88806fdaf2e8 [ 1674.003706][T14504] FS: 00007f75218876c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1674.014134][T14504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1674.021916][T14504] CR2: 0000001b305f5ff8 CR3: 000000005c1f6000 CR4: 00000000003506f0 [ 1674.029984][T14504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1674.038207][T14504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1674.046277][T14504] Kernel panic - not syncing: Fatal exception [ 1674.052690][T14504] Kernel Offset: disabled [ 1674.057142][T14504] Rebooting in 86400 seconds..