last executing test programs: 12m24.868089837s ago: executing program 32 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r4, &(0x7f0000000080)=""/129, 0x20) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) 11m16.571620005s ago: executing program 4 (id=1162): syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 11m16.176838549s ago: executing program 4 (id=1167): syz_usb_connect(0x3, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a240129000302010209050101000203ff0609050a03080003010107255a4a"], 0x0) 11m16.049403929s ago: executing program 5 (id=1169): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xc015, 0x6, 0x303d9c27, 0x43, 0x8ec4}) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x1) 11m14.701521397s ago: executing program 4 (id=1172): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0xc000, @remote}, 0x10) 11m14.701161714s ago: executing program 5 (id=1173): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000c100000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e020000100"], 0x50}}, 0x0) 11m14.484687781s ago: executing program 4 (id=1174): syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x202) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x5}, {}, {}, @result}], 0x1c) 11m14.320784345s ago: executing program 5 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xceb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) 11m14.270368603s ago: executing program 4 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) 11m14.006854616s ago: executing program 4 (id=1178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 11m13.951179777s ago: executing program 5 (id=1179): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net\x00') getdents64(r0, &(0x7f00000026c0)=""/107, 0x6b) getdents(r0, &(0x7f0000000440)=""/172, 0xac) 11m13.568564658s ago: executing program 5 (id=1180): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be90102030109021200"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x16db82, 0x107) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x51, &(0x7f0000000080)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x2f, 0x0, @wg=@data={0x4, 0x2, 0x81, "fe9c3bd9a9acd8450a516aeac474e809e8b80022adb68d"}}}}}}, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) read(0xffffffffffffffff, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500000000000000008007001890bdff2a2800ab0e0000030000000000"], 0x0) 11m9.081868905s ago: executing program 5 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 11m1.215348126s ago: executing program 33 (id=1166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 10m58.715430332s ago: executing program 34 (id=1178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 10m53.262832316s ago: executing program 35 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 10m1.252819469s ago: executing program 1 (id=1317): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = gettid() socket$nl_xfrm(0x10, 0x3, 0x6) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m58.50923054s ago: executing program 1 (id=1323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4c084) 9m57.75145889s ago: executing program 1 (id=1324): creat(&(0x7f00000002c0)='./file0\x00', 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) 9m55.116160792s ago: executing program 1 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x19, 0x34, @random="17648f253b236f18a78bd22a7ad3a43eeb8f263d73"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3fd}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}]}}]}, 0x58}}, 0x0) 9m54.640715176s ago: executing program 1 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)="82"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x6c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 9m53.659405697s ago: executing program 1 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) 9m38.56858878s ago: executing program 36 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) 9m0.019317086s ago: executing program 2 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000005f0000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m59.820112865s ago: executing program 2 (id=1390): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x4, {{0xa, 0x4e21, 0x0, @mcast1, 0x10}}, 0x1, 0x1, [{{0xa, 0x4e24, 0xd, @mcast1, 0x5ba2}}]}, 0x110) 8m59.774023151s ago: executing program 2 (id=1391): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 8m59.012061526s ago: executing program 2 (id=1392): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 8m57.878966119s ago: executing program 2 (id=1393): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0x8, 0xf9, {0xf9, 0x21, "d0f6af47e150dfb5f2730090137cc198df8d7f1cf6da9c2413b707d4af589127bfa354448de8c87152fd50d9bb2943ce2b1e14b0fe75599dd3654c67d1fe6a414b37102c0747a8872400007e2bcba0cfbc7c7b439b054e4fa3f7bef9f7322c786d52761e54835fbcc46bd9d9a49baec1fcd196696403f58bd06867b2fa11e3b1f04379ba18c71ed35956cbcd25efed1c87b3d9203db8e56018499fdb8cca7b485a44c61e465aebd3efb1b833bc47cf849ba8327c6a23ed37334a9a98388d6a0ef7b689502a1631288e8ac6b5642f537a6c52c908bdba1e8bfc3ccfd16f442e365c0b5192344a6e97956fb9c6f679fdd913d07b44658008"}}, 0x0}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x30, 0x90, "286b86649154d4aa86f25870c160dc1df790a54150ae002faa8341b7eaf24c44b03d26a45a05ec3ab688a03a515b117abb48a370ea0257acc49d716d3ad6acddb4e6a7d3bcdb2785068082c880d60c95724f9f25d9e81c2b9ec5d967e95f6191feb749ed6d6556520c75d2d6e730126ce607c5e867d4a796c065cea7b02cafe34d468e1559635d881a62b8354a8cfc4a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0x5, 0x1, '='}, &(0x7f00000003c0)={0x40, 0x5, 0x1, "d6"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 8m56.903742109s ago: executing program 2 (id=1394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="1018000007500500280012800b00010062726964676500001800028008000400840000000a0014000180c2"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m41.490431429s ago: executing program 37 (id=1394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="1018000007500500280012800b00010062726964676500001800028008000400840000000a0014000180c2"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m54.431686454s ago: executing program 6 (id=1410): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 6m52.598915331s ago: executing program 6 (id=1412): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x4d4, 0x33}, @in=@broadcast, {}, {}, {0x0, 0x40000000}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6m52.145005517s ago: executing program 6 (id=1415): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) shutdown(r0, 0x0) 6m50.92120669s ago: executing program 6 (id=1416): mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') 6m50.365228496s ago: executing program 6 (id=1417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000540)={{0x80a0000, 0x8080000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0x4, 0x0, 0x0, 0x19, 0xfe}, {0x100000, 0xeeee8000, 0xc, 0x0, 0x41, 0x5, 0x7d, 0x9, 0x5, 0x3, 0x43, 0xb1}, {0xeeef0000, 0xdddd0000, 0x0, 0x5, 0xff, 0x17, 0x0, 0x1, 0x1, 0xa7, 0x8, 0x81}, {0x3000, 0x8080000, 0x0, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x7, 0xe, 0xf1}, {0x1, 0x3000, 0x10, 0x7, 0x15, 0x6, 0xaa, 0x80, 0x3, 0x83, 0xf7, 0x7f}, {0x1000, 0x80a0000, 0x8, 0x7, 0xa1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0xdddd1000, 0x4, 0x5, 0x8, 0x5, 0xa, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0xa9000, 0xe, 0x5, 0xf, 0x5, 0x1, 0x6, 0x2, 0x4, 0xb0, 0x5}, {0xeeef0000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x80a0000, 0x2024, 0xe, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x2000000005e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8, 0x4) 6m45.972184676s ago: executing program 6 (id=1431): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x242, 0x2a1) write$hidraw(r0, &(0x7f00000000c0)='_Q', 0x2) 6m44.911452727s ago: executing program 38 (id=1431): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x242, 0x2a1) write$hidraw(r0, &(0x7f00000000c0)='_Q', 0x2) 4m30.500569752s ago: executing program 8 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1201}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m29.192578523s ago: executing program 8 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xe3, 0xe9a, 0x0, 0x8000008, 0x5, 0x4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x66a9, 0xb, 0x8007, 0x80a, 0x558}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='ns\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) 4m27.762255424s ago: executing program 8 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m24.862776955s ago: executing program 8 (id=1773): recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x10100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 4m24.216744143s ago: executing program 8 (id=1775): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) semget$private(0x0, 0x1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 4m19.636997852s ago: executing program 8 (id=1782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) 4m3.670756581s ago: executing program 39 (id=1782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) 3m53.111502187s ago: executing program 7 (id=1827): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3m52.861143454s ago: executing program 7 (id=1828): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) semget$private(0x0, 0x1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000340), 0x0}, 0x20) 3m51.559625079s ago: executing program 7 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3m50.736562808s ago: executing program 7 (id=1833): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000900)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000180)=""/81) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3m49.588471673s ago: executing program 7 (id=1835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 3m49.195303684s ago: executing program 7 (id=1837): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x4, 0x80, 0xe, 0x8111, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xa}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m33.720715451s ago: executing program 40 (id=1837): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x4, 0x80, 0xe, 0x8111, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xa}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.58065945s ago: executing program 9 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) 3m10.591428775s ago: executing program 9 (id=1918): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000480)=r2, 0x12) 3m10.488731462s ago: executing program 9 (id=1919): socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 3m9.482297764s ago: executing program 9 (id=1920): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3m9.422151997s ago: executing program 9 (id=1921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0x0) 3m9.320667776s ago: executing program 9 (id=1922): syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x632, 0x64, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000000)="66bc2fc93b21f8f009846c68463912bc010d9851bc", 0x0, 0x0, 0x0, 0x37, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair(0xf, 0x3, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)=0x5) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 2m54.088784795s ago: executing program 41 (id=1922): syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x632, 0x64, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000000)="66bc2fc93b21f8f009846c68463912bc010d9851bc", 0x0, 0x0, 0x0, 0x37, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair(0xf, 0x3, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)=0x5) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 4.116522405s ago: executing program 0 (id=2232): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904"], 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 3.732550431s ago: executing program 3 (id=2235): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x80000001}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902"], 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) socket$inet6_tcp(0xa, 0x1, 0x0) 2.300260743s ago: executing program 3 (id=2236): socket$key(0xf, 0x3, 0x2) timerfd_gettime(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.490852797s ago: executing program 3 (id=2237): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000001040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 987.625969ms ago: executing program 0 (id=2238): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 986.737428ms ago: executing program 3 (id=2239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x80) 709.624669ms ago: executing program 3 (id=2240): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100001042dbd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="000000000000000030001280080001007369740024000280", @ANYBLOB="08000100f9ae8aa7b2d5"], 0x50}}, 0x0) 709.144672ms ago: executing program 0 (id=2241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 588.653586ms ago: executing program 0 (id=2242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x10, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 393.926946ms ago: executing program 3 (id=2243): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @loopback, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) prlimit64(0x0, 0x7, 0x0, 0x0) eventfd2(0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r4, 0x0) 258.39295ms ago: executing program 0 (id=2244): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000e40)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x50) 0s ago: executing program 0 (id=2245): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mmand tx timeout [ 717.856867][ T9984] Bluetooth: hci0: command tx timeout [ 718.344697][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.355402][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.358674][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.369032][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.371676][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.597617][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.657785][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.681426][ T1017] bond0 (unregistering): Released all slaves [ 719.937167][ T5847] Bluetooth: hci0: command tx timeout [ 720.187229][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.247716][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.271781][ T1017] bond0 (unregistering): Released all slaves [ 720.428452][ T5847] Bluetooth: hci2: command tx timeout [ 720.530521][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.530537][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.530563][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.568300][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.568316][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.568340][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.707888][T10676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.419586][T10783] hsr_slave_0: entered promiscuous mode [ 721.421140][T10783] hsr_slave_1: entered promiscuous mode [ 721.422062][T10783] debugfs: 'hsr0' already exists in 'hsr' [ 721.422093][T10783] Cannot create hsr debugfs directory [ 721.456353][T10676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.456460][T10760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 721.742285][T10760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 