last executing test programs: 10m3.617749849s ago: executing program 1 (id=36): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m0.332980846s ago: executing program 1 (id=45): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rmdir(&(0x7f0000000040)='./control\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) 9m55.822820344s ago: executing program 1 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m55.288881174s ago: executing program 1 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r5, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x80003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 9m52.225123434s ago: executing program 1 (id=58): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe800000000000000000bc7c000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)=0x6) dup2(r1, r5) 9m50.10569373s ago: executing program 1 (id=60): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) getsockopt(r0, 0x6, 0x2, 0x0, &(0x7f0000002840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x400, 0x6, 0x8]}, &(0x7f0000000000)=0x44) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x181301) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x200, 0x152) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_delete(0x0) 9m32.858321025s ago: executing program 32 (id=60): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) getsockopt(r0, 0x6, 0x2, 0x0, &(0x7f0000002840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x400, 0x6, 0x8]}, &(0x7f0000000000)=0x44) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x181301) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x200, 0x152) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_delete(0x0) 9m13.788689902s ago: executing program 5 (id=107): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x6, 0x1, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x20) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) shutdown(r4, 0x1) 9m11.880068029s ago: executing program 5 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 9m10.387810874s ago: executing program 5 (id=112): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x8, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xb}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffffb8, &(0x7f00000000c0)=[{0x11}, {0x4, 0x8}, {0x5cec, 0xc616}, {0xfffe, 0x929}]}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, r9, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x1) r10 = eventfd(0x483c21cf) r11 = eventfd2(0x10000, 0x80000) r12 = eventfd2(0x4, 0xc00) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$SCSI_IOCTL_GET_PCI(r14, 0x5393, &(0x7f0000000000)) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x7, &(0x7f0000000b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xb, r2, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="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", 0xfe, 0x1, 0x0, 0x2, r8}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000540)="fbc0476ae4b87153423e749a10748ca2416e341067f48b9e0c9740146a38a3a405a1c89d92c849f5a9a503b9a528e527cfe63a7d543f485b980234940dafe4d2426dbf76431826d712a46b081a7ed1a11f253d3dfb277fcc0053c5780e43a227d8a492f8f39d8be9b7093b1715c4647ea124bdd85e73e87a3f7de0754a2b98fcfce0da11ea5358a6fd06f989ee46454c408246b17f53883880f18fcfe2518e642998ee02daa8b021849f9ca92d3cfedf0790a9281996eaaab3b24fdab686a9df065198528a8510b5", 0xc8, 0xa4, 0x0, 0x3, r10}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x8c0f, r3, &(0x7f0000000680)="0a64bda18fe528ac9c8ac80799a2a996816d6c2e309bb37726c15f516851a346a7895746d8043f478fb1bdf326ec623d8c368e1585f7f359b05a2bc019024b1a0d74d8e8fcce5bdba59d14596f269347a079d14396d57b7147cbe87d", 0x5c, 0xffffffffffffffff, 0x0, 0x0, r11}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x46b, r3, &(0x7f00000007c0)="daa087d1e23f71502b0c340e92a9d79f61ae56b6b44a8a414418749130a0865570369243bfed8652d225062ac2190f9d9830473f42433ede35ffaddb1fd1743b1890290293e5e4a04f0111c649de778c16ef39faf3d896376dc86c6d57d71d3f4ee92f630e140bff09a149e67dfc7565062dd2e5f24612b43cfa478fa600bace9d16414219c8844dce07ba0fffa2c088c9ed100abdd66bc3ae1d8309e59afd218371dc484387", 0xa6, 0xa000, 0x0, 0x3, r12}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000880)="f1482ae547a8bc09caf806d3f0adb66b0ccd596d8725a8b88093ce330cb325a2cb3ced970dc0ef61a005a99616b5ee79e5c959b0d1c09f62d17d6a22020a9c2bfaf1f1d745463ccc2c247b4cee5d6582f48ea1c8a9f423b5c7f1de653a5f37e05135c710be998f81c4736ba773fe01ff37d63993e3165eeec285b3814f37164effeb17e30f5e4f27f90229fe46ece2e77294baf272d2cd7e1e70c401957a5a7db1b567056170b312d73773c5afed8267fe2a8b3ad6bbd23f45bc298d68aa99eef9c060dde2f1fae3451b2235cb0167491db362de4a503ab16ba9a8c5c39f", 0xde, 0x4, 0x0, 0x1, r14}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000009c0)="7a803d31b1a8ef5d489092f3d1723fa55faf93a3d9f54e74bbacac98313af68d6737cc178aad1025d6a3649a8b97e9ec4138cc70e286a47e96c231a6757b30d5cc2ac0f91a5b4424cd53b9c29b239adb26102e542c76e52aa4e3534da57d4282e095eb326959eab6e44ff7881fcd5300c4a5b1d07d2750b772ec32fef9d6c9b20159bc4883f14a696113e802d2d8681a1a5c8be7bc629cccabca3ece078fccaaeea3773d3aea0dba30dd455b0d4067281360859cecbeb8", 0xb7, 0x3, 0x0, 0x2, r15}]) socket$alg(0x26, 0x5, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/253, 0xfd) ioctl$NBD_DO_IT(r0, 0xab03) 9m6.340234457s ago: executing program 5 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m59.256624361s ago: executing program 5 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) write$binfmt_misc(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000006c0)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 8m52.594503463s ago: executing program 5 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe800000000000000000bc7c000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)=0x6) r6 = dup2(r1, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5b, 0x0, 0x1, 0x401, 0x10000, @value=r6}, 0x28) 8m37.380132844s ago: executing program 33 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe800000000000000000bc7c000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000080)=0x6) r6 = dup2(r1, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5b, 0x0, 0x1, 0x401, 0x10000, @value=r6}, 0x28) 7m30.889488561s ago: executing program 3 (id=232): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x7fff, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 7m28.440588622s ago: executing program 3 (id=235): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x400, 0x6, 0x8]}, &(0x7f0000000000)=0x44) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x181301) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x200, 0x152) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_delete(0x0) 7m25.90264892s ago: executing program 3 (id=237): open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) 7m20.568164002s ago: executing program 3 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000), 0x0}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) 7m20.255290341s ago: executing program 3 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000000000ffffac1414aafe800000000000000000bc7c000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 7m18.242553188s ago: executing program 3 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 7m1.668802904s ago: executing program 34 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.865588409s ago: executing program 8 (id=1438): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_PACKETS={0x7, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x909}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c0004"], 0x3c8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 5.309301522s ago: executing program 8 (id=1440): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x48) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 4.194670183s ago: executing program 2 (id=1453): ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40010635, 0x0, 0x0) 4.115223497s ago: executing program 2 (id=1455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') symlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='./file1\x00') 3.661263108s ago: executing program 2 (id=1457): r0 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="e3", 0x1, 0xfffffffffffffffd) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xee00]) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) 3.271303161s ago: executing program 2 (id=1460): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f88a8eb2b88a8dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 3.085172s ago: executing program 7 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x0) 2.899277784s ago: executing program 6 (id=1464): r0 = syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0xb, @pix={0x38305341, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) 2.845169263s ago: executing program 0 (id=1465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 2.844904424s ago: executing program 2 (id=1466): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x1, 0x0, 0x9a, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x1ba, 0x8001, 0x2, 0x7}}, {0x4}}]}]}, 0xc8}}, 0x0) 2.701728636s ago: executing program 7 (id=1467): r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0xcba9, 0x80}) close(r0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 2.51382865s ago: executing program 0 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.364720437s ago: executing program 4 (id=1469): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r1, &(0x7f00000000c0)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 2.358419682s ago: executing program 6 (id=1470): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020}, 0x2020) 2.225680325s ago: executing program 7 (id=1471): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000440)={0x0, 0x48574653, 0x0, @discrete={0x5, 0xe84c}}) 1.973118109s ago: executing program 0 (id=1472): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000070000000008000500", @ANYRES32=r1], 0x38}}, 0x0) 1.972895873s ago: executing program 4 (id=1473): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x7562, &(0x7f0000000300)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) 1.907278566s ago: executing program 6 (id=1474): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000514010027bd7000fbdbdf250800010000000000080003"], 0x30}}, 0x0) 1.762538733s ago: executing program 7 (id=1475): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xb}}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) 1.520467166s ago: executing program 8 (id=1476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x30, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x56595559, 0xc, 0x5, 0x9b, 0x3, 0x6, 0x0, 0x4, 0x2, 0x4}}) 1.475809182s ago: executing program 2 (id=1477): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.475552246s ago: executing program 4 (id=1478): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0xc1a, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) 1.450085536s ago: executing program 6 (id=1479): socket(0x22, 0xb, 0x80000000) 1.349110972s ago: executing program 0 (id=1480): r0 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gretap0\x00'}) 1.235788083s ago: executing program 8 (id=1481): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000012020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001a00000085000000c800000095"], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x88, &(0x7f00000000c0)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.235490248s ago: executing program 4 (id=1482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 1.134497385s ago: executing program 0 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000d4efdffffffffffff04000000360000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) 1.032960568s ago: executing program 6 (id=1484): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.032611466s ago: executing program 7 (id=1485): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 956.987173ms ago: executing program 0 (id=1486): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) 881.985691ms ago: executing program 8 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fde, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) 793.028733ms ago: executing program 4 (id=1488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 572.278714ms ago: executing program 7 (id=1489): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 462.144401ms ago: executing program 4 (id=1490): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {0x85, 0x0, 0x0, 0x19}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 224.989221ms ago: executing program 8 (id=1491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) close(r0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f00000005c0), 0x0}, 0x20) 0s ago: executing program 6 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): uid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 510.968738][ T29] audit: type=1326 audit(1732206330.165:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.009920][ T29] audit: type=1326 audit(1732206330.165:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.045832][ T29] audit: type=1326 audit(1732206330.165:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.384841][ T29] audit: type=1326 audit(1732206330.165:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.476194][ T29] audit: type=1326 audit(1732206330.165:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.520804][ T29] audit: type=1326 audit(1732206330.165:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.565416][ T29] audit: