last executing test programs: 6m17.698048404s ago: executing program 32 (id=441): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="03000000000301", 0x7}], 0x1) 4m21.252552938s ago: executing program 0 (id=927): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfca12000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m21.020606985s ago: executing program 0 (id=928): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a00)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x1d, 0x8, "137d27c3f348d429b9412d10ac6cfe3263a501b8e381c104d1"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x20000005) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x3, 'syz0\x00', @null, 0x9, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) accept(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x94, 0x65, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_INDEV={0x14, 0x2, 'vcan0\x00'}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x4040) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m20.015375935s ago: executing program 0 (id=930): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20c0}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 4m17.676572599s ago: executing program 0 (id=936): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "fefe80"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) 4m16.425283356s ago: executing program 0 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x44840) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m16.365029579s ago: executing program 4 (id=941): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r2, &(0x7f0000003000), 0x0, 0x140, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 4m16.094985239s ago: executing program 5 (id=944): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r5, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0x18c6) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 4m14.955387816s ago: executing program 4 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="d24c66"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) 4m14.405747639s ago: executing program 3 (id=947): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000980)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r3}) 4m14.222383232s ago: executing program 3 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r2, 0x89e0, 0x0) 4m13.926296358s ago: executing program 5 (id=949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) socket(0x400000000010, 0x3, 0x0) unshare(0x6a040000) 4m13.721404177s ago: executing program 4 (id=951): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x18, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop]}}}}, 0x26) 4m13.669445189s ago: executing program 0 (id=952): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4m13.199975178s ago: executing program 3 (id=954): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfca12000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m13.135798226s ago: executing program 2 (id=955): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) 4m12.992725764s ago: executing program 3 (id=956): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x21, 0x1c, 0x66, 0x0, 0xf8, 0x11, 0x0, @loopback, @multicast2}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) 4m12.986290441s ago: executing program 2 (id=957): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0xaba64f4add525e8b, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x2, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0xffffff7f}, 0x4040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180), 0x4) 4m12.746337314s ago: executing program 5 (id=958): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000980)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r3}) 4m12.688512814s ago: executing program 4 (id=959): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x106}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "fefe80"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) 4m11.758914256s ago: executing program 2 (id=960): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4m11.355891656s ago: executing program 5 (id=961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="86f79f", 0x3}], 0x1}}], 0x1, 0x4080044) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/196, 0xc4}], 0x1}, 0x61) 4m10.520682059s ago: executing program 4 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 4m10.334489602s ago: executing program 2 (id=963): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d781bd24fd", @ANYBLOB="0200"/14, @ANYBLOB="030000000500000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0xfc}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m10.278019346s ago: executing program 3 