721.810875][T10760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 721.928593][T10760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 721.980510][ T9194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.073895][ T9194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.100084][T10696] veth0_macvtap: entered promiscuous mode [ 722.101741][ T9194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.266883][ T1017] hsr_slave_0: left promiscuous mode [ 722.306810][ T1017] hsr_slave_1: left promiscuous mode [ 722.307434][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.337345][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.496992][ T5847] Bluetooth: hci2: command tx timeout [ 722.512345][ T1017] hsr_slave_0: left promiscuous mode [ 722.527044][ T1017] hsr_slave_1: left promiscuous mode [ 722.527964][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.528175][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.598362][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.598390][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.716803][ T1017] veth1_macvtap: left promiscuous mode [ 722.716880][ T1017] veth0_macvtap: left promiscuous mode [ 722.717085][ T1017] veth1_vlan: left promiscuous mode [ 722.717260][ T1017] veth0_vlan: left promiscuous mode [ 722.757252][ T1017] veth1_macvtap: left promiscuous mode [ 722.757374][ T1017] veth0_macvtap: left promiscuous mode [ 722.757660][ T1017] veth1_vlan: left promiscuous mode [ 722.757865][ T1017] veth0_vlan: left promiscuous mode [ 724.576891][ T5847] Bluetooth: hci2: command tx timeout [ 724.797705][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 725.029226][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 726.657018][ T5847] Bluetooth: hci2: command tx timeout [ 727.865672][ T9984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.874022][ T9984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.876038][ T9984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.878957][ T9984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.879686][ T9984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 729.227834][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 729.438657][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 729.939680][ T5847] Bluetooth: hci1: command tx timeout [ 731.716194][ T9194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.815729][T10696] veth1_macvtap: entered promiscuous mode [ 732.016795][ T5847] Bluetooth: hci1: command tx timeout [ 732.755366][ T9984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 732.817294][ T9984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 732.818614][ T9984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 732.820313][ T9984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 732.838661][ T9984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.459374][T10804] chnl_net:caif_netlink_parms(): no params data found [ 734.015106][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.015257][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.015827][T10804] bridge_slave_0: entered allmulticast mode [ 734.022972][T10804] bridge_slave_0: entered promiscuous mode [ 734.072534][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.073128][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.073328][T10804] bridge_slave_1: entered allmulticast mode [ 734.075953][T10804] bridge_slave_1: entered promiscuous mode [ 734.096752][ T9984] Bluetooth: hci1: command tx timeout [ 734.449775][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.475951][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.577753][T10813] chnl_net:caif_netlink_parms(): no params data found [ 734.722517][T10804] team0: Port device team_slave_0 added [ 734.759240][T10804] team0: Port device team_slave_1 added [ 734.896798][ T9984] Bluetooth: hci3: command tx timeout [ 735.054604][T10783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 735.190343][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.190354][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.190367][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.220135][T10783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 735.447858][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.447873][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.447899][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.591572][T10760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.591801][T10783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 735.811654][T10783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 735.870837][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.871045][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.871245][T10813] bridge_slave_0: entered allmulticast mode [ 735.874004][T10813] bridge_slave_0: entered promiscuous mode [ 736.131236][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.131347][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.131514][T10813] bridge_slave_1: entered allmulticast mode [ 736.133013][T10813] bridge_slave_1: entered promiscuous mode [ 736.188461][ T9984] Bluetooth: hci1: command tx timeout [ 736.676193][T10804] hsr_slave_0: entered promiscuous mode [ 736.685567][T10804] hsr_slave_1: entered promiscuous mode [ 736.693841][T10817] chnl_net:caif_netlink_parms(): no params data found [ 736.713618][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.756231][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.976846][ T9984] Bluetooth: hci3: command tx timeout [ 737.179260][T10760] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.440277][T10813] team0: Port device team_slave_0 added [ 737.566509][T10813] team0: Port device team_slave_1 added [ 737.849226][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.849328][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.034297][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.034313][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.034334][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.054116][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.054274][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.054748][T10817] bridge_slave_0: entered allmulticast mode [ 738.059794][T10817] bridge_slave_0: entered promiscuous mode [ 738.070374][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.070387][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.070412][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.096452][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.096583][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.100100][T10817] bridge_slave_1: entered allmulticast mode [ 738.109542][T10817] bridge_slave_1: entered promiscuous mode [ 738.120373][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.120516][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.511313][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.636035][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.848086][T10813] hsr_slave_0: entered promiscuous mode [ 738.849471][T10813] hsr_slave_1: entered promiscuous mode [ 738.851741][T10813] debugfs: 'hsr0' already exists in 'hsr' [ 738.851765][T10813] Cannot create hsr debugfs directory [ 739.033798][T10817] team0: Port device team_slave_0 added [ 739.057470][ T9984] Bluetooth: hci3: command tx timeout [ 739.258026][T10817] team0: Port device team_slave_1 added [ 739.612194][ T1017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.040280][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.040296][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.040321][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.236170][ T1017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.274239][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.274252][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.274267][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.682748][ T1017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.147102][ T9984] Bluetooth: hci3: command tx timeout [ 741.323317][ T1017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.375168][T10817] hsr_slave_0: entered promiscuous mode [ 741.375951][T10817] hsr_slave_1: entered promiscuous mode [ 741.389355][T10817] debugfs: 'hsr0' already exists in 'hsr' [ 741.389381][T10817] Cannot create hsr debugfs directory [ 741.968007][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.180702][T10804] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 742.245009][T10804] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 742.298792][T10804] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 742.342960][ T1017] bridge_slave_1: left allmulticast mode [ 742.342992][ T1017] bridge_slave_1: left promiscuous mode [ 742.343249][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.413068][ T1017] bridge_slave_0: left allmulticast mode [ 742.413089][ T1017] bridge_slave_0: left promiscuous mode [ 742.413250][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.480985][ T1017] bridge_slave_1: left allmulticast mode [ 742.481007][ T1017] bridge_slave_1: left promiscuous mode [ 742.481150][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.548318][ T1017] bridge_slave_0: left allmulticast mode [ 742.548356][ T1017] bridge_slave_0: left promiscuous mode [ 742.548683][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.620498][ T1017] bridge_slave_1: left allmulticast mode [ 742.620522][ T1017] bridge_slave_1: left promiscuous mode [ 742.620669][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.688437][ T1017] bridge_slave_0: left allmulticast mode [ 742.688469][ T1017] bridge_slave_0: left promiscuous mode [ 742.688762][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.608629][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.687923][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.711600][ T1017] bond0 (unregistering): Released all slaves [ 746.327865][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.387594][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.413829][ T1017] bond0 (unregistering): Released all slaves [ 747.223206][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.223281][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.849146][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.907240][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.931524][ T1017] bond0 (unregistering): Released all slaves [ 748.071533][T10804] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 748.168289][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.274557][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.274686][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.312956][T10760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.351395][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.351632][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.876904][ T1017] hsr_slave_0: left promiscuous mode [ 748.898363][ T1017] hsr_slave_1: left promiscuous mode [ 748.899315][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.947638][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.107798][ T1017] hsr_slave_0: left promiscuous mode [ 749.127358][ T1017] hsr_slave_1: left promiscuous mode [ 749.128310][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.128337][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.188098][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.188130][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.336916][ T1017] hsr_slave_0: left promiscuous mode [ 749.356909][ T1017] hsr_slave_1: left promiscuous mode [ 749.360425][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.417819][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.548438][ T1017] veth1_macvtap: left promiscuous mode [ 749.548519][ T1017] veth0_macvtap: left promiscuous mode [ 749.548752][ T1017] veth1_vlan: left promiscuous mode [ 749.548937][ T1017] veth0_vlan: left promiscuous mode [ 749.568550][ T1017] veth1_macvtap: left promiscuous mode [ 749.568624][ T1017] veth0_macvtap: left promiscuous mode [ 749.568898][ T1017] veth1_vlan: left promiscuous mode [ 749.571077][ T1017] veth0_vlan: left promiscuous mode [ 749.589271][ T1017] veth1_macvtap: left promiscuous mode [ 749.589345][ T1017] veth0_macvtap: left promiscuous mode [ 749.589619][ T1017] veth1_vlan: left promiscuous mode [ 749.589815][ T1017] veth0_vlan: left promiscuous mode [ 751.847774][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 752.087784][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 756.159027][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 756.339252][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 760.438163][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 760.718804][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 763.508367][T10760] veth0_vlan: entered promiscuous mode [ 763.525418][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.565545][T10760] veth1_vlan: entered promiscuous mode [ 763.698968][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.723850][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.728876][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.729068][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.778200][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.778358][ T9194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.967274][T10760] veth0_macvtap: entered promiscuous mode [ 763.988683][T10760] veth1_macvtap: entered promiscuous mode [ 764.161961][T10760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.221411][T10760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.291936][ T990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.324008][ T990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.329113][ T990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.334156][ T990] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.732505][T10813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 764.786295][T10813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.849216][T10813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.976434][T10813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 765.082943][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.082963][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.128057][T10783] veth0_vlan: entered promiscuous mode [ 765.288467][T10817] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 765.356527][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.364144][T10817] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 765.431906][T10783] veth1_vlan: entered promiscuous mode [ 765.438720][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.438739][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.461871][T10817] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 765.509053][T10817] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 765.771559][T10783] veth0_macvtap: entered promiscuous mode [ 765.847350][T10783] veth1_macvtap: entered promiscuous mode [ 766.041396][T10783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.089726][T10783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.138315][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.142917][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.171293][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.187165][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.206260][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.356009][T10804] veth0_vlan: entered promiscuous mode [ 