type=1326 audit(1732206330.165:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.596333][ T29] audit: type=1326 audit(1732206330.165:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.630469][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.661119][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.680025][ T29] audit: type=1326 audit(1732206330.165:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 511.715979][ T5986] bond0 (unregistering): Released all slaves [ 511.933765][ T8210] veth0_macvtap: entered promiscuous mode [ 512.051290][ T8210] veth1_macvtap: entered promiscuous mode [ 512.134897][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.140651][ T8606] fuse: Bad value for 'fd' [ 512.151669][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.175425][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.186215][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.196613][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.207280][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.224384][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.338389][ T8458] hsr_slave_0: entered promiscuous mode [ 512.377741][ T8458] hsr_slave_1: entered promiscuous mode [ 512.610479][ T5986] hsr_slave_0: left promiscuous mode [ 512.616813][ T5986] hsr_slave_1: left promiscuous mode [ 512.666510][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.746789][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.873895][ T5986] veth0_vlan: left promiscuous mode [ 515.869306][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 515.969387][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 517.393440][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 517.422701][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 517.851322][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.039205][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 519.039239][ T29] audit: type=1326 audit(1732206338.215:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.081431][ T29] audit: type=1326 audit(1732206338.215:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.608679][ T29] audit: type=1326 audit(1732206338.325:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.631173][ T29] audit: type=1326 audit(1732206338.335:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.653741][ T29] audit: type=1326 audit(1732206338.335:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.762023][ T29] audit: type=1326 audit(1732206338.355:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.784750][ T29] audit: type=1326 audit(1732206338.355:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.807300][ T29] audit: type=1326 audit(1732206338.365:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.830028][ T29] audit: type=1326 audit(1732206338.365:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 519.852742][ T29] audit: type=1326 audit(1732206338.365:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 520.535069][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 520.601099][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 520.844038][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 520.947634][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 520.956073][ T5866] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 520.963967][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 523.110715][ T5866] Bluetooth: hci6: command tx timeout [ 525.940002][ T5866] Bluetooth: hci6: command tx timeout [ 527.874288][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.887108][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.901751][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.921060][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.930939][ T5866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 527.939636][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.996549][ T5866] Bluetooth: hci6: command tx timeout [ 528.157568][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 529.082921][ T8710] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 529.082921][ T8710] program syz.0.572 not setting count and/or reply_len properly [ 529.125330][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 529.125357][ T29] audit: type=1326 audit(1732206347.505:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.156261][ T29] audit: type=1326 audit(1732206347.505:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.301854][ T29] audit: type=1326 audit(1732206347.505:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.324271][ T29] audit: type=1326 audit(1732206347.515:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.346615][ T29] audit: type=1326 audit(1732206347.515:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.374745][ T29] audit: type=1326 audit(1732206347.535:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.398584][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 529.573495][ T29] audit: type=1326 audit(1732206347.535:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.700306][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 529.719880][ T29] audit: type=1326 audit(1732206347.535:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.785768][ T29] audit: type=1326 audit(1732206347.535:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 529.809398][ T29] audit: type=1326 audit(1732206347.535:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 530.070215][ T5866] Bluetooth: hci6: command tx timeout [ 530.109106][ T8458] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 530.150546][ T5866] Bluetooth: hci0: command tx timeout [ 530.242050][ T8458] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 530.277257][ T8458] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 530.689723][ T8458] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 531.429164][ T5986] bridge_slave_1: left allmulticast mode [ 531.435344][ T5986] bridge_slave_1: left promiscuous mode [ 531.460483][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.590876][ T5986] bridge_slave_0: left allmulticast mode [ 531.627383][ T5986] bridge_slave_0: left promiscuous mode [ 531.656743][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.629474][ T5866] Bluetooth: hci0: command tx timeout [ 534.015135][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.396026][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.421546][ T5986] bond0 (unregistering): Released all slaves [ 534.457496][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.476478][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.494297][ T8648] bridge_slave_0: entered allmulticast mode [ 534.507308][ T8648] bridge_slave_0: entered promiscuous mode [ 534.694417][ T8748] netlink: 'syz.4.579': attribute type 4 has an invalid length. [ 534.710611][ T5866] Bluetooth: hci0: command tx timeout [ 534.903562][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.950511][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.958108][ T8648] bridge_slave_1: entered allmulticast mode [ 535.101009][ T8648] bridge_slave_1: entered promiscuous mode [ 535.192682][ T5986] hsr_slave_0: left promiscuous mode [ 535.210220][ T5986] hsr_slave_1: left promiscuous mode [ 535.247080][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.308471][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.379658][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.048477][ T5986] veth1_macvtap: left promiscuous mode [ 536.054193][ T5986] veth0_macvtap: left promiscuous mode [ 536.059902][ T5986] veth1_vlan: left promiscuous mode [ 536.065262][ T5986] veth0_vlan: left promiscuous mode [ 536.790555][ T5866] Bluetooth: hci0: command tx timeout [ 537.989965][ T8775] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 539.653729][ T8796] loop2: detected capacity change from 0 to 256 [ 539.682248][ T8796] exfat: Deprecated parameter 'namecase' [ 539.694301][ T8796] exfat: Unknown parameter 'uma­¨' [ 542.822787][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 542.907314][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 543.137310][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 543.137366][ T29] audit: type=1326 audit(1732206362.325:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.423463][ T29] audit: type=1326 audit(1732206362.325:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.772527][ T29] audit: type=1326 audit(1732206362.335:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.794955][ T29] audit: type=1326 audit(1732206362.335:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.817411][ T29] audit: type=1326 audit(1732206362.335:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.840035][ T29] audit: type=1326 audit(1732206362.345:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.862300][ T29] audit: type=1326 audit(1732206362.345:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.884744][ T29] audit: type=1326 audit(1732206362.345:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.907086][ T29] audit: type=1326 audit(1732206362.355:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 543.929620][ T29] audit: type=1326 audit(1732206362.355:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 544.273511][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 544.284737][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 544.308686][ T8806] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 544.699146][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.773198][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.919644][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.951358][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.574921][ T8648] team0: Port device team_slave_0 added [ 546.593694][ T8648] team0: Port device team_slave_1 added [ 547.194542][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.201769][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.872767][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.879979][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.040584][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.318188][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.590019][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.668085][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.695567][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.832580][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.941119][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 549.168314][ T8698] chnl_net:caif_netlink_parms(): no params data found [ 549.537385][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 549.537443][ T29] audit: type=1326 audit(1732206368.755:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 550.107793][ T29] audit: type=1326 audit(1732206368.755:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 550.581705][ T29] audit: type=1326 audit(1732206368.755:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.151357][ T29] audit: type=1326 audit(1732206368.755:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.259998][ T29] audit: type=1326 audit(1732206368.755:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.384217][ T29] audit: type=1326 audit(1732206368.755:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.459985][ T29] audit: type=1326 audit(1732206368.755:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.491724][ T29] audit: type=1326 audit(1732206368.755:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.514226][ T29] audit: type=1326 audit(1732206368.755:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.536769][ T29] audit: type=1326 audit(1732206368.755:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 551.590932][ T8648] hsr_slave_0: entered promiscuous mode [ 551.617992][ T8648] hsr_slave_1: entered promiscuous mode [ 552.605299][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.980171][ T8648] Cannot create hsr debugfs directory [ 553.597441][ T8458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 553.608205][ T8458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.970992][ T8894] block nbd0: Device being setup by another task [ 554.230459][ T8899] block nbd0: Device being setup by another task [ 554.547080][ T5866] block nbd0: Receive control failed (result -32) [ 554.713151][ T8894] block nbd0: shutting down sockets [ 555.769983][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 555.770012][ T29] audit: type=1326 audit(1732206374.375:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 556.020373][ T29] audit: type=1326 audit(1732206374.375:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 556.667748][ T29] audit: type=1326 audit(1732206374.385:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 556.938535][ T29] audit: type=1326 audit(1732206374.385:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 557.021283][ T29] audit: type=1326 audit(1732206374.385:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 557.067128][ T29] audit: type=1326 audit(1732206374.395:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 557.255747][ T29] audit: type=1326 audit(1732206374.395:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 557.334503][ T29] audit: type=1326 audit(1732206374.395:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 557.358233][ T29] audit: type=1326 audit(1732206374.395:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 557.427603][ T29] audit: type=1326 audit(1732206374.395:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 558.850873][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.172586][ T8933] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 559.410537][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.426202][ T8698] bridge_slave_0: entered allmulticast mode [ 559.838256][ T8698] bridge_slave_0: entered promiscuous mode [ 560.237390][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.247418][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.256138][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.444805][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.452737][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 560.460279][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 561.535023][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 561.535057][ T29] audit: type=1326 audit(1732206380.735:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 561.563434][ T29] audit: type=1326 audit(1732206380.735:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 561.650035][ T29] audit: type=1326 audit(1732206380.865:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5376980737 code=0x7ffc0000 [ 562.121234][ T29] audit: type=1326 audit(1732206380.865:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53769806ac code=0x7ffc0000 [ 562.144424][ T29] audit: type=1326 audit(1732206380.865:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53769805e4 code=0x7ffc0000 [ 562.410232][ T29] audit: type=1326 audit(1732206380.865:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53769805e4 code=0x7ffc0000 [ 562.616710][ T5851] Bluetooth: hci3: command tx timeout [ 562.851317][ T29] audit: type=1326 audit(1732206380.865:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f537697d4aa code=0x7ffc0000 [ 563.005771][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.013701][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.021138][ T8698] bridge_slave_1: entered allmulticast mode [ 563.028597][ T8698] bridge_slave_1: entered promiscuous mode [ 563.045416][ T29] audit: type=1326 audit(1732206380.865:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 563.238359][ T29] audit: type=1326 audit(1732206380.865:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 563.758127][ T8967] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 564.312719][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.799849][ T5851] Bluetooth: hci3: command tx timeout [ 566.282478][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.873860][ T5851] Bluetooth: hci3: command tx timeout [ 567.245018][ T8698] team0: Port device team_slave_0 added [ 567.263767][ T8698] team0: Port device team_slave_1 added [ 567.598515][ T9006] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 567.598515][ T9006] program syz.4.619 not setting count and/or reply_len properly [ 567.686056][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.692767][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.983065][ T5851] Bluetooth: hci3: command tx timeout [ 569.941610][ T5986] bridge_slave_1: left allmulticast mode [ 569.947516][ T5986] bridge_slave_1: left promiscuous mode [ 569.955171][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.086631][ T5986] bridge_slave_0: left allmulticast mode [ 570.102982][ T5986] bridge_slave_0: left promiscuous mode [ 570.161780][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.707387][ T8999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.208332][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.244685][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.281808][ T5986] bond0 (unregistering): Released all slaves [ 572.992173][ T29] audit: type=1326 audit(1732206391.695:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 573.053122][ T29] audit: type=1326 audit(1732206391.695:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 573.170495][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.177675][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.214395][ T29] audit: type=1326 audit(1732206391.695:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5376980737 code=0x7ffc0000 [ 573.283901][ T8698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.334160][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.341292][ T29] audit: type=1326 audit(1732206391.695:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53769806ac code=0x7ffc0000 [ 573.383039][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.434671][ T29] audit: type=1326 audit(1732206391.695:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53769805e4 code=0x7ffc0000 [ 573.480787][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.658158][ T29] audit: type=1326 audit(1732206391.695:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53769805e4 code=0x7ffc0000 [ 574.510051][ T29] audit: type=1326 audit(1732206391.695:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f537697d4aa code=0x7ffc0000 [ 574.692965][ T29] audit: type=1326 audit(1732206391.705:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 574.715706][ T29] audit: type=1326 audit(1732206391.705:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 575.568640][ T29] audit: type=1326 audit(1732206393.865:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 575.792847][ T5986] hsr_slave_0: left promiscuous mode [ 575.839088][ T5986] hsr_slave_1: left promiscuous mode [ 575.890124][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.921946][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.426464][ T9063] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 577.426464][ T9063] program syz.0.628 not setting count and/or reply_len properly [ 577.634064][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 577.765872][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 579.048827][ T9074] loop4: detected capacity change from 0 to 256 [ 579.056189][ T9074] exfat: Deprecated parameter 'namecase' [ 579.091893][ T9074] exfat: Unknown parameter 'uma­¨' [ 579.249969][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 579.269086][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 579.277365][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 579.286073][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 579.294612][ T5866] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 579.302224][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 579.848401][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.633'. [ 580.123637][ T8698] hsr_slave_0: entered promiscuous mode [ 580.212465][ T8698] hsr_slave_1: entered promiscuous mode [ 580.238769][ T8698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.263515][ T8698] Cannot create hsr debugfs directory [ 580.285758][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 580.296553][ T9086] netlink: 'syz.4.631': attribute type 4 has an invalid length. [ 581.211841][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 581.350250][ T5851] Bluetooth: hci4: command tx timeout [ 581.871168][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 581.871230][ T29] audit: type=1326 audit(1732206400.945:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 582.572640][ T29] audit: type=1326 audit(1732206400.945:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 582.600077][ T29] audit: type=1326 audit(1732206400.945:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1df380737 code=0x7ffc0000 [ 582.640172][ T29] audit: type=1326 audit(1732206400.955:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa1df3806ac code=0x7ffc0000 [ 582.663804][ T29] audit: type=1326 audit(1732206400.955:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa1df3805e4 code=0x7ffc0000 [ 582.687928][ T29] audit: type=1326 audit(1732206400.955:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa1df3805e4 code=0x7ffc0000 [ 582.710749][ T29] audit: type=1326 audit(1732206400.955:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1df37d4aa code=0x7ffc0000 [ 582.733655][ T29] audit: type=1326 audit(1732206400.965:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 582.756576][ T29] audit: type=1326 audit(1732206400.965:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1df37e819 code=0x7ffc0000 [ 584.060082][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.087685][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.110337][ T8935] bridge_slave_0: entered allmulticast mode [ 584.129905][ T5851] Bluetooth: hci4: command tx timeout [ 584.192194][ T8935] bridge_slave_0: entered promiscuous mode [ 584.877098][ T9130] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 584.877098][ T9130] program syz.0.637 not setting count and/or reply_len properly [ 585.573827][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.605836][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.636273][ T8935] bridge_slave_1: entered allmulticast mode [ 585.670374][ T8935] bridge_slave_1: entered promiscuous mode [ 586.153167][ T5866] Bluetooth: hci4: command tx timeout [ 587.879860][ T9152] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 587.879860][ T9152] program syz.4.640 not setting count and/or reply_len properly [ 588.653376][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 588.668681][ T5866] Bluetooth: hci4: command tx timeout [ 588.743901][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.756784][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.421607][ T29] audit: type=1326 audit(1732206409.935:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.477527][ T29] audit: type=1326 audit(1732206409.935:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.520569][ T29] audit: type=1326 audit(1732206409.935:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.572469][ T29] audit: type=1326 audit(1732206409.945:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.595364][ T29] audit: type=1326 audit(1732206409.945:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.618327][ T29] audit: type=1326 audit(1732206409.955:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.621750][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 591.641547][ T29] audit: type=1326 audit(1732206409.955:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.641861][ T29] audit: type=1326 audit(1732206409.955:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.642107][ T29] audit: type=1326 audit(1732206409.955:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.642403][ T29] audit: type=1326 audit(1732206409.965:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537697e819 code=0x7ffc0000 [ 591.835170][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 591.849899][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 591.874225][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 591.887105][ T5851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 591.900783][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 592.132668][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.218934][ T8935] team0: Port device team_slave_0 added [ 592.420037][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 592.487861][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 593.502478][ T8935] team0: Port device team_slave_1 added [ 593.812131][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.819322][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.893218][ T9075] bridge_slave_0: entered allmulticast mode [ 593.936403][ T9075] bridge_slave_0: entered promiscuous mode [ 594.209915][ T5851] Bluetooth: hci6: command tx timeout [ 594.248725][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.022830][ T9196] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 595.022830][ T9196] program syz.2.648 not setting count and/or reply_len properly [ 595.231734][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.239740][ T9075] bridge_slave_1: entered allmulticast mode [ 595.250401][ T9075] bridge_slave_1: entered promiscuous mode [ 596.247570][ T5851] Bluetooth: hci6: command tx timeout [ 596.414546][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.429905][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.504395][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.654488][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.672540][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.750135][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.154039][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.183695][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.340190][ T5851] Bluetooth: hci6: command tx timeout [ 598.743186][ T8935] hsr_slave_0: entered promiscuous mode [ 598.767429][ T8935] hsr_slave_1: entered promiscuous mode [ 598.896512][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 598.896567][ T29] audit: type=1326 audit(1732206418.085:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.080181][ T8935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.104888][ T8935] Cannot create hsr debugfs directory [ 599.533913][ T9075] team0: Port device team_slave_0 added [ 599.559927][ T29] audit: type=1326 audit(1732206418.085:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.607213][ T9075] team0: Port device team_slave_1 added [ 599.666638][ T29] audit: type=1326 audit(1732206418.095:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.769936][ T29] audit: type=1326 audit(1732206418.095:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.839896][ T29] audit: type=1326 audit(1732206418.095:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.887155][ T29] audit: type=1326 audit(1732206418.105:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.923695][ T29] audit: type=1326 audit(1732206418.105:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 599.955833][ T5986] bridge_slave_1: left allmulticast mode [ 599.965046][ T5986] bridge_slave_1: left promiscuous mode [ 599.971153][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.988934][ T29] audit: type=1326 audit(1732206418.105:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 600.020233][ T29] audit: type=1326 audit(1732206418.115:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 600.061175][ T5986] bridge_slave_0: left allmulticast mode [ 600.070081][ T5986] bridge_slave_0: left promiscuous mode [ 600.111093][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.114466][ T29] audit: type=1326 audit(1732206418.115:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.4.