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r2, 0x89e0, 0x0) 4m10.152576393s ago: executing program 4 (id=965): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m9.872163436s ago: executing program 5 (id=966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfffffff903000006a1082f240420f00bf00200000000007950000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 4m9.837449711s ago: executing program 2 (id=967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/141, 0x599, 0x1, &(0x7f0000000180)=""/129, 0x81}, &(0x7f0000000240)=0x40) 4m9.540036755s ago: executing program 2 (id=968): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 4m9.480632315s ago: executing program 5 (id=969): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072003303060000000400000007000000dd"], 0x18}}, 0x20000010) 4m9.194541298s ago: executing program 3 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r1, 0x6419aa27cadae9f1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 3m37.171498697s ago: executing program 33 (id=952): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 3m35.972525695s ago: executing program 34 (id=965): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m35.84742869s ago: executing program 35 (id=969): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072003303060000000400000007000000dd"], 0x18}}, 0x20000010) 3m35.680939552s ago: executing program 36 (id=968): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 3m35.544708931s ago: executing program 37 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r1, 0x6419aa27cadae9f1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 7.358528543s ago: executing program 9 (id=1475): r0 = syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x4, 0x0) 6.446003737s ago: executing program 1 (id=1481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 6.238579314s ago: executing program 8 (id=1483): r0 = syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 6.098326865s ago: executing program 9 (id=1485): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x400000008aa) 5.58512987s ago: executing program 9 (id=1489): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x6, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7fffffff, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x800003ff, 0x3, 0x6, 0x100fffd, 0x100, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x8000003, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.371327408s ago: executing program 1 (id=1492): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.916478705s ago: executing program 8 (id=1493): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0100aabd7000fbdbdf252e000000060006000000000008000200", @ANYRES32=r2, @ANYBLOB="0c0005000200aaaaaaaaaaaa05002e000700000005002b00030000000600060003000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x80c5}, 0x40080) 4.648354503s ago: executing program 8 (id=1495): openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) pipe(&(0x7f0000000480)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 4.128503942s ago: executing program 7 (id=1497): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000011000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7235f1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a49bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d67"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffcf9}, 0x32) 4.12773532s ago: executing program 1 (id=1498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x4e}, 0x50) 3.836763195s ago: executing program 1 (id=1499): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50) 3.711875213s ago: executing program 7 (id=1500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 3.710350703s ago: executing program 6 (id=1501): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x10001}, 0x4, 0x40, 0xfffb, 0x5, 0x10, 'syz1\x00', "4cb6a4bbb3684ee83ec294f8b2603b9426d154e9ad3c22957513c02487be1bbd", "5ba9023921bbdb415974983b7eb83d7b6fb27a61682df18a345d0583a2500396", [{0x8, 0x9, {0x1, 0x10}}, {0x3, 0x4, {0x3, 0x6}}, {0x2, 0x3, {0x0, 0xe}}, {0x5a, 0xdc, {0x3, 0x80000001}}, {0x8, 0x6, {0x0, 0x1ff}}, {0x81, 0x6, {0x1, 0x7}}, {0xfff7, 0x4, {0x0, 0x8000}}, {0xd1f, 0x5, {0x2, 0x2}}, {0x1, 0x42a, {0x2, 0x2}}, {0x9, 0x200, {0x2, 0x5}}, {0x1, 0xff, {0x1, 0x8}}, {0xffff, 0x7, {0x1, 0x3}}, {0x6, 0x5, {0x1, 0x4909f0ea}}, {0xff, 0x40, {0x1, 0x8000}}, {0xfff9, 0x3ca, {0x0, 0x8}}, {0xf00, 0x0, {0x2, 0xfdc}}, {0xffff, 0x6, {0x3, 0x5}}, {0xffff, 0x7, {0x1, 0x6}}, {0x0, 0x5, {0x2, 0x88}}, {0x7f2c, 0xfffe, {0x1, 0x1ff}}, {0xa, 0x2, {0x3, 0x9}}, {0x4, 0x5abb, {0x0, 0x8}}, {0x10, 0x9, {0x3, 0x6}}, {0x7, 0xfff, {0x0, 0x4}}, {0x2, 0xe637, {0x3, 0x8}}, {0xff, 0x101, {0x0, 