766.724836][T10902] virtio-fs: tag not found [ 767.483905][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.508698][T10904] bridge_slave_0: left allmulticast mode [ 767.508729][T10904] bridge_slave_0: left promiscuous mode [ 767.508984][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.579227][T10904] bridge_slave_1: left allmulticast mode [ 767.579279][T10904] bridge_slave_1: left promiscuous mode [ 767.579519][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.677322][T10904] bond0: (slave bond_slave_0): Releasing backup interface [ 767.737407][T10904] bond0: (slave bond_slave_1): Releasing backup interface [ 767.826474][T10904] team0: Port device team_slave_0 removed [ 767.865816][T10904] team0: Port device team_slave_1 removed [ 767.868252][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.868281][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.901438][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.901469][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.043781][T10804] veth1_vlan: entered promiscuous mode [ 768.083295][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.110396][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.110675][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.142593][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.142613][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.170495][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.170639][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.250360][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.251333][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.251350][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.324008][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.324220][ T9192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.365998][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.366127][ T9192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.384322][T10804] veth0_macvtap: entered promiscuous mode [ 768.424357][T10804] veth1_macvtap: entered promiscuous mode [ 768.525522][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.568992][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.646481][ T9194] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.662233][ T9194] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.666505][ T9194] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.674388][ T9194] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.283263][ T9194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.283280][ T9194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.338524][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.363990][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.385883][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.385905][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.673407][T10813] veth0_vlan: entered promiscuous mode [ 770.754027][T10813] veth1_vlan: entered promiscuous mode [ 770.987107][T10813] veth0_macvtap: entered promiscuous mode [ 770.995498][T10813] veth1_macvtap: entered promiscuous mode [ 772.134174][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.208170][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.310161][ T9194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.315592][ T9194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.325534][ T9194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.325583][ T9194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.649522][ T5926] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 772.941046][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.941080][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.941103][ T5926] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.941157][ T5926] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.941180][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.949150][ T5926] usb 9-1: config 0 descriptor?? [ 773.540797][T10947] capability: warning: `syz.6.1407' uses deprecated v2 capabilities in a way that may be insecure [ 773.703168][ T5926] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 773.819321][T10817] veth0_vlan: entered promiscuous mode [ 773.906278][T10817] veth1_vlan: entered promiscuous mode [ 773.963516][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.963543][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.104830][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.104850][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.290408][T10817] veth0_macvtap: entered promiscuous mode [ 774.331393][T10817] veth1_macvtap: entered promiscuous mode [ 776.343364][T10960] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1395'. [ 776.491702][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.496265][ T5915] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 776.670542][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.745023][ T1460] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.754651][ T1460] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.795376][ T1460] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.820256][ T1460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.987133][ T5922] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 777.146879][ T5922] usb 8-1: Using ep0 maxpacket: 16 [ 777.152322][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.152356][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.152378][ T5922] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 777.152420][ T5922] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 777.152526][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.168959][ T5922] usb 8-1: config 0 descriptor?? [ 777.595415][ T5990] usb 9-1: USB disconnect, device number 2 [ 777.798284][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 777.798323][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 777.798352][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 777.817544][ T5922] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 777.817604][ T5922] microsoft 0003:045E:07DA.0004: no inputs found [ 777.817618][ T5922] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 778.252334][ T5991] usb 8-1: USB disconnect, device number 2 [ 778.324642][ T9192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.324662][ T9192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.627243][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.627263][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.020674][T10990] bridge_slave_0: left allmulticast mode [ 779.020707][T10990] bridge_slave_0: left promiscuous mode [ 779.020991][T10990] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.878712][T10990] bridge_slave_1: left allmulticast mode [ 780.878746][T10990] bridge_slave_1: left promiscuous mode [ 780.879012][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.942107][ T37] audit: type=1326 audit(1759039188.394:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11005 comm="syz.7.1424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f946390eec9 code=0x0 [ 781.987624][T10990] bond0: (slave bond_slave_0): Releasing backup interface [ 782.057709][T10990] bond0: (slave bond_slave_1): Releasing backup interface [ 782.143498][T10990] team0: Port device team_slave_0 removed [ 782.181738][T10990] team0: Port device team_slave_1 removed [ 782.182407][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.182427][T10990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.228281][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.228303][T10990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.293905][T10991] team0: Mode changed to "loadbalance" [ 782.369510][T11004] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 782.519490][T11004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.519523][T11004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.519544][T11004] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 782.519586][T11004] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 782.519609][T11004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.553202][T11004] usb 9-1: config 0 descriptor?? [ 782.871516][T11013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.937609][ T1305] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 782.983279][T11014] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 783.050000][ T9194] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 783.173071][T11004] plantronics 0003:047F:FFFF.0005: unbalanced delimiter at end of report description [ 783.173919][T11004] plantronics 0003:047F:FFFF.0005: parse failed [ 783.174020][T11004] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 783.182571][T11015] bridge_slave_0: left allmulticast mode [ 783.182601][T11015] bridge_slave_0: left promiscuous mode [ 783.182855][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.336026][ T5922] usb 9-1: USB disconnect, device number 3 [ 783.639043][T11015] bridge_slave_1: left allmulticast mode [ 783.639074][T11015] bridge_slave_1: left promiscuous mode [ 783.639311][T11015] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.859024][T11015] bond0: (slave bond_slave_0): Releasing backup interface [ 783.961750][T11015] bond0: (slave bond_slave_1): Releasing backup interface [ 784.088864][T11015] team0: Port device team_slave_0 removed [ 784.465595][T11015] team0: Port device team_slave_1 removed [ 784.466986][T11015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.467016][T11015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.951357][T11015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.953197][T11015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.453940][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 785.457947][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 785.637382][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 785.645177][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 785.645943][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.556529][T11015] bond1: (slave ip6gretap1): Removing an active aggregator [ 786.566891][T11015] bond1: (slave ip6gretap1): Releasing backup interface [ 788.656853][ T9984] Bluetooth: hci4: command tx timeout [ 789.836801][T10344] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 789.857993][T11004] kernel write not supported for file bpf-prog (pid: 11004 comm: kworker/1:7) [ 789.998940][T10344] usb 10-1: unable to get BOS descriptor or descriptor too short [ 789.999406][T10344] usb 10-1: not running at top speed; connect to a high speed hub [ 790.000354][T10344] usb 10-1: config 3 has an invalid interface number: 207 but max is 0 [ 790.000368][T10344] usb 10-1: config 3 has no interface number 0 [ 790.000386][T10344] usb 10-1: config 3 interface 207 has no altsetting 0 [ 790.002293][T10344] usb 10-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=a0.a1 [ 790.002313][T10344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.002324][T10344] usb 10-1: Product: syz [ 790.002331][T10344] usb 10-1: Manufacturer: syz [ 790.002339][T10344] usb 10-1: SerialNumber: syz [ 790.006893][ T5955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 790.158309][ T9192] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.182649][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 790.189617][ T5955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.189651][ T5955] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 790.189674][ T5955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 790.189694][ T5955] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 790.191975][ T5955] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 790.192000][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 790.192109][ T5955] usb 4-1: SerialNumber: syz [ 790.225609][T11072] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 790.248646][ T5955] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 790.249662][ T5955] usb-storage 4-1:1.0: USB Mass Storage device detected [ 790.255027][T11076] bond1: option mode: unable to set because the bond device is up [ 790.296889][T10344] qmi_wwan 10-1:3.207: probe with driver qmi_wwan failed with error -22 [ 790.302622][T10344] usb 10-1: USB disconnect, device number 2 [ 790.322807][ T5955] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 790.344800][ T5955] scsi host1: usb-storage 4-1:1.0 [ 790.535544][T10981] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 790.595174][ T9192] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.707428][T10981] usb 9-1: Using ep0 maxpacket: 16 [ 790.713131][T10981] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 790.713157][T10981] usb 9-1: config 0 has no interface number 0 [ 790.713205][T10981] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 790.713230][T10981] usb 9-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 790.713255][T10981] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 790.720640][T10981] usb 9-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 790.720668][T10981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.720687][T10981] usb 9-1: Product: syz [ 790.720700][T10981] usb 9-1: Manufacturer: syz [ 790.720714][T10981] usb 9-1: SerialNumber: syz [ 790.732631][T10981] usb 9-1: config 0 descriptor?? [ 790.749531][ T9984] Bluetooth: hci4: command tx timeout [ 790.764353][T11078] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 790.764622][T11078] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 790.883381][ T37] audit: type=1326 audit(1759039198.344:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11089 comm="syz.7.1453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f946390eec9 code=0x0 [ 791.021057][ T9192] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.137356][T10981] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 791.304964][T10981] usb 10-1: config 0 has an invalid interface number: 4 but max is 0 [ 791.304991][T10981] usb 10-1: config 0 has no interface number 0 [ 791.305035][T10981] usb 10-1: config 0 interface 4 has no altsetting 0 [ 791.339053][T10981] usb 10-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 791.339082][T10981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.339158][T10981] usb 10-1: Product: syz [ 791.339172][T10981] usb 10-1: Manufacturer: syz [ 791.339186][T10981] usb 10-1: SerialNumber: syz [ 791.346319][ T9192] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.349938][T10981] usb 10-1: config 0 descriptor?? [ 791.555067][T11083] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 791.566885][ T5915] usb 10-1: USB disconnect, device number 3 [ 791.805421][T11042] chnl_net:caif_netlink_parms(): no params data found [ 791.862254][ T147] wlan1: Trigger new scan to find an IBSS to join [ 793.035515][ T9984] Bluetooth: hci4: command tx timeout [ 793.186528][T10868] usb 4-1: USB disconnect, device number 8 [ 793.341093][T10777] usb 9-1: USB disconnect, device number 4 [ 795.067578][ T9984] Bluetooth: hci4: command tx timeout [ 796.018752][ T990] wlan1: Trigger new scan to find an IBSS to join [ 797.277774][T11155] mmap: syz.9.1472 (11155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 798.017778][ T12] wlan1: Creating new IBSS network, BSSID a2:83:c2:b4:69:1d [ 799.444876][ T9192] bond0 (unregistering): Released all slaves [ 799.894943][T11120] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 799.978289][T11123] bridge_slave_0: left allmulticast mode [ 799.978324][T11123] bridge_slave_0: left promiscuous mode [ 