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 600.206008][ T5986] bridge_slave_1: left allmulticast mode [ 600.238318][ T5986] bridge_slave_1: left promiscuous mode [ 600.301554][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.390187][ T5851] Bluetooth: hci6: command tx timeout [ 600.405260][ T5986] bridge_slave_0: left allmulticast mode [ 600.449884][ T5986] bridge_slave_0: left promiscuous mode [ 600.470208][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.942365][ T9228] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 600.942365][ T9228] program syz.2.655 not setting count and/or reply_len properly [ 602.119097][ T9217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.907288][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.921039][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.933786][ T5986] bond0 (unregistering): Released all slaves [ 603.000113][ T9229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.047539][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.060764][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.076474][ T5986] bond0 (unregistering): Released all slaves [ 603.420509][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.460037][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.523425][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.554242][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.569767][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.758376][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.780624][ T5986] hsr_slave_0: left promiscuous mode [ 603.790844][ T5986] hsr_slave_1: left promiscuous mode [ 603.807403][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.860500][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.892935][ T5986] hsr_slave_0: left promiscuous mode [ 604.905816][ T5986] hsr_slave_1: left promiscuous mode [ 604.920478][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.930622][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.530478][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 605.585165][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 606.362093][ T9241] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 606.362093][ T9241] program syz.2.667 not setting count and/or reply_len properly [ 606.416743][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 606.498611][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 607.094609][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 607.345093][ T9075] hsr_slave_0: entered promiscuous mode [ 607.458416][ T9075] hsr_slave_1: entered promiscuous mode [ 607.630024][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 607.644838][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 608.430102][ T9263] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 608.430102][ T9263] program syz.2.662 not setting count and/or reply_len properly [ 610.498960][ T9276] loop4: detected capacity change from 0 to 512 [ 612.105743][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.126425][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.143223][ T9165] bridge_slave_0: entered allmulticast mode [ 612.158032][ T9165] bridge_slave_0: entered promiscuous mode [ 612.171970][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.179186][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.484843][ T9165] bridge_slave_1: entered allmulticast mode [ 612.501488][ T9165] bridge_slave_1: entered promiscuous mode [ 612.541173][ T9276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.554142][ T9276] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.853261][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.924825][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.936417][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.090655][ T9165] team0: Port device team_slave_0 added [ 614.117796][ T9075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 614.159372][ T9075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 614.193681][ T9293] netlink: 'syz.0.668': attribute type 4 has an invalid length. [ 614.203102][ T9075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 614.257343][ T9075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 614.315532][ T9165] team0: Port device team_slave_1 added [ 614.505817][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.520092][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.604437][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.698371][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.717094][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.932052][ T9303] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 614.932052][ T9303] program syz.4.670 not setting count and/or reply_len properly [ 615.620510][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.812980][ T5986] bridge_slave_1: left allmulticast mode [ 615.818727][ T5986] bridge_slave_1: left promiscuous mode [ 615.883092][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.058231][ T5986] bridge_slave_0: left allmulticast mode [ 616.064887][ T5986] bridge_slave_0: left promiscuous mode [ 616.071218][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.343734][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.570290][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 616.624023][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.694226][ T5986] bond0 (unregistering): Released all slaves [ 617.751454][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.762341][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.773526][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.878798][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.962312][ T5866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 617.970382][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.117594][ T9165] hsr_slave_0: entered promiscuous mode [ 618.146483][ T9165] hsr_slave_1: entered promiscuous mode [ 618.363230][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.441195][ T9165] Cannot create hsr debugfs directory [ 619.017746][ T5986] hsr_slave_0: left promiscuous mode [ 619.024348][ T5986] hsr_slave_1: left promiscuous mode [ 619.031126][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.039083][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.355029][ T5866] Bluetooth: hci0: command tx timeout [ 620.365033][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 620.365059][ T29] audit: type=1326 audit(1732206439.145:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 620.393961][ T29] audit: type=1326 audit(1732206439.155:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 620.873791][ T29] audit: type=1326 audit(1732206439.175:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12f2380737 code=0x7ffc0000 [ 620.959205][ T29] audit: type=1326 audit(1732206439.185:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f12f23806ac code=0x7ffc0000 [ 621.026259][ T29] audit: type=1326 audit(1732206439.195:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f12f23805e4 code=0x7ffc0000 [ 621.058070][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 621.101624][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 621.116058][ T29] audit: type=1326 audit(1732206439.195:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f12f23805e4 code=0x7ffc0000 [ 621.159989][ T29] audit: type=1326 audit(1732206439.205:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12f237d4aa code=0x7ffc0000 [ 621.195325][ T29] audit: type=1326 audit(1732206439.215:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 621.232218][ T29] audit: type=1326 audit(1732206439.215:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 622.546102][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.556997][ T5866] Bluetooth: hci0: command tx timeout [ 623.234797][ T9351] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 623.234797][ T9351] program syz.4.680 not setting count and/or reply_len properly [ 623.937235][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.398891][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.406141][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.456910][ T9360] loop2: detected capacity change from 0 to 256 [ 624.471858][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.479118][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.550697][ T9360] exfat: Deprecated parameter 'namecase' [ 624.556591][ T9360] exfat: Unknown parameter 'uma­¨' [ 625.397525][ T5866] Bluetooth: hci0: command tx timeout [ 625.537136][ T29] audit: type=1326 audit(1732206443.925:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 625.541053][ T9365] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 625.541053][ T9365] program syz.0.684 not setting count and/or reply_len properly [ 625.575922][ T9318] chnl_net:caif_netlink_parms(): no params data found [ 626.080215][ T29] audit: type=1326 audit(1732206443.925:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 626.126582][ T29] audit: type=1326 audit(1732206443.935:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12f2380737 code=0x7ffc0000 [ 626.149002][ T29] audit: type=1326 audit(1732206443.955:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f12f23806ac code=0x7ffc0000 [ 626.171314][ T29] audit: type=1326 audit(1732206443.955:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f12f23805e4 code=0x7ffc0000 [ 626.193567][ T29] audit: type=1326 audit(1732206443.955:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f12f23805e4 code=0x7ffc0000 [ 626.215853][ T29] audit: type=1326 audit(1732206443.965:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12f237d4aa code=0x7ffc0000 [ 626.238118][ T29] audit: type=1326 audit(1732206443.965:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 626.260556][ T29] audit: type=1326 audit(1732206443.965:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x7ffc0000 [ 627.616188][ T5866] Bluetooth: hci0: command tx timeout [ 627.876785][ T9378] loop4: detected capacity change from 0 to 512 [ 628.008844][ T9373] netlink: 'syz.2.686': attribute type 4 has an invalid length. [ 628.786518][ T9378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.800000][ T9378] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.970451][ T9165] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 629.085536][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.106721][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.113874][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.140504][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.187786][ T9318] bridge_slave_0: entered allmulticast mode [ 629.207207][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.228529][ T9318] bridge_slave_0: entered promiscuous mode [ 629.425298][ T9392] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 629.425298][ T9392] program syz.0.690 not setting count and/or reply_len properly [ 630.163283][ T9165] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 630.266812][ T9165] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 630.287621][ T9165] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 630.441131][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.092848][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.119592][ T9318] bridge_slave_1: entered allmulticast mode [ 631.411273][ T9318] bridge_slave_1: entered promiscuous mode [ 631.925628][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.997125][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.321243][ T9318] team0: Port device team_slave_0 added [ 632.340020][ T9318] team0: Port device team_slave_1 added [ 633.932143][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.939888][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.967317][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.983917][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.009878][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.049945][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.068100][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.144866][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.879546][ T9318] hsr_slave_0: entered promiscuous mode [ 635.895182][ T9318] hsr_slave_1: entered promiscuous mode [ 635.903870][ T9318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.912443][ T9318] Cannot create hsr debugfs directory [ 635.967684][ T5986] bridge_slave_1: left allmulticast mode [ 635.973682][ T5986] bridge_slave_1: left promiscuous mode [ 635.979439][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.988505][ T5986] bridge_slave_0: left allmulticast mode [ 635.994395][ T5986] bridge_slave_0: left promiscuous mode [ 636.000428][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.258451][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.273540][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.293965][ T5986] bond0 (unregistering): Released