0x1}}, {0x8000, 0x3, {0x3, 0x401}}, {0x6, 0x8a, {0x1, 0x6}}, {0xfff7, 0x8, {0x2, 0x5}}, {0x0, 0x9e, {0x2, 0x10}}, {0x0, 0x7, {0x2, 0x81}}, {0x7ff, 0x81, {0x0, 0x7}}, {0x4, 0xb0, {0x3, 0x38}}, {0x6, 0xf9f9, {0x2, 0x800}}, {0x4, 0x0, {0x0, 0x10001}}, {0x1, 0x1ff, {0x69fc33fcdbcade3a, 0x4}}, {0x0, 0x1, {0x2, 0x2}}, {0x6, 0x8, {0x3, 0x8}}, {0x5, 0x7a, {0x2, 0xf714}}, {0x81, 0x7, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{}, 0x4, 0x1, 0x4, 0x7, 0xe, 'syz0\x00', "3958af43f62372af092305f3f2306b43125a5511d51b3f491eedf0df57c01931", "6f4f519d36c270179703201bea6eeb5c595cd6ed4dbacc43e0a529a25efd9f54", [{0x3, 0x0, {0x1, 0x1}}, {0x97, 0x2, {0x0, 0xf3}}, {0x8, 0x6, {0x2, 0x3}}, {0xc, 0xa5, {0x1, 0x4}}, {0x7, 0xc236, {0x3, 0x9}}, {0x2, 0x7, {0x0, 0x4}}, {0xf2, 0x3, {0x3}}, {0x4c, 0xff81, {0x0, 0x5}}, {0x9, 0x3ff, {0x2, 0x1}}, {0x25cb, 0x9, {0x2, 0xf2}}, {0x7, 0x401, {0x2, 0x6}}, {0x5, 0xff01, {0x2, 0xf7d1}}, {0xd8e6, 0x9, {0x3, 0xd}}, {0xaab, 0x8, {0x1, 0x8}}, {0x7ff, 0x4, {0x1, 0xfd44}}, {0x5f5f, 0x8000, {0x2, 0x18a}}, {0x0, 0x9a5, {0x0, 0x7}}, {0x800, 0x2, {0x2, 0x800}}, {0x9, 0x5, {0x1, 0x68}}, {0x1000, 0x1, {0x1, 0x8}}, {0x4, 0xbd0}, {0x0, 0x1, {0x1, 0x4}}, {0x8, 0x0, {0x1, 0x6}}, {0x17, 0x13a, {0x0, 0xffffffff}}, {0x81, 0x8, {0x3, 0x80}}, {0x8, 0x2, {0x3, 0x1}}, {0x0, 0xfffc, {0x3, 0xf9}}, {0x7000, 0xf, {0x0, 0xbe6}}, {0xd96f, 0x7, {0x0, 0x6}}, {0x0, 0x8000, {0x3, 0x6}}, {0xba, 0x9, {0x0, 0xc73e}}, {0x400, 0x9, {0x1, 0xff}}, {0x6, 0x7, {0x0, 0x401}}, {0x4, 0x1ff, {0x0, 0x1}}, {0x100, 0x9, {0x3, 0x89}}, {0xff, 0x40}, {0x0, 0x1, {0x3, 0xfffffffe}}, {0xeed4, 0x5, {0x1, 0xef}}, {0x400, 0x7fff, {0x3, 0xc9}}, {0xe9f6, 0x3, {0x3, 0x100}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x7, 0x7, 0x1000, 0xfc00, 0xb, 'syz1\x00', "6eea33290541304ab9cb581440a972d801cd0a869146f8ff7a4d36c013db7865", "56def8715c3a68c5ce514c4d5800c7b8ba1ec77cd993488c63e723924b43f0de", [{0xf3ea, 0x90, {0x326dffd01b6ea4ea, 0x913}}, {0x6, 0x7f, {0x2, 0x2}}, {0x4, 0xffff, {0x0, 0x5}}, {0x401, 0xff, {0x3, 0x3}}, {0x6, 0x3, {0x3, 0xda1c}}, {0xd8, 0x7, {0x1, 0x6}}, {0x0, 0x8000, {0x1, 0x120}}, {0x9, 0x1, {0x1, 0x3}}, {0x8, 0x0, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0xfffffff7}}, {0x8, 0x1, {0x0, 0x1}}, {0x1, 0xabc5, {0x1}}, {0xfbf, 0x3, {0x0, 0x4}}, {0x9, 0x0, {0x0, 0x7}}, {0xee8, 0x9, {0x0, 0x7f}}, {0x7, 0x7, {0x0, 0x2}}, {0xfffd, 0x9, {0x0, 0x10}}, {0x1e, 0x4, {0x3, 0xc}}, {0x5, 0x2, {0x0, 0x7b2b}}, {0xdcd6, 0xd7, {0x1, 0x4}}, {0x8, 0x1, {0x1, 0x2}}, {0x7, 0x40, {0x1}}, {0x6, 0x5, {0x1, 0x8}}, {0x4, 0x7f, {0x0, 0x7}}, {0x1, 0x6, {0x3, 0x5}}, {0x2, 0x5, {0x0, 0x2}}, {0x9, 0x6, {0x3, 0xb}}, {0x4, 0xffff, {0x3, 0xb54}}, {0x9, 0x60e, {0x3, 0x9}}, {0x4, 0x7, {0x1, 0x9}}, {0x0, 0x200, {0x0, 0x401}}, {0x1, 0x7ff, {0x3, 0x3}}, {0x55af, 0x8, {0x3, 0xb}}, {0xfff, 0x43, {0x3, 0x7}}, {0x40, 0x37, {0x3, 0xb257}}, {0x7, 0x40, {0x2, 0x80}}, {0x7ff, 0x2, {0x0, 0x7}}, {0x65, 0xd54, {0x2, 0x3b7}}, {0xf801, 0xe3, {0x2, 0x5}}, {0x2, 0x2, {0x1, 0xc}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003800800"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 3.617817416s ago: executing program 9 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r1, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.344656679s ago: executing program 1 (id=1503): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}]}, &(0x7f0000000240)=0x10) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000280)=0x1200) 3.309927469s ago: executing program 6 (id=1504): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.168180368s ago: executing program 7 (id=1505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0100aabd7000fbdbdf252e000000060006000000000008000200", @ANYRES32=r2, @ANYBLOB="0c0005000200aaaaaaaaaaaa05002e000700000005002b00030000000600060003000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x80c5}, 0x40080) 3.016743521s ago: executing program 9 (id=1506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.923893778s ago: executing program 6 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.628303908s ago: executing program 7 (id=1508): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r6, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0x18c6) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 2.380573724s ago: executing program 9 (id=1509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x106, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "fefe80"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) 2.136654535s ago: executing program 6 (id=1510): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1.371233463s ago: executing program 8 (id=1511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="9cc9de10e578"}) 1.206248636s ago: executing program 7 (id=1512): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.144714454s ago: executing program 6 (id=1513): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600030a0018"], 0x4c}}, 0x0) 1.023534611s ago: executing program 8 (id=1514): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 607.51249ms ago: executing program 6 (id=1515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 408.648185ms ago: executing program 8 (id=1516): r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) 136.255651ms ago: executing program 1 (id=1517): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 7 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): : -22 [ 317.126951][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.361171][ T6016] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 318.513413][ T6016] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.513445][ T6016] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.513489][ T6016] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.513512][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.518607][ T6016] usb 5-1: usb_control_msg returned -32 [ 319.518659][ T6016] usbtmc 5-1:16.0: can't read capabilities [ 319.541659][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 319.755644][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 320.941087][ T6016] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 321.093415][ T6016] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.093445][ T6016] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.093465][ T6016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.093521][ T6016] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.095957][ T6016] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.095982][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.096002][ T6016] usb 3-1: Product: syz [ 321.096016][ T6016] usb 3-1: Manufacturer: syz [ 321.173816][ T6016] cdc_wdm 3-1:1.0: skipping garbage [ 321.173835][ T6016] cdc_wdm 3-1:1.0: skipping garbage [ 321.173847][ T6016] cdc_wdm 3-1:1.0: skipping garbage [ 321.173878][ T6016] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.199346][ T5928] usb 5-1: USB disconnect, device number 13 [ 321.398617][ T6016] usb 3-1: USB disconnect, device number 16 [ 321.705330][ T7900] syzkaller1: entered promiscuous mode [ 321.705360][ T7900] syzkaller1: entered allmulticast mode [ 322.044337][ T7981] netlink: 200 bytes leftover after parsing attributes in process `syz.0.620'. [ 322.044463][ T7981] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 322.588327][ T7521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.731096][ T6018] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 322.851763][ T7521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.913536][ T6018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.913567][ T6018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.913608][ T6018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.913630][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.919301][ T7521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.063662][ T7521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.177039][ T6018] usb 5-1: usb_control_msg returned -32 [ 323.177089][ T6018] usbtmc 5-1:16.0: can't read capabilities [ 323.222502][ T5929] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 323.373572][ T8020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.632'. [ 323.378169][ T5929] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.378196][ T5929] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 323.378216][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.378266][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.389673][ T5929] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.389701][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.389720][ T5929] usb 4-1: Product: syz [ 323.389734][ T5929] usb 4-1: Manufacturer: syz [ 323.417211][ T5929] cdc_wdm 4-1:1.0: skipping garbage [ 323.417230][ T5929] cdc_wdm 4-1:1.0: skipping garbage [ 323.417242][ T5929] cdc_wdm 4-1:1.0: skipping garbage [ 323.417275][ T5929] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 323.461002][ T8017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.632'. [ 323.473141][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.2.632'. [ 323.679504][ T8026] netlink: 200 bytes leftover after parsing attributes in process `syz.0.633'. [ 323.722899][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.747897][ T5929] usb 4-1: USB disconnect, device number 11 [ 323.790825][ T7521] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.855887][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.856037][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.959455][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.959618][ T1542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.341730][ T1461] IPVS: stop unused estimator thread 0... [ 324.368475][ T8041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.637'. [ 324.568565][ T8034] syzkaller1: entered promiscuous mode [ 324.568595][ T8034] syzkaller1: entered allmulticast mode [ 325.056751][ T31] usb 5-1: USB disconnect, device number 14 [ 325.891373][ T7521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.175804][ T8071] netlink: 200 bytes leftover after parsing attributes in process `syz.0.645'. [ 326.741358][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 327.067798][ T8100] syzkaller1: entered promiscuous mode [ 327.067827][ T8100] syzkaller1: entered allmulticast mode [ 327.127957][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.127985][ T31] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.128005][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.128054][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 327.128081][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 327.130336][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.130365][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.130386][ T31] usb 3-1: Product: syz [ 327.130400][ T31] usb 3-1: Manufacturer: syz [ 327.225934][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 327.225953][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 327.226526][ T31] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 327.262812][ T6018] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 327.471252][ T7521] veth0_vlan: entered promiscuous mode [ 327.479603][ T7521] veth1_vlan: entered promiscuous mode [ 327.543573][ T6018] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.543602][ T6018] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.543645][ T6018] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.543668][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.568705][ T5907] usb 3-1: USB disconnect, device number 17 [ 327.733465][ T8104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.654'. [ 327.755822][ T7521] veth0_macvtap: entered promiscuous mode [ 327.781577][ T6018] usb 4-1: usb_control_msg returned -32 [ 327.781620][ T6018] usbtmc 4-1:16.0: can't read capabilities [ 327.815573][ T7521] veth1_macvtap: entered promiscuous mode [ 327.936115][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.963037][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.013680][ T1468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.013935][ T1468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.013973][ T1468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.014009][ T1468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.879239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.879267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.987587][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.987607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.490640][ T8132] veth0_vlan: entered allmulticast mode [ 330.129896][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.664'. [ 330.193438][ T5900] usb 4-1: USB disconnect, device number 12 [ 330.590730][ T8144] syzkaller1: entered promiscuous mode [ 330.590759][ T8144] syzkaller1: entered allmulticast mode [ 330.741042][ T5900] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 330.903645][ T5900] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.903673][ T5900] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.903690][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.903740][ T5900] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 330.903765][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 330.907503][ T5900] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.907530][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.907550][ T5900] usb 4-1: Product: syz [ 330.907565][ T5900] usb 4-1: Manufacturer: syz [ 330.927302][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 330.927319][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 330.927413][ T5900] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.067588][ T8165] netlink: 44 bytes leftover after parsing attributes in process `syz.0.671'. [ 331.068284][ T8164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.671'. [ 331.068643][ T8166] netlink: 44 bytes leftover after parsing attributes in process `syz.0.671'. [ 331.150692][ T5900] usb 4-1: USB disconnect, device number 13 [ 332.312598][ T8193] netlink: 'syz.3.679': attribute type 25 has an invalid length. [ 332.312620][ T8193] netlink: 