799.978757][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.059911][T11123] bridge_slave_1: left allmulticast mode [ 800.059942][T11123] bridge_slave_1: left promiscuous mode [ 800.060287][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.157916][T11123] bond0: (slave bond_slave_0): Releasing backup interface [ 800.220632][T11123] bond0: (slave bond_slave_1): Releasing backup interface [ 800.306151][T11123] team0: Port device team_slave_0 removed [ 800.335251][T11123] team0: Port device team_slave_1 removed [ 800.335902][T11123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.335921][T11123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.381342][T11123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.381373][T11123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.485706][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.485845][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.486075][T11042] bridge_slave_0: entered allmulticast mode [ 800.524564][T11042] bridge_slave_0: entered promiscuous mode [ 800.580284][T11190] ======================================================= [ 800.580284][T11190] WARNING: The mand mount option has been deprecated and [ 800.580284][T11190] and is ignored by this kernel. Remove the mand [ 800.580284][T11190] option from the mount to silence this warning. [ 800.580284][T11190] ======================================================= [ 801.963628][T11208] cgroup: Unknown subsys name 'cpuset' [ 801.990263][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.990372][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.990583][T11042] bridge_slave_1: entered allmulticast mode [ 802.006932][T11042] bridge_slave_1: entered promiscuous mode [ 802.437170][T11212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.660209][T11216] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 802.685804][T11219] bridge_slave_0: left allmulticast mode [ 802.685835][T11219] bridge_slave_0: left promiscuous mode [ 802.686216][T11219] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.705766][ T1447] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 802.794886][T11219] bridge_slave_1: left allmulticast mode [ 802.794918][T11219] bridge_slave_1: left promiscuous mode [ 802.795184][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.820918][ T1447] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 802.927523][T11219] bond0: (slave bond_slave_0): Releasing backup interface [ 802.976882][T10868] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 803.016218][T11219] bond0: (slave bond_slave_1): Releasing backup interface [ 803.153312][T10868] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 803.153343][T10868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.156287][T11219] team0: Port device team_slave_0 removed [ 803.163638][T10868] usb 4-1: config 0 descriptor?? [ 803.181583][T10868] cp210x 4-1:0.0: cp210x converter detected [ 803.254407][T11219] team0: Port device team_slave_1 removed [ 803.266541][T11219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.266574][T11219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.305742][T11219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.305833][T11219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.499684][T11219] bond1: (slave ip6gretap1): Removing an active aggregator [ 803.500801][T11219] bond1: (slave ip6gretap1): Releasing backup interface [ 803.601780][T10868] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 804.000866][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.009187][T10868] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 804.009213][T10868] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 804.018393][T10868] usb 4-1: cp210x converter now attached to ttyUSB0 [ 804.024805][T10868] usb 4-1: USB disconnect, device number 9 [ 804.060814][T10868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 804.061357][T10868] cp210x 4-1:0.0: device disconnected [ 804.144025][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.399553][T11004] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 804.550300][T11004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 804.550359][T11004] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 804.550381][T11004] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.561786][T11004] usb 10-1: config 0 descriptor?? [ 804.614216][T11042] team0: Port device team_slave_0 added [ 804.776999][ T9192] hsr_slave_0: left promiscuous mode [ 804.836905][ T9192] hsr_slave_1: left promiscuous mode [ 805.029757][T11004] logitech 0003:046D:C626.0006: bogus close delimiter [ 805.029779][T11004] logitech 0003:046D:C626.0006: item 0 4 2 10 parsing failed [ 805.030610][T11004] logitech 0003:046D:C626.0006: parse failed [ 805.030712][T11004] logitech 0003:046D:C626.0006: probe with driver logitech failed with error -22 [ 805.055665][ T9192] veth1_macvtap: left promiscuous mode [ 805.055785][ T9192] veth0_macvtap: left promiscuous mode [ 805.056077][ T9192] veth1_vlan: left promiscuous mode [ 805.056286][ T9192] veth0_vlan: left promiscuous mode [ 805.240406][T10777] usb 10-1: USB disconnect, device number 4 [ 808.676334][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.676407][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.293032][T11042] team0: Port device team_slave_1 added [ 811.358966][T11262] bond1: option mode: unable to set because the bond device is up [ 811.678593][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1525'. [ 811.678635][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1525'. [ 811.760726][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.760742][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.760767][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.786817][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.786832][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.786856][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.689376][T11042] hsr_slave_0: entered promiscuous mode [ 813.690651][T11042] hsr_slave_1: entered promiscuous mode [ 813.691531][T11042] debugfs: 'hsr0' already exists in 'hsr' [ 813.691553][T11042] Cannot create hsr debugfs directory [ 815.428155][T11338] team0: Mode changed to "loadbalance" [ 816.447202][T11351] proc: Bad value for 'gid' [ 818.926948][T11367] Driver unsupported XDP return value 0 on prog (id 207) dev N/A, expect packet loss! [ 820.376136][T11381] team0: Unable to change to the same mode the team is in [ 822.525915][T11042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 823.014025][T11042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 823.546775][T11042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 823.552691][T11403] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 823.552728][T11403] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 823.552753][T11403] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 823.602575][T11042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 824.732420][T11427] cgroup: Unknown subsys name 'cpuset' [ 825.613775][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.732821][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.800401][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.800563][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.832159][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.832305][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.089800][ T70] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 828.213089][T11456] ptrace attach of "./syz-executor exec"[10813] was attempted by ""[11456] [ 828.950186][ T37] audit: type=1326 audit(1759039236.394:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.950246][ T37] audit: type=1326 audit(1759039236.414:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.968467][ T37] audit: type=1326 audit(1759039236.434:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.968516][ T37] audit: type=1326 audit(1759039236.434:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.968555][ T37] audit: type=1326 audit(1759039236.434:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.968593][ T37] audit: type=1326 audit(1759039236.434:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.968631][ T37] audit: type=1326 audit(1759039236.434:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 828.968669][ T37] audit: type=1326 audit(1759039236.434:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.9.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 831.154890][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.350772][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1585'. [ 835.373979][T11042] veth0_vlan: entered promiscuous mode [ 835.457456][T11042] veth1_vlan: entered promiscuous mode [ 835.548963][T11042] veth0_macvtap: entered promiscuous mode [ 835.571933][T11042] veth1_macvtap: entered promiscuous mode [ 835.621285][T11042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.642600][T11042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.674339][ T6911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.674584][ T6911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.674817][ T6911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.674868][ T6911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.839569][T11501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 836.932904][T11506] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 837.042478][ T1305] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.158842][ T9192] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.224835][ T9984] Bluetooth: hci0: command 0x0406 tx timeout [ 838.444898][T11518] IPv6: sit1: Disabled Multicast RS [ 838.445719][T11518] sit1: entered allmulticast mode [ 839.257376][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.257394][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.325688][ T6911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.325707][ T6911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.882118][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 844.844578][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1601'. [ 848.516686][ T37] audit: type=1326 audit(1759039254.504:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11567 comm="syz.9.1615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x0 [ 851.936427][T11590] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 852.479453][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 857.458051][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 865.487480][ T70] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 865.770819][T11659] 9pnet_fd: Insufficient options for proto=fd [ 865.887468][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1641'. [ 868.329691][T11678] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 868.781507][ T9984] Bluetooth: hci2: unexpected event for opcode 0x202a [ 870.124138][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.124428][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.324651][T11679] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 873.666790][ T5915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 874.785618][ T5915] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 874.785648][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.785668][ T5915] usb 1-1: Product: syz [ 874.785682][ T5915] usb 1-1: Manufacturer: syz [ 874.785695][ T5915] usb 1-1: SerialNumber: syz [ 874.828990][ T5915] usb 1-1: config 0 descriptor?? [ 874.849187][ T5915] ch341 1-1:0.0: ch341-uart converter detected [ 876.505216][ T5915] usb 1-1: failed to send control message: -110 [ 876.505252][ T5915] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 876.984393][T11718] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1656'. [ 877.900306][T10344] usb 1-1: USB disconnect, device number 4 [ 877.901820][T10344] ch341 1-1:0.0: device disconnected [ 878.200030][ T9984] Bluetooth: hci4: unknown advertising packet type: 0x80 [ 887.554944][T11768] kvm: kvm [11766]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 887.557687][T11768] kvm: kvm [11766]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 887.567957][T11768] kvm: kvm [11766]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 892.748096][T11805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 892.748121][T11805] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 892.875993][T11805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 892.876017][T11805] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 893.544650][T11805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 893.544672][T11805] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 893.653754][T11805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 893.653782][T11805] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 893.762610][T11805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 893.762635][T11805] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 897.429364][ T1447] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 905.142084][T11913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.158334][T11914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.163192][T11914] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 906.856791][T10777] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 907.902597][T10777] usb 4-1: Using ep0 maxpacket: 32 [ 907.905006][T10777] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 907.905031][T10777] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.910560][T10777] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 907.910586][T10777] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 907.910606][T10777] usb 4-1: Product: syz [ 907.910620][T10777] usb 4-1: Manufacturer: syz [ 907.910633][T10777] usb 4-1: SerialNumber: syz [ 907.983792][T10868] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 908.011097][T10777] usb 4-1: config 0 descriptor?? [ 908.068849][T10777] ldusb 4-1:0.0: Interrupt in endpoint not found [ 908.136776][T10868] usb 10-1: Using ep0 maxpacket: 8 [ 908.139118][T10868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.139133][T10868] usb 10-1: config 0 has no interfaces? [ 908.141938][T10868] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 908.141966][T10868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.141987][T10868] usb 10-1: Product: syz [ 908.142002][T10868] usb 10-1: Manufacturer: syz [ 908.142016][T10868] usb 10-1: SerialNumber: syz [ 908.217136][T10868] usb 10-1: config 0 descriptor?? [ 908.263969][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.264385][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.268474][ T5991] usb 4-1: USB disconnect, device number 10 [ 908.678446][T11961] binder: 11953:11961 ioctl c0306201 0 returned -14 [ 908.887733][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.262301][T11979] random: crng reseeded on system resumption [ 914.871527][T11995] bond1: option mode: unable to set because the bond device has slaves [ 914.957665][ T5922] usb 10-1: USB disconnect, device number 5 [ 915.018451][T11995] bond1: (slave ip6gretap1): Removing an active aggregator [ 915.022940][T11995] bond1: (slave ip6gretap1): Releasing backup interface [ 915.221489][T12001] bridge_slave_0: left allmulticast mode [ 915.221523][T12001] bridge_slave_0: left promiscuous mode [ 915.221781][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.348895][T12001] bridge_slave_1: left allmulticast mode [ 915.348915][T12001] bridge_slave_1: left promiscuous mode [ 915.349075][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.498263][T12001] bond0: (slave bond_slave_0): Releasing backup interface [ 915.647733][T12001] bond0: (slave bond_slave_1): Releasing backup interface [ 915.821309][T12001] team0: Port device team_slave_0 removed [ 915.873950][T12001] team0: Port device team_slave_1 removed [ 915.875644][T12001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.875674][T12001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.118932][T12001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.118963][T12001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.289719][T11004] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 916.847967][T11004] usb 8-1: Using ep0 maxpacket: 8 [ 916.850888][T11004] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 916.850916][T11004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.889271][T11004] usb 8-1: config 0 descriptor?? [ 917.213799][T12033] bond1: option mode: unable to set because the bond device is up [ 917.238789][T12033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 917.242028][T12033] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 917.387813][T12030] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.1755'. [ 917.398209][T12033] bond1: (slave macvlan2): Releasing backup interface [ 918.186765][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 918.375583][T11004] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 918.375882][T11004] asix 8-1:0.0: probe with driver asix failed with error -32 [ 919.665006][ T5990] usb 8-1: USB disconnect, device number 3 [ 924.348806][ T5955] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 924.513978][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 924.550445][ T5955] usb 10-1: Using ep0 maxpacket: 8 [ 924.553623][ T5955] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 924.553639][ T5955] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.668994][ T5955] usb 10-1: config 0 descriptor?? [ 925.168233][ T5955] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 925.172228][ T5955] asix 10-1:0.0: probe with driver asix failed with error -32 [ 929.149341][T12115] cgroup: Unknown subsys name 'cpuset' [ 929.152784][T10868] usb 10-1: USB disconnect, device number 6 [ 929.345630][T12118] syz_tun: entered allmulticast mode [ 929.898133][ T1447] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.774981][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.775026][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.648261][ T37] audit: type=1326 audit(1759039342.094:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.9.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 934.696043][ T37] audit: type=1326 audit(1759039342.144:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.9.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 934.696095][ T37] audit: type=1326 audit(1759039342.144:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.9.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 934.696136][ T37] audit: type=1326 audit(1759039342.144:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.9.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 934.696177][ T37] audit: type=1326 audit(1759039342.144:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.9.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 936.017189][ T37] audit: type=1326 audit(1759039342.644:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 936.017246][ T37] audit: type=1326 audit(1759039342.644:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 936.017288][ T37] audit: type=1326 audit(1759039342.644:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 936.017333][ T37] audit: type=1326 audit(1759039342.644:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 936.017373][ T37] audit: type=1326 audit(1759039342.644:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12154 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e65eec9 code=0x7ffc0000 [ 948.419106][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 949.589365][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 949.619551][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 949.664629][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 949.699192][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 950.431925][ T9984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 950.468133][ T9984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 950.476127][ T9984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 950.546367][ T9984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 950.551354][ T9984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.676808][ T9984] Bluetooth: hci5: command tx timeout [ 955.456831][ T9984] Bluetooth: hci5: command tx timeout [ 955.565439][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1824'. [ 957.201088][ T990] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.536911][ T9984] Bluetooth: hci5: command tx timeout [ 957.758182][ T990] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.888759][T12310] team0: Mode changed to "loadbalance" [ 958.219616][ T990] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.374570][T12246] chnl_net:caif_netlink_parms(): no params data found [ 959.605530][ T990] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.616829][ T9984] Bluetooth: hci5: command tx timeout [ 962.429404][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.436878][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.437117][T12246] bridge_slave_0: entered allmulticast mode [ 962.439649][T12246] bridge_slave_0: entered promiscuous mode [ 962.457159][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.457288][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.461782][T12246] bridge_slave_1: entered allmulticast mode [ 962.476735][T12246] bridge_slave_1: entered promiscuous mode [ 963.997152][T12351] team0: Unable to change to the same mode the team is in [ 964.000908][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.069145][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.044008][ T1460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.231554][ T990] bond0 (unregistering): Released all slaves [ 971.052278][ T990] bond1 (unregistering): Released all slaves [ 972.313603][T12411] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 972.313630][T12411] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 972.313641][T12411] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 972.454306][T12246] team0: Port device team_slave_0 added [ 973.026263][T12246] team0: Port device team_slave_1 added [ 974.966799][ T1232] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 975.014859][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.014877][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.014901][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.040924][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.040939][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.040964][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.118855][ T1232] usb 4-1: Using ep0 maxpacket: 8 [ 975.121338][ T1232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.121363][ T1232] usb 4-1: config 0 has no interfaces? [ 975.124325][ T1232] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 975.124351][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.124370][ T1232] usb 4-1: Product: syz [ 975.124384][ T1232] usb 4-1: Manufacturer: syz [ 975.124398][ T1232] usb 4-1: SerialNumber: syz [ 975.148872][ T1232] usb 4-1: config 0 descriptor?? [ 975.261047][ T990] hsr_slave_0: left promiscuous mode [ 975.409852][ T990] hsr_slave_1: left promiscuous mode [ 975.787520][T12455] binder: 12447:12455 ioctl c0306201 0 returned -14 [ 975.860438][ T990] veth1_macvtap: left promiscuous mode [ 975.860567][ T990] veth0_macvtap: left promiscuous mode [ 975.860841][ T990] veth1_vlan: left promiscuous mode [ 975.861035][ T990] veth0_vlan: left promiscuous mode [ 976.360745][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.389793][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.391647][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.392952][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.393759][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 979.406048][ T9984] Bluetooth: hci2: command tx timeout [ 981.456796][ T9984] Bluetooth: hci2: command tx timeout [ 983.536810][ T9984] Bluetooth: hci2: command tx timeout [ 984.824282][T12048] usb 4-1: USB disconnect, device number 11 [ 985.778594][ T9984] Bluetooth: hci2: command tx timeout [ 986.504693][T12246] hsr_slave_0: entered promiscuous mode [ 986.506245][T12246] hsr_slave_1: entered promiscuous mode [ 992.402431][T12542] tmpfs: Unknown parameter 'quo' [ 992.984535][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.984621][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.557077][T12548] wg2: entered promiscuous mode [ 993.557110][T12548] wg2: entered allmulticast mode [ 996.834991][ T990] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.020364][T12462] chnl_net:caif_netlink_parms(): no params data found [ 997.285692][ T990] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.664256][ T990] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.061394][ T990] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.197724][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.197846][T12462] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.198087][T12462] bridge_slave_0: entered allmulticast mode [ 998.200718][T12462] bridge_slave_0: entered promiscuous mode [ 998.273788][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.274106][T12462] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.274309][T12462] bridge_slave_1: entered allmulticast mode [ 998.298692][T12462] bridge_slave_1: entered promiscuous mode [ 998.794591][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.862135][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.659679][T12462] team0: Port device team_slave_0 added [ 999.681509][T12246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 999.716318][T12462] team0: Port device team_slave_1 added [ 999.738877][T12246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 999.920667][T12246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1000.107283][T12246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1000.164957][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.164975][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.165000][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.378371][ T990] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1002.460886][ T990] bond0 (unregistering): Released all slaves [ 1003.227232][ T990] bond1 (unregistering): Released all slaves [ 1004.166239][ T990] bond2 (unregistering): Released all slaves [ 1004.232029][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.232046][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.232071][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.282946][T12462] hsr_slave_0: entered promiscuous mode [ 1005.284355][T12462] hsr_slave_1: entered promiscuous mode [ 1005.285265][T12462] debugfs: 'hsr0' already exists in 'hsr' [ 1005.285289][T12462] Cannot create hsr debugfs directory [ 1006.574494][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1006.585493][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1006.589106][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1006.590665][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1006.591475][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1007.159472][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 1007.228631][ T990] hsr_slave_0: left promiscuous mode [ 1007.875961][ T990] hsr_slave_1: left promiscuous mode [ 1008.021420][ T990] veth1_macvtap: left promiscuous mode [ 1008.021541][ T990] veth0_macvtap: left promiscuous mode [ 1008.021814][ T990] veth1_vlan: left promiscuous mode [ 1008.022028][ T990] veth0_vlan: left promiscuous mode [ 1008.657153][ T5847] Bluetooth: hci0: command tx timeout [ 1010.736765][ T5847] Bluetooth: hci0: command tx timeout [ 1012.816853][ T5847] Bluetooth: hci0: command tx timeout [ 1014.308627][T12648] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1014.308651][T12648] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1014.308661][T12648] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1014.898678][ T5847] Bluetooth: hci0: command tx timeout [ 1015.830582][ T9984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1015.851833][ T9984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1015.853676][ T9984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1015.879982][ T9984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1015.881180][ T9984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1017.951591][ T9984] Bluetooth: hci5: command tx timeout [ 1018.093829][T12625] chnl_net:caif_netlink_parms(): no params data found [ 1020.092244][ T9984] Bluetooth: hci5: command tx timeout [ 1020.942740][ T990] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.001755][T12625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.001898][T12625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.002146][T12625] bridge_slave_0: entered allmulticast mode [ 1021.005065][T12625] bridge_slave_0: entered promiscuous mode [ 1021.085235][T12625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.085390][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.085744][T12625] bridge_slave_1: entered allmulticast mode [ 1021.089245][T12625] bridge_slave_1: entered promiscuous mode [ 1021.719681][ T990] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.029833][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.096855][ T9984] Bluetooth: hci5: command tx timeout [ 1022.237862][ T990] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.310523][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.699784][T12728] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1959'. [ 1023.944905][ T990] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.179570][ T9984] Bluetooth: hci5: command tx timeout [ 1024.230747][T12462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1024.507687][T12462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1024.539740][T12625] team0: Port device team_slave_0 added [ 1024.548236][T12625] team0: Port device team_slave_1 added [ 1024.646882][T12462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1024.858760][T12462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1024.918913][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.918928][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.918952][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.013269][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.013285][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.013310][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.905217][T12625] hsr_slave_0: entered promiscuous mode [ 1026.915849][T12625] hsr_slave_1: entered promiscuous mode [ 1026.924792][T12625] debugfs: 'hsr0' already exists in 'hsr' [ 1026.924819][T12625] Cannot create hsr debugfs directory [ 1026.943405][T12663] chnl_net:caif_netlink_parms(): no params data found [ 1029.160154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1029.822538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1029.942020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.030542][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 