all slaves [ 636.319185][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.522783][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.530025][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.605762][ T5986] hsr_slave_0: left promiscuous mode [ 636.617573][ T5986] hsr_slave_1: left promiscuous mode [ 636.630557][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.638509][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.858627][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 636.895365][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 637.091955][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.099407][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.511458][ T9318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 639.526514][ T9318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 639.659893][ T9318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 639.684797][ T9318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 639.720216][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.222903][ T9493] pim6reg1: entered promiscuous mode [ 640.228334][ T9493] pim6reg1: entered allmulticast mode [ 640.343735][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.361022][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.372004][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.382119][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.406745][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 640.414155][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.828000][ T35] bridge_slave_1: left allmulticast mode [ 640.863092][ T35] bridge_slave_1: left promiscuous mode [ 640.895642][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.050725][ T35] bridge_slave_0: left allmulticast mode [ 641.056478][ T35] bridge_slave_0: left promiscuous mode [ 641.066150][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.696729][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.724917][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.741361][ T35] bond0 (unregistering): Released all slaves [ 641.903583][ T35] hsr_slave_0: left promiscuous mode [ 641.911396][ T35] hsr_slave_1: left promiscuous mode [ 641.929257][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.938570][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.330802][ T35] team0 (unregistering): Port device team_slave_1 removed [ 642.379639][ T35] team0 (unregistering): Port device team_slave_0 removed [ 642.483742][ T5866] Bluetooth: hci3: command tx timeout [ 642.789133][ T9542] pim6reg1: entered promiscuous mode [ 642.797201][ T9542] pim6reg1: entered allmulticast mode [ 642.956838][ T9318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.004569][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.221249][ T9165] veth0_vlan: entered promiscuous mode [ 643.267147][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.274367][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.353183][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.360465][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.492643][ T9165] veth1_vlan: entered promiscuous mode [ 643.553859][ T9499] chnl_net:caif_netlink_parms(): no params data found [ 643.882466][ T9318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.961988][ T9165] veth0_macvtap: entered promiscuous mode [ 644.359512][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.471209][ T9165] veth1_macvtap: entered promiscuous mode [ 644.533903][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.561810][ T5866] Bluetooth: hci3: command tx timeout [ 644.596975][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.633606][ T9499] bridge_slave_0: entered allmulticast mode [ 644.682714][ T9499] bridge_slave_0: entered promiscuous mode [ 644.711670][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.718828][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.765612][ T9499] bridge_slave_1: entered allmulticast mode [ 644.800451][ T9499] bridge_slave_1: entered promiscuous mode [ 645.132248][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.152177][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.163034][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.180019][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.210601][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.237954][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.278980][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.494182][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.551524][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.576412][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.597980][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.608860][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.637830][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.657238][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.668445][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.701605][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.731207][ T9165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.770192][ T9165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.791493][ T9165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.811419][ T9165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.004822][ T9499] team0: Port device team_slave_0 added [ 646.049141][ T9617] 8ûÅ: renamed from syzkaller0 [ 646.162148][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.174838][ T9499] team0: Port device team_slave_1 added [ 646.630141][ T5866] Bluetooth: hci3: command tx timeout [ 646.867376][ T9641] syz.2.755[9641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.867516][ T9641] syz.2.755[9641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.879521][ T9641] syz.2.755[9641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.710398][ T5866] Bluetooth: hci3: command tx timeout [ 649.659447][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.677053][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.704319][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.717553][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.725578][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.755282][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.815665][ T9650] pim6reg1: entered promiscuous mode [ 649.824951][ T9650] pim6reg1: entered allmulticast mode [ 650.401252][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 650.417555][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 650.425593][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 650.465530][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 650.477976][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 650.485824][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.501962][ T9499] hsr_slave_0: entered promiscuous mode [ 650.522629][ T9499] hsr_slave_1: entered promiscuous mode [ 651.208289][ T9694] process 'syz.0.771' launched './file1' with NULL argv: empty string added [ 652.550408][ T5851] Bluetooth: hci4: command tx timeout [ 654.325185][ T9318] veth0_vlan: entered promiscuous mode [ 654.530760][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.630513][ T5851] Bluetooth: hci4: command tx timeout [ 654.848634][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.034817][ T9318] veth1_vlan: entered promiscuous mode [ 655.190497][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.331678][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 655.432725][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.615042][ T9318] veth0_macvtap: entered promiscuous mode [ 655.686229][ T9318] veth1_macvtap: entered promiscuous mode [ 655.855682][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.889977][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.933128][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.967004][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.001649][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.064320][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.092750][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.118881][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.153083][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.204610][ T12] bridge_slave_1: left allmulticast mode [ 656.211663][ T12] bridge_slave_1: left promiscuous mode [ 656.227338][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.286496][ T12] bridge_slave_0: left allmulticast mode [ 656.293094][ T12] bridge_slave_0: left promiscuous mode [ 656.301450][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.710989][ T5851] Bluetooth: hci4: command tx timeout [ 657.478164][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.498662][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.522669][ T12] bond0 (unregistering): Released all slaves [ 657.572239][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.602701][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.613703][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.624770][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.635200][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.646902][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.659113][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.676391][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.701597][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.862334][ T12] hsr_slave_0: left promiscuous mode [ 657.986088][ T12] hsr_slave_1: left promiscuous mode [ 658.013513][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.046541][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.125065][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.134569][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.165765][ T12] veth1_macvtap: left promiscuous mode [ 658.171555][ T12] veth0_macvtap: left promiscuous mode [ 658.177276][ T12] veth1_vlan: left promiscuous mode [ 658.189967][ T12] veth0_vlan: left promiscuous mode [ 658.790222][ T5851] Bluetooth: hci4: command tx timeout [ 660.043164][ T12] team0 (unregistering): Port device team_slave_1 removed [ 660.143899][ T12] team0 (unregistering): Port device team_slave_0 removed [ 660.741386][ T9318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.752994][ T9318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.762483][ T9318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.771532][ T9318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.851709][ T9499] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 661.086130][ T9499] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 661.106381][ T9499] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 661.144718][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.160345][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.168051][ T9673] bridge_slave_0: entered allmulticast mode [ 661.187344][ T9673] bridge_slave_0: entered promiscuous mode [ 661.244586][ T9499] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 661.297976][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.318589][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.363536][ T9673] bridge_slave_1: entered allmulticast mode [ 661.382971][ T9673] bridge_slave_1: entered promiscuous mode [ 661.783966][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.804181][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.120341][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.128221][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.194278][ T9673] team0: Port device team_slave_0 added [ 662.249166][ T9673] team0: Port device team_slave_1 added [ 662.381426][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.402439][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.490466][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.497475][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.577245][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.667668][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.686713][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.718426][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.237565][ T9673] hsr_slave_0: entered promiscuous mode [ 663.302415][ T9673] hsr_slave_1: entered promiscuous mode [ 663.496090][ T9673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.552150][ T9673] Cannot create hsr debugfs directory [ 663.648631][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.952754][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.881661][ T9499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.935245][ T9992] raw_sendmsg: syz.2.870 forgot to set AF_INET. Fix it! [ 664.948695][ T9499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.015683][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.022912][ T8437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.071655][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.078843][ T8437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.058384][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'. [ 666.146228][T10033] 9pnet_virtio: no channels available for device syz [ 666.284584][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.417407][T10042] binder: 10041:10042 ioctl 4018620d 0 returned -22 [ 666.872057][ T9673] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 666.935904][ T9673] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 667.011523][ T9673] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 667.069074][ T9673] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.358575][ T9499] veth0_vlan: entered promiscuous mode [ 667.408800][ T9499] veth1_vlan: entered promiscuous mode [ 667.629655][ T9499] veth0_macvtap: entered promiscuous mode [ 667.704285][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.736867][ T9499] veth1_macvtap: entered promiscuous mode [ 667.900695][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.953191][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.001166][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.027502][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.067899][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.101743][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.126207][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.143443][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.182202][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.212920][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.283965][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.291206][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.321994][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.329151][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.390135][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.429883][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.459055][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.496651][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.527371][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.569915][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.601438][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.656395][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.689730][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.752196][T10083] syz.0.896 (10083) used greatest stack depth: 20560 bytes left [ 668.798445][ T9499] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.851501][ T9499] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.885483][ T9499] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.919911][ T9499] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.929201][T10119] JFS: charset not found [ 669.146366][ T5851] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 669.483603][T10135] 9pnet_virtio: no channels available for device syz [ 671.162504][T10140] warning: `syz.8.910' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 671.406615][T10168] loop6: detected capacity change from 0 to 524287999 [ 671.534985][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.551387][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.580966][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 671.593432][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.603646][ C1] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 671.612548][ C1] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.622441][ C1] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 671.631401][ C1] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.641500][ C1] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 671.650126][ C1] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.660038][ C1] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 671.668639][ C1] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.678557][ C1] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 671.687197][ C1] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.697496][ C1] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 671.706136][ C1] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.716034][ C1] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 671.724924][ C1] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 671.734915][ C1] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 671.973678][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.984389][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.106377][T10190] 9pnet_virtio: no channels available for device syz [ 672.216939][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.555107][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 673.597426][ T9673] veth0_vlan: entered promiscuous mode [ 673.636541][T10235] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 673.739527][T10235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.801753][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 673.816839][T10235] bond1: entered allmulticast mode [ 673.856228][ T9673] veth1_vlan: entered promiscuous mode [ 673.872324][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.935'. [ 674.085061][ T9673] veth0_macvtap: entered promiscuous mode [ 674.158972][ T9673] veth1_macvtap: entered promiscuous mode [ 674.352055][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.364537][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.374805][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.380212][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 674.385470][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.395523][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 674.405684][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.415625][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 674.426117][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.436085][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.446079][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.470202][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.479949][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 674.482014][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.489509][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.500473][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.519983][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.531116][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.543479][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.553584][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.564492][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.574976][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.585924][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.596184][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.608701][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.618831][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.631220][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.642920][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.692561][ T9673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.705241][ T9673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.714194][ T9673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.722988][ T9673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.812589][ T5914] usb 3-1: GET_CAPABILITIES returned 0 [ 674.818735][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 675.075524][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.146802][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.156060][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.165170][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.180615][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.189826][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.198959][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.208860][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.218070][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.263547][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.272701][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.281894][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.291002][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.300097][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.475282][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 675.484522][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 675.531429][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.539308][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.596147][ T8668] usb 3-1: USB disconnect, device number 2 [ 675.706942][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.725264][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.446609][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 676.473525][T10307] binder: 10304:10307 ioctl c0306201 20000140 returned -14 [ 677.007138][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.6.957'. [ 677.091492][T10326] syz.4.959 uses obsolete (PF_INET,SOCK_PACKET) [ 677.232730][T10334] REISERFS warning (device nullb0): super-6505 reiserfs_getopt: head of option "usrquota" is only correct [ 677.232730][T10334] [ 678.323198][ T5851] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 678.334425][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/u9:2 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 678.345083][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 678.355182][ T5851] Workqueue: hci2 hci_rx_work [ 678.359962][ T5851] Call Trace: [ 678.363293][ T5851] [ 678.366278][ T5851] dump_stack_lvl+0x16c/0x1f0 [ 678.371051][ T5851] sysfs_warn_dup+0x7f/0xa0 [ 678.375638][ T5851] sysfs_create_dir_ns+0x24d/0x2b0 [ 678.380842][ T5851] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 678.386649][ T5851] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 678.392101][ T5851] ? kobject_add_internal+0x12d/0x990 [ 678.397539][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.403262][ T5851] ? do_raw_spin_unlock+0x172/0x230 [ 678.408654][ T5851] kobject_add_internal+0x2c8/0x990 [ 678.413936][ T5851] kobject_add+0x16f/0x240 [ 678.418423][ T5851] ? __pfx_kobject_add+0x10/0x10 [ 678.423418][ T5851] ? class_to_subsys+0x3e/0x160 [ 678.428367][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.434098][ T5851] ? do_raw_spin_unlock+0x172/0x230 [ 678.439399][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.445139][ T5851] ? kobject_put+0xab/0x5a0 [ 678.449749][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.455486][ T5851] device_add+0x289/0x1a70 [ 678.459998][ T5851] ? __pfx_dev_set_name+0x10/0x10 [ 678.465089][ T5851] ? __pfx_device_add+0x10/0x10 [ 678.470026][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.475742][ T5851] ? mgmt_send_event_skb+0x2f2/0x460 [ 678.481107][ T5851] hci_conn_add_sysfs+0x17e/0x230 [ 678.486207][ T5851] le_conn_complete_evt+0x1078/0x1d80 [ 678.491666][ T5851] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 678.497452][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.503171][ T5851] ? __mutex_lock+0x1cc/0xa60 [ 678.507932][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.513655][ T5851] hci_le_conn_complete_evt+0x23c/0x370 [ 678.519274][ T5851] hci_le_meta_evt+0x2e5/0x5d0 [ 678.524106][ T5851] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 678.530258][ T5851] hci_event_packet+0x669/0x1180 [ 678.535358][ T5851] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 678.540710][ T5851] ? __pfx_hci_event_packet+0x10/0x10 [ 678.546178][ T5851] ? __entry_text_end+0x1020c5/0x1020c9 [ 678.551808][ T5851] ? mark_held_locks+0x9f/0xe0 [ 678.556641][ T5851] ? kcov_remote_start+0x3cf/0x6e0 [ 678.561818][ T5851] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.567092][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.572832][ T5851] hci_rx_work+0x2c6/0x1610 [ 678.577414][ T5851] ? lock_acquire+0x2f/0xb0 [ 678.581987][ T5851] ? process_one_work+0x921/0x1ba0 [ 678.587176][ T5851] process_one_work+0x9c8/0x1ba0 [ 678.592194][ T5851] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 678.597894][ T5851] ? __pfx_process_one_work+0x10/0x10 [ 678.603332][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.609093][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.614901][ T5851] ? assign_work+0x1a0/0x250 [ 678.619556][ T5851] worker_thread+0x6c8/0xf00 [ 678.624224][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 678.629394][ T5851] kthread+0x2c4/0x3a0 [ 678.633525][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.638778][ T5851] ? __pfx_kthread+0x10/0x10 [ 678.643432][ T5851] ret_from_fork+0x48/0x80 [ 678.647899][ T5851] ? __pfx_kthread+0x10/0x10 [ 678.652558][ T5851] ret_from_fork_asm+0x1a/0x30 [ 678.657436][ T5851] [ 678.669861][ T5851] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 678.684435][ T5851] Bluetooth: hci2: failed to register connection device [ 680.123689][T10423] 9pnet_virtio: no channels available for device syz [ 681.263140][T10451] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 681.331847][T10453] 9pnet_virtio: no channels available for device syz [ 681.616683][T10463] capability: warning: `syz.2.1000' uses 32-bit capabilities (legacy support in use) [ 681.853237][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1001'. [ 682.810214][ T8668] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 682.853184][T10475] dccp_close: ABORT with 60 bytes unread [ 683.090397][ T29] audit: type=1800 audit(1732206502.295:736): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1004" name="/" dev="fuse" ino=1 res=0 errno=0 [ 683.300272][ T8668] usb 3-1: Using ep0 maxpacket: 8 [ 683.311500][ T8668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.339935][ T8668] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.390739][ T8668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.451819][ T8668] usb 3-1: config 0 descriptor?? [ 683.667978][ T8668] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 683.874128][ T8668] usb 3-1: USB disconnect, device number 3 [ 683.903096][ T8668] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 684.044273][T10511] netlink: 'syz.6.1013': attribute type 2 has an invalid length. [ 684.670674][T10528] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1017'. [ 