1030.255085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.507092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.114632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.240770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.499291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.612437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.249878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.909123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.254363][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 1034.277160][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.277292][T12663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.277523][T12663] bridge_slave_0: entered allmulticast mode [ 1034.284340][T12663] bridge_slave_0: entered promiscuous mode [ 1034.368043][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.368221][T12663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.368463][T12663] bridge_slave_1: entered allmulticast mode [ 1034.375250][T12663] bridge_slave_1: entered promiscuous mode [ 1036.966494][T12663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.002810][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1037.025670][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1037.039796][T12663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.045623][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1037.059031][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1037.062543][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1038.727668][T12663] team0: Port device team_slave_0 added [ 1038.766529][T12663] team0: Port device team_slave_1 added [ 1039.042004][T12663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.042022][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.042048][T12663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.104316][T12663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.104332][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.104355][T12663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.136930][ T5847] Bluetooth: hci3: command tx timeout [ 1041.216748][ T5847] Bluetooth: hci3: command tx timeout [ 1042.719955][T12663] hsr_slave_0: entered promiscuous mode [ 1042.721369][T12663] hsr_slave_1: entered promiscuous mode [ 1042.722249][T12663] debugfs: 'hsr0' already exists in 'hsr' [ 1042.722271][T12663] Cannot create hsr debugfs directory [ 1043.002627][ T990] bridge_slave_1: left allmulticast mode [ 1043.002660][ T990] bridge_slave_1: left promiscuous mode [ 1043.002931][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.319069][ T5847] Bluetooth: hci3: command tx timeout [ 1043.434221][ T990] bridge_slave_0: left allmulticast mode [ 1043.434300][ T990] bridge_slave_0: left promiscuous mode [ 1043.437464][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.424807][ T5847] Bluetooth: hci3: command tx timeout [ 1046.936764][T11004] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1047.154420][T11004] usb 4-1: Using ep0 maxpacket: 32 [ 1047.162279][T11004] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1047.162304][T11004] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.166538][T11004] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1047.166568][T11004] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1047.167422][T11004] usb 4-1: Product: syz [ 1047.167441][T11004] usb 4-1: Manufacturer: syz [ 1047.167454][T11004] usb 4-1: SerialNumber: syz [ 1047.182469][T11004] usb 4-1: config 0 descriptor?? [ 1047.205483][T11004] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1047.413906][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.414418][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.416543][T11004] usb 4-1: USB disconnect, device number 12 [ 1047.998605][T12871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.610368][ T990] bond0 (unregistering): Released all slaves [ 1050.722401][ T990] bond1 (unregistering): Released all slaves [ 1051.047762][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.107646][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.190991][ T990] bond0 (unregistering): Released all slaves [ 1054.423675][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.423748][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.264939][T12898] Invalid option length (64439) for dns_resolver key [ 1055.696805][ T990] hsr_slave_0: left promiscuous mode [ 1055.807297][ T990] hsr_slave_1: left promiscuous mode [ 1055.966911][ T990] hsr_slave_0: left promiscuous mode [ 1055.986895][ T990] hsr_slave_1: left promiscuous mode [ 1055.987807][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.044956][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.146895][ T990] veth1_macvtap: left promiscuous mode [ 1056.150857][ T990] veth0_macvtap: left promiscuous mode [ 1056.151041][ T990] veth1_vlan: left promiscuous mode [ 1056.151156][ T990] veth0_vlan: left promiscuous mode [ 1057.594766][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 1062.999328][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1063.147719][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1064.092819][T12818] chnl_net:caif_netlink_parms(): no params data found [ 1065.499908][T12625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1065.627281][T12625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1065.942134][T12625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1066.178140][T12625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1066.512661][T12934] Invalid option length (64439) for dns_resolver key [ 1066.755842][T12625] kthread_run failed with err -4 [ 1066.887543][T12818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.887745][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.888031][T12818] bridge_slave_0: entered allmulticast mode [ 1066.921332][T12818] bridge_slave_0: entered promiscuous mode [ 1066.924579][T12818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.924713][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.924895][T12818] bridge_slave_1: entered allmulticast mode [ 1066.957760][T12818] bridge_slave_1: entered promiscuous mode [ 1068.119240][ T9984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1068.138788][ T9984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1068.140164][ T9984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1068.142072][ T9984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1068.142998][ T9984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1069.478140][T12818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.668393][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2030'. [ 1069.917429][T12818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.535023][ T9984] Bluetooth: hci2: command tx timeout [ 1071.447088][T12818] team0: Port device team_slave_0 added [ 1071.465032][T12818] team0: Port device team_slave_1 added [ 1071.836265][T12818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.836279][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.836293][T12818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.026111][T12818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.026128][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.026152][T12818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.804801][ T9984] Bluetooth: hci2: command tx timeout [ 1074.145971][T12818] hsr_slave_0: entered promiscuous mode [ 1074.163598][T12818] hsr_slave_1: entered promiscuous mode [ 1074.296824][T12663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1074.624685][T12663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1075.856985][ T5847] Bluetooth: hci2: command tx timeout [ 1075.972295][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2043'. [ 1075.988345][T12663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1077.277996][ T9984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1077.407039][ T9984] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1077.409640][ T9984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1077.411515][ T9984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1077.412265][ T9984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1077.736451][T13026] Invalid option length (64439) for dns_resolver key [ 1077.936886][ T5847] Bluetooth: hci2: command tx timeout [ 1078.303881][T13025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.543120][ T5847] Bluetooth: hci0: command tx timeout [ 1079.566342][T13037] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1079.566372][T13037] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1079.566389][T13037] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1079.596059][T12950] chnl_net:caif_netlink_parms(): no params data found [ 1081.248090][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.248308][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.248545][T12950] bridge_slave_0: entered allmulticast mode [ 1081.251361][T12950] bridge_slave_0: entered promiscuous mode [ 1081.285350][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.285500][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.285736][T12950] bridge_slave_1: entered allmulticast mode [ 1081.310320][T12950] bridge_slave_1: entered promiscuous mode [ 1081.582361][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.599760][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.616891][ T5847] Bluetooth: hci0: command tx timeout [ 1081.764454][ T990] bridge_slave_1: left allmulticast mode [ 1081.764486][ T990] bridge_slave_1: left promiscuous mode [ 1081.764733][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.868431][ T990] bridge_slave_0: left allmulticast mode [ 1081.868464][ T990] bridge_slave_0: left promiscuous mode [ 1081.868732][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.942808][ T990] bridge_slave_1: left allmulticast mode [ 1081.942844][ T990] bridge_slave_1: left promiscuous mode [ 1081.943100][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.008281][ T990] bridge_slave_0: left allmulticast mode [ 1082.008313][ T990] bridge_slave_0: left promiscuous mode [ 1082.008646][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.726984][ T5847] Bluetooth: hci0: command tx timeout [ 1084.015463][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.173911][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.285471][ T990] bond0 (unregistering): Released all slaves [ 1084.676783][T11004] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1084.809896][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.827825][T11004] usb 4-1: Using ep0 maxpacket: 32 [ 1084.835795][T11004] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1084.835820][T11004] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.851553][T11004] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1084.851580][T11004] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1084.851602][T11004] usb 4-1: Product: syz [ 1084.851617][T11004] usb 4-1: Manufacturer: syz [ 1084.851638][T11004] usb 4-1: SerialNumber: syz [ 1084.897669][T11004] usb 4-1: config 0 descriptor?? [ 1084.901702][T11004] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1084.950207][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.009053][ T990] bond0 (unregistering): Released all slaves [ 1085.128651][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.129100][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.156515][T11004] usb 4-1: USB disconnect, device number 13 [ 1085.343693][T12950] team0: Port device team_slave_0 added [ 1085.390112][T12950] team0: Port device team_slave_1 added [ 1085.691088][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.691104][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.691129][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.692511][T13016] chnl_net:caif_netlink_parms(): no params data found [ 1085.774561][T13057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.777016][ T5847] Bluetooth: hci0: command tx timeout [ 1085.792500][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.792517][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.792543][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.817773][T13063] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2057'. [ 1086.037037][ T990] hsr_slave_0: left promiscuous mode [ 1086.079437][ T990] hsr_slave_1: left promiscuous mode [ 1086.080284][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.128362][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.356859][ T990] hsr_slave_0: left promiscuous mode [ 1086.397054][ T990] hsr_slave_1: left promiscuous mode [ 1086.398295][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.467795][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.812857][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1089.854524][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.027954][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1091.405450][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1093.906830][ T5990] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1094.056881][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 1094.072797][ T5990] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1094.072824][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.095904][ T5990] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1094.095934][ T5990] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1094.095954][ T5990] usb 4-1: Product: syz [ 1094.095968][ T5990] usb 4-1: Manufacturer: syz [ 1094.095982][ T5990] usb 4-1: SerialNumber: syz [ 1094.136749][ T5990] usb 4-1: config 0 descriptor?? [ 1094.140793][ T5990] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1094.197645][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1094.345730][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.346125][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.371313][ T5990] usb 4-1: USB disconnect, device number 14 [ 1094.383456][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1094.956086][T13119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.193174][T12818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1097.406814][ T5990] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1097.571539][ T5990] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1097.571573][ T5990] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1097.571598][ T5990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1097.571635][ T5990] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1097.571657][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.623356][T12950] hsr_slave_0: entered promiscuous mode [ 1097.639414][T12950] hsr_slave_1: entered promiscuous mode [ 1097.640311][T12950] debugfs: 'hsr0' already exists in 'hsr' [ 1097.640334][T12950] Cannot create hsr debugfs directory [ 1097.642458][ T5990] usb 4-1: config 0 descriptor?? [ 1097.644398][T13128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1097.719732][ T9984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1097.744434][ T9984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1097.755229][ T9984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1097.766398][ T9984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1097.798927][ T9984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1098.121180][ T5990] logitech 0003:046D:C24F.0007: unknown main item tag 0x0 [ 1098.124950][ T5990] logitech 0003:046D:C24F.0007: hidraw0: USB HID v0.07 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 1098.124993][ T5990] logitech 0003:046D:C24F.0007: no inputs found [ 1098.184202][T13142] netlink: 'syz.0.2083': attribute type 3 has an invalid length. [ 1098.326235][T11004] usb 4-1: USB disconnect, device number 15 [ 1098.638800][T13016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.639009][T13016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.639186][T13016] bridge_slave_0: entered allmulticast mode [ 1098.641968][T13016] bridge_slave_0: entered promiscuous mode [ 1098.693228][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.693367][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.693556][T13016] bridge_slave_1: entered allmulticast mode [ 1098.696220][T13016] bridge_slave_1: entered promiscuous mode [ 1099.861559][ T9984] Bluetooth: hci5: command tx timeout [ 1100.660166][T13016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.731909][T13016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.937149][ T5847] Bluetooth: hci5: command tx timeout [ 1102.230802][T13016] team0: Port device team_slave_0 added [ 1102.271025][T13016] team0: Port device team_slave_1 added [ 1103.950830][T13016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.950845][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.950864][T13016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.017024][ T5847] Bluetooth: hci5: command tx timeout [ 1104.047703][T13016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.047719][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.047745][T13016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.728777][T13016] hsr_slave_0: entered promiscuous mode [ 1104.737424][T13016] hsr_slave_1: entered promiscuous mode [ 1104.738292][T13016] debugfs: 'hsr0' already exists in 'hsr' [ 1104.738314][T13016] Cannot create hsr debugfs directory [ 1106.097374][ T5847] Bluetooth: hci5: command tx timeout [ 1107.190810][T13135] chnl_net:caif_netlink_parms(): no params data found [ 1109.350780][T12950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1109.465272][T12950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1110.633671][T12950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1112.992646][T12950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1113.612183][T13135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.612324][T13135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.612554][T13135] bridge_slave_0: entered allmulticast mode [ 1113.615386][T13135] bridge_slave_0: entered promiscuous mode [ 1113.676232][T13135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.676444][T13135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.692252][T13135] bridge_slave_1: entered allmulticast mode [ 1113.695007][T13135] bridge_slave_1: entered promiscuous mode [ 1115.812141][T13244] bridge_slave_0: entered promiscuous mode [ 1115.863131][T13135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.864206][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.864247][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.460236][T13135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.105424][T13135] team0: Port device team_slave_0 added [ 1117.122969][T13135] team0: Port device team_slave_1 added [ 1117.682766][ T990] bridge_slave_1: left allmulticast mode [ 1117.684037][ T990] bridge_slave_1: left promiscuous mode [ 1117.729147][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.679816][ T990] bridge_slave_0: left allmulticast mode [ 1118.679849][ T990] bridge_slave_0: left promiscuous mode [ 1118.680117][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.691537][ T990] bridge_slave_1: left allmulticast mode [ 1119.691569][ T990] bridge_slave_1: left promiscuous mode [ 1119.691819][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.788153][ T990] bridge_slave_0: left allmulticast mode [ 1119.788185][ T990] bridge_slave_0: left promiscuous mode [ 1119.788447][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.886839][T11004] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1120.056840][T11004] usb 4-1: Using ep0 maxpacket: 8 [ 1120.064982][T11004] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1120.065010][T11004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.118929][T11004] usb 4-1: config 0 descriptor?? [ 1120.317714][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.593686][T11004] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1120.593967][T11004] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1120.688039][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.771024][ T990] bond0 (unregistering): Released all slaves [ 1121.037825][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.107469][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.170773][ T990] bond0 (unregistering): Released all slaves [ 1121.204467][T11004] usb 4-1: USB disconnect, device number 16 [ 1121.331729][T13135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.331739][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.331753][T13135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.415142][T13135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.415159][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.415184][T13135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.614592][T13135] hsr_slave_0: entered promiscuous mode [ 1124.619313][T13135] hsr_slave_1: entered promiscuous mode [ 1124.621317][T13135] debugfs: 'hsr0' already exists in 'hsr' [ 1124.621340][T13135] Cannot create hsr debugfs directory [ 1125.930472][T13016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1126.157131][ T990] hsr_slave_0: left promiscuous mode [ 1126.177478][ T990] hsr_slave_1: left promiscuous mode [ 1126.178590][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.230021][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.256990][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1126.377895][ T990] hsr_slave_0: left promiscuous mode [ 1126.397568][ T990] hsr_slave_1: left promiscuous mode [ 1126.398498][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.421692][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 1126.424696][ T5915] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1126.424723][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.458893][ T5915] usb 4-1: config 0 descriptor?? [ 1126.462442][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.739799][ T5915] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1126.740080][ T5915] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1127.382759][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1127.507414][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1127.758975][ T9984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1127.763774][ T9984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1127.802915][ T9984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1127.804131][ T9984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1127.806822][ T9984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1128.707462][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1128.797545][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1129.383767][T11004] usb 4-1: USB disconnect, device number 17 [ 1129.491108][T13016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1129.596512][T13016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1130.529239][ T5847] Bluetooth: hci3: command tx timeout [ 1131.342528][T13016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1132.645193][T11004] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1132.771451][ T5847] Bluetooth: hci3: command tx timeout [ 1132.979749][T11004] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.980570][T11004] usb 4-1: not running at top speed; connect to a high speed hub [ 1132.982172][T11004] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1132.985778][T11004] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1132.985805][T11004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.985824][T11004] usb 4-1: Product: syz [ 1132.985839][T11004] usb 4-1: Manufacturer: syz [ 1132.985852][T11004] usb 4-1: SerialNumber: syz [ 1133.517063][T11004] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1134.347205][T11004] usb 4-1: USB disconnect, device number 18 [ 1135.338543][ T5847] Bluetooth: hci3: command tx timeout [ 1135.588945][T13329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.286930][T13292] chnl_net:caif_netlink_parms(): no params data found [ 1137.806651][ T9984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1137.817836][ T9984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1137.819225][ T9984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1138.482233][ T9984] Bluetooth: hci3: command tx timeout [ 1138.495109][ T9984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1138.496006][ T9984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1140.576813][ T59] Bluetooth: hci2: command tx timeout [ 1140.686878][ T5990] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1140.837265][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 1140.841704][ T5990] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1140.841731][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.847025][ T5990] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1140.847052][ T5990] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1140.847072][ T5990] usb 4-1: Product: syz [ 1140.847085][ T5990] usb 4-1: Manufacturer: syz [ 1140.847099][ T5990] usb 4-1: SerialNumber: syz [ 1140.853063][ T5990] usb 4-1: config 0 descriptor?? [ 1140.879028][ T5990] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1140.943957][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.944082][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.944213][T13292] bridge_slave_0: entered allmulticast mode [ 1140.945679][T13292] bridge_slave_0: entered promiscuous mode [ 1141.162611][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.163021][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.190772][ T1232] usb 4-1: USB disconnect, device number 19 [ 1141.246932][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.247063][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.247284][T13292] bridge_slave_1: entered allmulticast mode [ 1141.250758][T13292] bridge_slave_1: entered promiscuous mode [ 1141.952095][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.952184][T13135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1142.004154][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.004433][T13135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1142.700075][ T59] Bluetooth: hci2: command tx timeout [ 1142.717062][T13135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1143.578228][T13368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.855859][T13384] syz.0.2149 (13384) used greatest stack depth: 18504 bytes left [ 1143.889878][T13135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1144.003295][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 1144.736914][ T59] Bluetooth: hci2: command tx timeout [ 1144.820275][T13292] team0: Port device team_slave_0 added [ 1144.852549][T13392] 9pnet_fd: Insufficient options for proto=fd [ 1145.112780][T13292] team0: Port device team_slave_1 added [ 1145.511385][ T5990] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1146.408471][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 1146.476666][ T5990] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1146.476695][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.479784][ T5990] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1146.479812][ T5990] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1146.479833][ T5990] usb 4-1: Product: syz [ 1146.479847][ T5990] usb 4-1: Manufacturer: syz [ 1146.479861][ T5990] usb 4-1: SerialNumber: syz [ 1146.485264][ T5990] usb 4-1: config 0 descriptor?? [ 1146.494920][ T5990] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1146.722347][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.722362][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.722380][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.761697][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.761712][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.761736][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.816801][ T59] Bluetooth: hci2: command tx timeout [ 1146.821061][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.821461][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.823353][ T5990] usb 4-1: USB disconnect, device number 20 [ 1148.155855][T13419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.728813][T13292] hsr_slave_0: entered promiscuous mode [ 1148.732608][T13292] hsr_slave_1: entered promiscuous mode [ 1149.365928][T13356] chnl_net:caif_netlink_parms(): no params data found [ 1149.510598][ T990] bridge_slave_1: left allmulticast mode [ 1149.510630][ T990] bridge_slave_1: left promiscuous mode [ 1149.510883][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.687586][ T990] bridge_slave_0: left allmulticast mode [ 1149.687623][ T990] bridge_slave_0: left promiscuous mode [ 1149.687878][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.688920][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.804113][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.887170][ T990] bond0 (unregistering): Released all slaves [ 1154.447040][ T990] hsr_slave_0: left promiscuous mode [ 1154.466730][ T990] hsr_slave_1: left promiscuous mode [ 1154.469712][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.517289][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.217749][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1155.347578][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1156.795756][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.796041][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.796165][T13356] bridge_slave_0: entered allmulticast mode [ 1156.800394][T13356] bridge_slave_0: entered promiscuous mode [ 1156.841646][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.841789][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.841975][T13356] bridge_slave_1: entered allmulticast mode [ 1156.847487][T13356] bridge_slave_1: entered promiscuous mode [ 1157.185685][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.245123][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.755375][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1158.766875][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1158.768187][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1158.769979][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1158.771269][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1160.639346][T13356] team0: Port device team_slave_0 added [ 1160.817163][T13356] team0: Port device team_slave_1 added [ 1160.818349][ T5847] Bluetooth: hci0: command tx timeout [ 1161.491382][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.491398][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.491424][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.572611][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.572627][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.572652][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.896810][ T5847] Bluetooth: hci0: command tx timeout [ 1163.607753][T13356] hsr_slave_0: entered promiscuous mode [ 