684.741420][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 684.988369][T10516] block nbd7: shutting down sockets [ 684.993774][T10540] xt_hashlimit: size too large, truncated to 1048576 [ 685.147048][T10546] overlayfs: failed to resolve './file1': -2 [ 687.013906][T10573] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 687.359858][ T8602] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 687.407581][T10573] team0: Port device netdevsim0 added [ 688.710174][T10599] Trying to write to read-only block-device nullb0 [ 689.013820][ T8602] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 689.454394][ T8602] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 689.470092][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1039'. [ 689.489519][ T8602] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 689.522538][ T8602] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.550167][ T8602] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 689.605377][ T8602] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 689.617450][ T8602] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.766114][ T8602] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 689.778825][T10629] Bluetooth: MGMT ver 1.23 [ 689.836750][ T8602] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 689.848022][ T8602] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.965191][ T8602] usb 7-1: unable to read config index 3 descriptor/start: -71 [ 689.972916][ T8602] usb 7-1: can't read configurations, error -71 [ 690.459861][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 690.473877][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.482957][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.539888][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 690.629966][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 690.663107][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.702986][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 690.729926][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 690.744549][ T5913] usb 5-1: config 0 has no interfaces? [ 690.761018][ T5913] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 690.787902][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 690.806981][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.819802][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.869458][ T5913] usb 5-1: config 0 descriptor?? [ 690.889823][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 690.963637][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.226033][T10680] Cannot find add_set index 0 as target [ 691.238420][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 691.256723][ T25] usbtmc 3-1:16.0: can't read capabilities [ 691.460558][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 691.507404][ T25] usb 3-1: USB disconnect, device number 4 [ 691.908821][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 691.918103][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 691.927521][T10701] netlink: 'syz.0.1068': attribute type 20 has an invalid length. [ 692.699950][ T5851] Bluetooth: hci1: Malformed Event: 0x13 [ 693.196686][ T5913] usb 5-1: USB disconnect, device number 2 [ 693.699988][ T29] audit: type=1326 audit(1732206512.925:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.4.1085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f237e819 code=0x0 [ 694.094651][T10758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1088'. [ 695.814501][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1099'. [ 695.857340][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1099'. [ 695.899948][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1099'. [ 695.929514][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1099'. [ 696.131640][T10804] fuse: Unknown parameter 'group_i00000000000000000000' [ 696.170681][T10811] block device autoloading is deprecated and will be removed. [ 696.338317][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1104'. [ 696.364140][T10804] netlink: 'syz.7.1104': attribute type 7 has an invalid length. [ 696.417537][T10804] netlink: 'syz.7.1104': attribute type 8 has an invalid length. [ 696.460066][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1104'. [ 696.529001][T10804] syz_tun: entered promiscuous mode [ 696.596524][T10804] batadv_slave_1: entered promiscuous mode [ 696.652566][T10804] gretap0: entered promiscuous mode [ 696.815232][T10804] Process accounting resumed [ 697.039354][T10821] syzkaller1: entered promiscuous mode [ 697.045346][T10821] syzkaller1: entered allmulticast mode [ 698.398408][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1130'. [ 699.262536][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1143'. [ 699.312581][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1143'. [ 699.377854][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 700.289568][T10937] binder: BINDER_SET_CONTEXT_MGR already set [ 700.307909][T10937] binder: 10936:10937 ioctl 4018620d 20000040 returned -16 [ 700.444946][T10942] evm: overlay not supported [ 701.452011][ T5851] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 701.452124][ T5851] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 701.461079][ T5851] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 701.468472][ T5851] Bluetooth: hci0: Malformed LE Event: 0x02 [ 702.102738][T10971] __nla_validate_parse: 1 callbacks suppressed [ 702.102765][T10971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1167'. [ 702.293603][T10975] syz.6.1168: attempt to access beyond end of device [ 702.293603][T10975] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 702.371139][T10975] hfs: can't find a HFS filesystem on dev nbd6 [ 702.592824][T10977] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.1169'. [ 702.642121][T10977] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.1169'. [ 702.679376][T10977] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.1169'. [ 702.725212][T10977] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.1169'. [ 702.757035][T10977] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.1169'. [ 702.768479][T10977] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.1169'. [ 703.928029][ T29] audit: type=1326 audit(1732206523.145:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11039 comm="syz.0.1198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1df37e819 code=0x0 [ 704.300695][T11050] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 705.052987][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 705.126310][T11075] QAT: failed to copy from user. [ 705.257961][T11090] delete_channel: no stack [ 706.079362][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 706.690434][ T5851] Bluetooth: hci4: link tx timeout [ 706.695981][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 707.614464][ T5866] Bluetooth: hci4: link tx timeout [ 707.619651][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 707.660349][ T5866] Bluetooth: hci4: link tx timeout [ 707.666663][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 707.674690][ T5866] Bluetooth: hci4: link tx timeout [ 707.679993][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 707.993958][T11181] usb usb7: usbfs: process 11181 (syz.8.1258) did not claim interface 0 before use [ 708.160345][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 708.489902][ T5916] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 708.620737][T11203] block device autoloading is deprecated and will be removed. [ 708.640222][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 708.647283][ T5916] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.658731][ T5916] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.671069][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 708.685382][ T5916] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.705905][ T5916] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.719073][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 708.730636][T11198] md2: using deprecated bitmap file support [ 708.744919][T11198] md2: error: failed to get bitmap file [ 708.752627][ T5916] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.791563][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.829874][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 708.843116][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 708.852653][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 708.872711][ T9] usb 3-1: Product: syz [ 708.882827][ T9] usb 3-1: Manufacturer: syz [ 708.892956][ T9] usb 3-1: SerialNumber: syz [ 708.911402][ T9] usb 3-1: config 0 descriptor?? [ 708.966209][T11210] netlink: 'syz.0.1272': attribute type 7 has an invalid length. [ 708.994109][T11210] Êü: entered promiscuous mode [ 709.038918][ T5916] usb 7-1: GET_CAPABILITIES returned 0 [ 709.047394][ T5916] usbtmc 7-1:16.0: can't read capabilities [ 709.151709][ T9] usb 3-1: USB disconnect, device number 5 [ 709.246362][ T5916] usb 7-1: USB disconnect, device number 4 [ 709.384482][T11220] bond2: entered promiscuous mode [ 709.390465][T11220] bond2: entered allmulticast mode [ 709.396260][T11220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.445970][T11224] (unnamed net_device) (uninitialized): option arp_validate: invalid value (22) [ 709.479214][T11228] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1279'. [ 709.519977][T11228] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 709.653652][ T197] tipc: Subscription rejected, illegal request [ 709.959091][T11244] netlink: 3648 bytes leftover after parsing attributes in process `syz.6.1289'. [ 709.972389][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1286'. [ 709.991132][T11244] netlink: 3648 bytes leftover after parsing attributes in process `syz.6.1289'. [ 710.060852][T11248] tipc: Started in network mode [ 710.094154][T11248] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 710.147873][T11248] tipc: Enabled bearer , priority 10 [ 710.253658][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 710.333506][T11254] bridge0: port 3(syz_tun) entered blocking state [ 710.365477][T11259] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 710.392973][T11254] bridge0: port 3(syz_tun) entered disabled state [ 710.410096][T11254] syz_tun: entered allmulticast mode [ 710.431669][T11254] syz_tun: entered promiscuous mode [ 710.450761][T11254] bridge0: port 3(syz_tun) entered blocking state [ 710.457883][T11254] bridge0: port 3(syz_tun) entered forwarding state [ 711.287501][ T8602] tipc: Node number set to 4269801491 [ 711.739669][ T5851] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 711.836029][ C0] Unknown status report in ack skb [ 712.319954][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 712.388317][T11318] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input34 [ 712.670830][T11331] vivid-000: ================= START STATUS ================= [ 712.690869][T11331] vivid-000: Enable Output Cropping: true grabbed [ 712.735334][ T25] IPVS: starting estimator thread 0... [ 712.760096][T11331] vivid-000: Enable Output Composing: true grabbed [ 712.798672][T11331] vivid-000: Enable Output Scaler: true grabbed [ 712.880745][T11338] IPVS: using max 17 ests per chain, 40800 per kthread [ 712.934731][T11337] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 712.970399][T11337] tipc: Enabled bearer , priority 10 [ 713.070708][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 713.089907][T11331] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 713.097225][T11331] vivid-000: Transmit Mode: HDMI grabbed [ 713.108299][T11331] vivid-000: Hotplug Present: 0x00000000 [ 713.121402][T11331] vivid-000: RxSense Present: 0x00000000 [ 713.133924][T11331] vivid-000: EDID Present: 0x00000000 [ 713.141220][T11331] vivid-000: ================== END STATUS ================== [ 713.292440][T11352] 9pnet: Could not find request transport: f0x0000000000000004 [ 713.339887][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 713.680023][T11372] tipc: Enabling of bearer rejected, failed to enable media [ 713.869881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 713.982442][T11385] netlink: 'syz.8.1346': attribute type 1 has an invalid length. [ 714.075334][T11385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.111442][T11388] bond1: entered allmulticast mode [ 714.210538][T11392] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 714.281102][ T29] audit: type=1804 audit(1732206533.505:739): pid=11397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1354" name="/newroot/65/bus/file0" dev="overlay" ino=357 res=1 errno=0 [ 714.335424][ T5851] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 714.390839][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 714.467758][T11404] xt_hashlimit: overflow, rate too high: 0 [ 714.949856][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 715.235953][T11425] xt_hashlimit: size too large, truncated to 1048576 [ 715.989954][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 716.116559][T11449] 9pnet_virtio: no channels available for device syz [ 716.392291][T11459] 9pnet_virtio: no channels available for device syz [ 716.470094][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 716.480810][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 716.671604][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 716.681622][ T9] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 716.691095][ T9] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 716.707505][ T9] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 716.742057][ T9] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 716.835098][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 716.849565][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 716.936630][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 716.987715][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 717.029873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 717.053340][ T9] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 717.082036][ T9] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 717.119953][ T9] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 717.156922][ T9] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 717.205505][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 717.219086][T11472] xt_hashlimit: size too large, truncated to 1048576 [ 717.238640][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 717.303271][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 717.358763][ T9] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 717.392072][ T9] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 717.415692][ T9] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 717.440112][ T5914] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 717.455860][ T9] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 717.503464][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 717.545576][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 717.589699][ T9] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 717.639134][ T5914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.690157][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 717.699221][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 717.750043][ T9] usb 3-1: string descriptor 0 read error: -22 [ 717.756671][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 717.806161][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.814634][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.851934][ T5914] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 717.888166][ T9] adutux 3-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 717.895922][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.930436][ T5914] hub 7-1:1.0: bad descriptor, ignoring hub [ 717.948738][ T5914] hub 7-1:1.0: probe with driver hub failed with error -5 [ 717.980092][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 718.003967][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 718.024334][ T5914] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 718.040833][ T5914] cdc_wdm 7-1:1.0: Unknown control protocol [ 718.069869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 718.109203][ T5914] usb 3-1: USB disconnect, device number 6 [ 718.250180][ T8538] usb 7-1: USB disconnect, device number 5 [ 718.549869][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 718.579891][ T5914] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 718.767068][ T5914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.800142][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 718.821193][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.863562][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.883908][ T5914] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 718.913448][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.995272][ T5914] hub 7-1:1.0: bad descriptor, ignoring hub [ 719.014673][ T5914] hub 7-1:1.0: probe with driver hub failed with error -5 [ 719.040618][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 719.059969][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 719.086230][ T5914] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 719.109860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 719.121547][ T5914] cdc_wdm 7-1:1.0: Unknown control protocol [ 719.319027][ T5914] usb 7-1: USB disconnect, device number 6 [ 720.069878][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 720.150022][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 720.270004][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 720.272337][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.272402][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.272456][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 720.272531][ T25] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 720.272616][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.274832][ T25] usb 5-1: config 0 descriptor?? [ 720.300623][T11495] block device autoloading is deprecated and will be removed. [ 721.021638][ T5866] Bluetooth: hci6: sending frame failed (-49) [ 721.029134][ T5851] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 721.189978][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 721.445605][ T25] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 721.452992][ T25] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 721.460070][ T25] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 721.467134][ T25] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 721.474824][ T25] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 721.486354][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 721.613366][ T25] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 721.666225][ T25] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 721.921777][ T5913] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 721.942034][ T5913] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 722.043418][ T5913] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 722.054728][ T25] usb 5-1: USB disconnect, device number 3 [ 722.086384][ T5913] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 722.229925][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 722.662377][ T5851] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 722.760439][T11526] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1405'. [ 723.150463][ T5851] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 723.271247][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 724.309865][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 724.670442][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 724.828231][T11586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1434'. [ 724.964092][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.975937][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.000510][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.013875][ T9] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 725.023176][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.044559][ T9] usb 8-1: config 0 descriptor?? [ 725.062845][T11595] netlink: 732 bytes leftover after parsing attributes in process `syz.8.1438'. [ 725.072942][T11595] netlink: 732 bytes leftover after parsing attributes in process `syz.8.1438'. [ 725.349893][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 725.461338][ T9] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0 [ 725.514506][ T9] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0002/input/input36 [ 725.554321][ T9] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0002/input/input37 [ 725.631664][ T9] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0002/input/input38 [ 725.711661][ T9] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0002/input/input39 [ 725.798219][ T9] hid-udraw 0003:20D6:CB17.0002: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.7-1/input0 [ 725.931381][ T25] usb 8-1: USB disconnect, device number 2 [ 726.378983][T11622] block device autoloading is deprecated and will be removed. [ 726.389875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 726.738273][ T5851] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 726.747065][ T5851] Bluetooth: hci2: Injecting HCI hardware error event [ 726.755688][ T5851] Bluetooth: hci2: hardware error 0x00 [ 727.005149][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1450'. [ 727.061958][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1450'. [ 727.096047][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1450'. [ 727.128111][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1450'. [ 727.429976][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 727.854462][T11659] Bluetooth: MGMT ver 1.23 [ 728.162828][ C0] hrtimer: interrupt took 830771 ns [ 728.469899][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 729.109950][ T5851] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 729.246437][T11685] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1474'. [ 729.512707][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 730.339921][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 730.549901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 730.836080][T11716] [ 730.838484][T11716] ============================= [ 730.843356][T11716] [ BUG: Invalid wait context ] [ 730.848227][T11716] 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Not tainted [ 730.855009][T11716] ----------------------------- [ 730.859959][T11716] syz.8.1491/11716 is trying to lock: [ 730.865351][T11716] ffffffff8e272ed8 (map_idr_lock){+...}-{3:3}, at: bpf_map_put+0x1a1/0x2b0 [ 730.874028][T11716] other info that might help us debug this: [ 730.879936][T11716] context-{5:5} [ 730.883422][T11716] 2 locks held by syz.8.1491/11716: [ 730.888660][T11716] #0: ffffffff8e1bb1c0 (rcu_read_lock){....}-{1:3}, at: map_delete_elem+0x498/0x9a0 [ 730.898271][T11716] #1: ffff8880284810b0 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1c8/0x730 [ 730.908753][T11716] stack backtrace: [ 730.912489][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.8.1491 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 730.922950][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 730.933041][T11716] Call Trace: [ 730.936350][T11716] [ 730.939301][T11716] dump_stack_lvl+0x116/0x1f0 [ 730.944048][T11716] __lock_acquire+0x878/0x3c40 [ 730.948870][T11716] ? __pfx___lock_acquire+0x10/0x10 [ 730.954117][T11716] lock_acquire.part.0+0x11b/0x380 [ 730.959268][T11716] ? bpf_map_put+0x1a1/0x2b0 [ 730.963911][T11716] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 730.969580][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.975268][T11716] ? rcu_is_watching+0x12/0xc0 [ 730.980090][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.985778][T11716] ? trace_lock_acquire+0x14a/0x1d0 [ 730.991024][T11716] ? bpf_map_put+0x1a1/0x2b0 [ 730.995664][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.001363][T11716] ? lock_acquire+0x2f/0xb0 [ 731.005894][T11716] ? bpf_map_put+0x1a1/0x2b0 [ 731.010535][T11716] ? __pfx_bpf_map_fd_put_ptr+0x10/0x10 [ 731.016164][T11716] _raw_spin_lock_irqsave+0x3a/0x60 [ 731.021421][T11716] ? bpf_map_put+0x1a1/0x2b0 [ 731.026055][T11716] bpf_map_put+0x1a1/0x2b0 [ 731.030565][T11716] free_htab_elem+0xce/0x260 [ 731.035224][T11716] htab_map_delete_elem+0x29a/0x730 [ 731.040488][T11716] map_delete_elem+0x50e/0x9a0 [ 731.045305][T11716] ? __pfx_map_delete_elem+0x10/0x10 [ 731.050652][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.056354][T11716] __sys_bpf+0x630/0x49a0 [ 731.060727][T11716] ? __pfx___sys_bpf+0x10/0x10 [ 731.065523][T11716] ? find_held_lock+0x2d/0x110 [ 731.070369][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.076060][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.081742][T11716] ? do_futex+0x123/0x350 [ 731.086124][T11716] ? __pfx_do_futex+0x10/0x10 [ 731.090858][T11716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.096554][T11716] __x64_sys_bpf+0x78/0xc0 [ 731.101011][T11716] do_syscall_64+0xcd/0x250 [ 731.105562][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.111499][T11716] RIP: 0033:0x7f139597e819 [ 731.115942][T11716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.135586][T11716] RSP: 002b:00007f139681d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.144034][T11716] RAX: ffffffffffffffda RBX: 00007f1395b35fa0 RCX: 00007f139597e819 [ 731.152030][T11716] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000003 [ 731.160056][T11716] RBP: 00007f13959f175e R08: 0000000000000000 R09: 0000000000000000 [ 731.168050][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.176040][T11716] R13: 0000000000000000 R14: 00007f1395b35fa0 R15: 00007ffcc3ecb8f8 [ 731.184046][T11716] [ 731.221546][ T5851] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 731.302029][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 731.333162][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.355586][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 731.403527][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 731.436986][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.450242][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 731.459327][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.589874][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 731.684530][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 731.690120][ T25] usbtmc 3-1:16.0: can't read capabilities [ 731.907776][ T9] usb 3-1: USB disconnect, device number 7 [ 732.629904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 733.269895][ T5851] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 733.669849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 734.709860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 735.749874][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 736.789834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 737.830506][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 738.869868][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 739.909855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available