1163.609071][T13356] hsr_slave_1: entered promiscuous mode [ 1163.610805][T13356] debugfs: 'hsr0' already exists in 'hsr' [ 1163.610828][T13356] Cannot create hsr debugfs directory [ 1164.985380][ T5847] Bluetooth: hci0: command tx timeout [ 1165.622382][T13292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1165.708899][T13292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1165.894975][T13292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.001216][T13292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1166.067405][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 1167.910181][ T5847] Bluetooth: hci0: command tx timeout [ 1168.063516][T13467] chnl_net:caif_netlink_parms(): no params data found [ 1170.116762][T10868] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1170.270838][T10868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.270872][T10868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.270911][T10868] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1170.270934][T10868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.276306][T10868] usb 4-1: config 0 descriptor?? [ 1170.380561][T13467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.380881][T13467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.381173][T13467] bridge_slave_0: entered allmulticast mode [ 1170.383338][T13467] bridge_slave_0: entered promiscuous mode [ 1170.429254][T13467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.429399][T13467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.429649][T13467] bridge_slave_1: entered allmulticast mode [ 1170.433630][T13467] bridge_slave_1: entered promiscuous mode [ 1170.602665][T13569] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2204'. [ 1170.730708][T13565] batadv_slave_1: entered promiscuous mode [ 1170.752193][T13467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.769202][T13467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.793280][T10868] logitech 0003:046D:C29C.0008: unknown main item tag 0x3 [ 1170.830735][T10868] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 1171.819450][ T990] bridge_slave_1: left allmulticast mode [ 1171.819483][ T990] bridge_slave_1: left promiscuous mode [ 1171.819742][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.139133][ T990] bridge_slave_0: left allmulticast mode [ 1172.139165][ T990] bridge_slave_0: left promiscuous mode [ 1172.141668][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.009672][ T990] bridge_slave_1: left allmulticast mode [ 1173.009774][ T990] bridge_slave_1: left promiscuous mode [ 1173.010185][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.225336][T13581] netlink: 'syz.0.2208': attribute type 28 has an invalid length. [ 1173.258497][ T990] bridge_slave_0: left allmulticast mode [ 1173.258527][ T990] bridge_slave_0: left promiscuous mode [ 1173.258793][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.398636][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.487690][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.557095][ T990] bond0 (unregistering): Released all slaves [ 1175.300919][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.403713][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.461030][ T990] bond0 (unregistering): Released all slaves [ 1175.704745][T13564] batadv_slave_1: left promiscuous mode [ 1175.709663][T13467] team0: Port device team_slave_0 added [ 1175.727974][T13467] team0: Port device team_slave_1 added [ 1175.744448][T10868] logitech 0003:046D:C29C.0008: no inputs found [ 1175.826827][T10868] usb 4-1: USB disconnect, device number 21 [ 1176.153826][T13467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.153842][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.153867][T13467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.337968][ T990] hsr_slave_0: left promiscuous mode [ 1176.357699][ T990] hsr_slave_1: left promiscuous mode [ 1176.359516][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.407734][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.546776][ T990] hsr_slave_0: left promiscuous mode [ 1176.569062][ T990] hsr_slave_1: left promiscuous mode [ 1176.569632][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.621673][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.304561][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.304636][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.507788][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1177.659112][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1178.738455][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1178.857335][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1179.446131][T13467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.446148][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.446174][T13467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.871244][T13356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1181.038812][T13467] hsr_slave_0: entered promiscuous mode [ 1181.040164][T13467] hsr_slave_1: entered promiscuous mode [ 1181.046762][T13467] debugfs: 'hsr0' already exists in 'hsr' [ 1181.046786][T13467] Cannot create hsr debugfs directory [ 1181.060571][T13356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1181.294148][T13356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1182.650584][T13356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1183.120549][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.447856][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.474449][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.474598][T12112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.952987][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.953345][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.463463][T13356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.466763][ T5915] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1185.511940][T13356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.582032][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.582322][T12112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.609321][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.609445][T12112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.617606][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 1185.620679][ T5915] usb 4-1: config 0 has no interfaces? [ 1185.624281][ T5915] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1185.624308][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.624327][ T5915] usb 4-1: Product: syz [ 1185.624341][ T5915] usb 4-1: Manufacturer: syz [ 1185.624355][ T5915] usb 4-1: SerialNumber: syz [ 1185.683426][ T5915] usb 4-1: config 0 descriptor?? [ 1185.910518][ T5955] usb 4-1: USB disconnect, device number 22 [ 1186.144172][T13467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1186.216516][T13467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1186.255466][T13467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1186.290182][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.334325][T13467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1186.860394][T13356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.963066][T13467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.139299][T13467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.184291][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.184504][T12112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.214390][T13356] veth0_vlan: entered promiscuous mode [ 1187.234869][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.235097][T12112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.292214][T13356] veth1_vlan: entered promiscuous mode [ 1187.466484][T13292] veth0_vlan: entered promiscuous mode [ 1187.505384][T13356] veth0_macvtap: entered promiscuous mode [ 1187.529146][T13356] veth1_macvtap: entered promiscuous mode [ 1187.564123][T13680] Bluetooth: MGMT ver 1.23 [ 1187.699836][T13356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.734409][T13651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.760254][T13356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.799076][T12112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.817169][T12112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.841795][T12112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.851734][T12112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.371150][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2240'. [ 1188.408029][T12112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.408049][T12112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.468123][T13467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.900665][T13703] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1188.918911][T13703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1188.920772][T13703] Bluetooth[ 1188.920772][T13703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1188.922609][T13703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1188.923523][T13703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1188.939062][T13698] ------------[ cut here ]------------ [ 1188.939082][T13698] WARNING: CPU: 0 PID: 13698 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 1188.939129][T13698] Modules linked in: [ 1188.939171][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.3.2243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1188.939194][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1188.939212][T13698] RIP: 0010:path_noexec+0x1af/0x200 [ 1188.939233][T13698] Code: 02 31 ff 48 89 de e8 c0 bc 92 ff d1 eb eb 07 e8 57 b7 92 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 b7 92 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1188.939250][T13698] RSP: 0018:ffffc90005307bf8 EFLAGS: 00010283 [ 1188.939267][T13698] RAX: ffffffff822bb47e RBX: ffff8880554c80c0 RCX: 0000000000080000 [ 1188.939282][T13698] RDX: ffffc900123ca000 RSI: 000000000000005d RDI: 000000000000005e [ 1188.939296][T13698] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 1188.939309][T13698] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 1188.939321][T13698] R13: 1ffff92000a60f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1188.939336][T13698] FS: 00007fb1e363e6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1188.939354][T13698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1188.939368][T13698] CR2: 00007f32235d56c0 CR3: 0000000055d06000 CR4: 00000000003526f0 [ 1188.939385][T13698] Call Trace: [ 1188.939393][T13698] [ 1188.939403][T13698] do_mmap+0xa20/0x10c0 [ 1188.939440][T13698] ? __pfx_do_mmap+0x10/0x10 [ 1188.939464][T13698] ? rwbase_write_lock+0x56f/0x750 [ 1188.939501][T13698] vm_mmap_pgoff+0x2a9/0x4d0 [ 1188.939536][T13698] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1188.939568][T13698] ? __fget_files+0x2a/0x420 [ 1188.939594][T13698] ? __fget_files+0x3a6/0x420 [ 1188.939621][T13698] ? __fget_files+0x2a/0x420 [ 1188.939654][T13698] ksys_mmap_pgoff+0x4e9/0x720 [ 1188.939683][T13698] ? __x64_sys_mmap+0x7f/0x140 [ 1188.939714][T13698] do_syscall_64+0xfa/0x3b0 [ 1188.939735][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.939755][T13698] ? clear_bhb_loop+0x60/0xb0 [ 1188.939779][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.939798][T13698] RIP: 0033:0x7fb1e53deec9 [ 1188.939820][T13698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.939836][T13698] RSP: 002b:00007fb1e363e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1188.939856][T13698] RAX: ffffffffffffffda RBX: 00007fb1e5635fa0 RCX: 00007fb1e53deec9 [ 1188.939871][T13698] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1188.939885][T13698] RBP: 00007fb1e5461f91 R08: 0000000000000009 R09: 0000000000000000 [ 1188.939898][T13698] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1188.939910][T13698] R13: 00007fb1e5636038 R14: 00007fb1e5635fa0 R15: 00007ffc559d05c8 [ 1188.939942][T13698] [ 1188.939952][T13698] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1188.939965][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.3.2243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1188.939987][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1188.939998][T13698] Call Trace: [ 1188.940006][T13698] [ 1188.940013][T13698] dump_stack_lvl+0x99/0x250 [ 1188.940042][T13698] ? __asan_memcpy+0x40/0x70 [ 1188.940060][T13698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1188.940087][T13698] ? __pfx__printk+0x10/0x10 [ 1188.940121][T13698] vpanic+0x281/0x750 [ 1188.940157][T13698] ? __pfx__printk+0x10/0x10 [ 1188.940178][T13698] ? __pfx_vpanic+0x10/0x10 [ 1188.940206][T13698] ? is_bpf_text_address+0x292/0x2b0 [ 1188.940244][T13698] panic+0xb9/0xc0 [ 1188.940271][T13698] ? __pfx_panic+0x10/0x10 [ 1188.940316][T13698] __warn+0x31b/0x4b0 [ 1188.940343][T13698] ? path_noexec+0x1af/0x200 [ 1188.940366][T13698] ? path_noexec+0x1af/0x200 [ 1188.940387][T13698] report_bug+0x2be/0x4f0 [ 1188.940413][T13698] ? path_noexec+0x1af/0x200 [ 1188.940434][T13698] ? path_noexec+0x1af/0x200 [ 1188.940453][T13698] ? path_noexec+0x1b1/0x200 [ 1188.940473][T13698] handle_bug+0x84/0x160 [ 1188.940493][T13698] exc_invalid_op+0x1a/0x50 [ 1188.940512][T13698] asm_exc_invalid_op+0x1a/0x20 [ 1188.940530][T13698] RIP: 0010:path_noexec+0x1af/0x200 [ 1188.940551][T13698] Code: 02 31 ff 48 89 de e8 c0 bc 92 ff d1 eb eb 07 e8 57 b7 92 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 b7 92 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1188.940566][T13698] RSP: 0018:ffffc90005307bf8 EFLAGS: 00010283 [ 1188.940582][T13698] RAX: ffffffff822bb47e RBX: ffff8880554c80c0 RCX: 0000000000080000 [ 1188.940596][T13698] RDX: ffffc900123ca000 RSI: 000000000000005d RDI: 000000000000005e [ 1188.940609][T13698] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 1188.940621][T13698] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 1188.940634][T13698] R13: 1ffff92000a60f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1188.940656][T13698] ? path_noexec+0x1ae/0x200 [ 1188.940685][T13698] ? path_noexec+0x1ae/0x200 [ 1188.940708][T13698] do_mmap+0xa20/0x10c0 [ 1188.940743][T13698] ? __pfx_do_mmap+0x10/0x10 [ 1188.940767][T13698] ? rwbase_write_lock+0x56f/0x750 [ 1188.940802][T13698] vm_mmap_pgoff+0x2a9/0x4d0 [ 1188.940836][T13698] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1188.940868][T13698] ? __fget_files+0x2a/0x420 [ 1188.940894][T13698] ? __fget_files+0x3a6/0x420 [ 1188.940921][T13698] ? __fget_files+0x2a/0x420 [ 1188.940953][T13698] ksys_mmap_pgoff+0x4e9/0x720 [ 1188.940982][T13698] ? __x64_sys_mmap+0x7f/0x140 [ 1188.941013][T13698] do_syscall_64+0xfa/0x3b0 [ 1188.941034][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.941053][T13698] ? clear_bhb_loop+0x60/0xb0 [ 1188.941078][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.941096][T13698] RIP: 0033:0x7fb1e53deec9 [ 1188.941113][T13698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.941129][T13698] RSP: 002b:00007fb1e363e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1188.941158][T13698] RAX: ffffffffffffffda RBX: 00007fb1e5635fa0 RCX: 00007fb1e53deec9 [ 1188.941173][T13698] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1188.941187][T13698] RBP: 00007fb1e5461f91 R08: 0000000000000009 R09: 0000000000000000 [ 1188.941200][T13698] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1188.941212][T13698] R13: 00007fb1e5636038 R14: 00007fb1e5635fa0 R15: 00007ffc559d05c8 [ 1188.941245][T13698] [ 1188.941605][T13698] Kernel Offset: disabled