'syz.3.679': attribute type 28 has an invalid length. [ 332.558955][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.678'. [ 332.711281][ T8201] warning: `syz.3.682' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 332.998443][ T8208] syzkaller1: entered promiscuous mode [ 332.998472][ T8208] syzkaller1: entered allmulticast mode [ 333.163594][ T8211] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 333.963185][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 334.069437][ T8215] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 334.093153][ T8215] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 334.144418][ T31] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.144446][ T31] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.144465][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.144498][ T31] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 334.144512][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 334.146539][ T31] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.146555][ T31] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.146565][ T31] usb 6-1: Product: syz [ 334.146573][ T31] usb 6-1: Manufacturer: syz [ 334.230672][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 334.230684][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 334.230743][ T31] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 334.441797][ T5929] usb 6-1: USB disconnect, device number 2 [ 334.575103][ T8217] gretap1: entered promiscuous mode [ 334.628669][ T8217] bond1: (slave gretap1): making interface the new active one [ 334.644499][ T8217] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 335.191171][ T8248] netlink: 188 bytes leftover after parsing attributes in process `syz.5.697'. [ 335.647854][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.006024][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.194460][ T8263] syzkaller1: entered promiscuous mode [ 336.194498][ T8263] syzkaller1: entered allmulticast mode [ 336.464168][ T8274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.705'. [ 336.464359][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.5.706'. [ 336.464631][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.3.705'. [ 336.465589][ T8273] netlink: 60 bytes leftover after parsing attributes in process `syz.5.706'. [ 336.465919][ T8277] netlink: 60 bytes leftover after parsing attributes in process `syz.3.705'. [ 336.466252][ T8279] netlink: 60 bytes leftover after parsing attributes in process `syz.5.706'. [ 336.741073][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 336.829170][ T8290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.711'. [ 336.834512][ T8287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.711'. [ 336.835866][ T8287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.711'. [ 337.139852][ T31] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.139880][ T31] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 337.139899][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.139951][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 337.139977][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 337.246218][ T31] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.246248][ T31] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.246268][ T31] usb 1-1: Product: syz [ 337.246283][ T31] usb 1-1: Manufacturer: syz [ 337.426310][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.443180][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 337.443199][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 337.446098][ T31] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 337.446127][ T31] cdc_wdm 1-1:1.0: Unknown control protocol [ 337.759447][ T5929] usb 1-1: USB disconnect, device number 16 [ 340.059309][ T8332] netlink: 'syz.4.727': attribute type 29 has an invalid length. [ 340.070469][ T8332] netlink: 'syz.4.727': attribute type 29 has an invalid length. [ 340.086210][ T8332] netlink: 'syz.4.727': attribute type 29 has an invalid length. [ 340.531024][ T5900] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 340.599418][ T8342] TCP: TCP_TX_DELAY enabled [ 340.688321][ T5900] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.688351][ T5900] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 340.688371][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.688430][ T5900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 340.688458][ T5900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 340.698328][ T5900] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.698358][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.698379][ T5900] usb 3-1: Product: syz [ 340.698393][ T5900] usb 3-1: Manufacturer: syz [ 340.791810][ T5900] cdc_wdm 3-1:1.0: skipping garbage [ 340.791831][ T5900] cdc_wdm 3-1:1.0: skipping garbage [ 340.796178][ T5900] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 340.796197][ T5900] cdc_wdm 3-1:1.0: Unknown control protocol [ 341.007802][ T5900] usb 3-1: USB disconnect, device number 18 [ 341.091491][ T8347] __nla_validate_parse: 1 callbacks suppressed [ 341.091512][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.4.731'. [ 341.091965][ T8346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.731'. [ 341.093347][ T8346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.731'. [ 341.237909][ T8350] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.732'. [ 341.399307][ T8352] netlink: 14 bytes leftover after parsing attributes in process `syz.5.734'. [ 341.404787][ T8354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.221558][ T8381] netlink: 'syz.0.741': attribute type 10 has an invalid length. [ 344.523356][ T8381] hsr_slave_0 (unregistering): left promiscuous mode [ 345.929182][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.748'. [ 345.929647][ T8402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.748'. [ 345.954591][ T8402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.748'. [ 345.955513][ T8402] netlink: 'syz.4.748': attribute type 10 has an invalid length. [ 346.528724][ T8420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.607990][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 346.608018][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.608043][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.608057][ T5846] Workqueue: hci5 hci_rx_work [ 346.608087][ T5846] Call Trace: [ 346.608095][ T5846] [ 346.608105][ T5846] dump_stack_lvl+0x189/0x250 [ 346.608142][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.608173][ T5846] ? __pfx__printk+0x10/0x10 [ 346.608201][ T5846] ? kernfs_path_from_node+0x2c/0x280 [ 346.608222][ T5846] ? kernfs_path_from_node+0x243/0x280 [ 346.608242][ T5846] ? kernfs_path_from_node+0x2c/0x280 [ 346.608267][ T5846] sysfs_create_dir_ns+0x259/0x280 [ 346.608299][ T5846] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 346.608326][ T5846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 346.608359][ T5846] ? rt_spin_unlock+0x65/0x80 [ 346.608392][ T5846] kobject_add_internal+0x5a5/0xb50 [ 346.608424][ T5846] kobject_add+0x155/0x220 [ 346.608459][ T5846] ? __pfx_kobject_add+0x10/0x10 [ 346.608494][ T5846] ? get_device_parent+0x370/0x3a0 [ 346.608520][ T5846] device_add+0x408/0xb50 [ 346.608546][ T5846] hci_conn_add_sysfs+0xd5/0x1e0 [ 346.608574][ T5846] le_conn_complete_evt+0xf39/0x1500 [ 346.608619][ T5846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 346.608651][ T5846] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 346.608683][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.608719][ T5846] ? skb_pull_data+0xfb/0x200 [ 346.608746][ T5846] hci_le_conn_complete_evt+0x187/0x450 [ 346.608781][ T5846] hci_event_packet+0x78f/0x1200 [ 346.608811][ T5846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 346.608843][ T5846] ? __pfx_hci_event_packet+0x10/0x10 [ 346.608868][ T5846] ? __pfx_migrate_enable+0x10/0x10 [ 346.608900][ T5846] ? hci_send_to_monitor+0xe2/0x570 [ 346.608934][ T5846] hci_rx_work+0x46a/0xe80 [ 346.608965][ T5846] ? process_scheduled_works+0x9ef/0x17b0 [ 346.608994][ T5846] process_scheduled_works+0xade/0x17b0 [ 346.609048][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.609092][ T5846] worker_thread+0x8a0/0xda0 [ 346.609146][ T5846] kthread+0x70e/0x8a0 [ 346.609179][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 346.609203][ T5846] ? __pfx_kthread+0x10/0x10 [ 346.609238][ T5846] ? __pfx_kthread+0x10/0x10 [ 346.609269][ T5846] ret_from_fork+0x436/0x7d0 [ 346.609299][ T5846] ? __pfx_ret_from_fork+0x10/0x10 [ 346.609331][ T5846] ? __switch_to_asm+0x39/0x70 [ 346.609351][ T5846] ? __switch_to_asm+0x33/0x70 [ 346.609368][ T5846] ? __pfx_kthread+0x10/0x10 [ 346.609399][ T5846] ret_from_fork_asm+0x1a/0x30 [ 346.609445][ T5846] [ 346.610287][ T5846] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 346.610332][ T5846] Bluetooth: hci5: failed to register connection device [ 347.971338][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.761'. [ 349.650859][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.769'. [ 349.999797][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.5.771'. [ 352.631716][ T8519] syzkaller1: entered promiscuous mode [ 352.631747][ T8519] syzkaller1: entered allmulticast mode [ 356.508928][ T8597] syzkaller1: entered promiscuous mode [ 356.508957][ T8597] syzkaller1: entered allmulticast mode [ 360.555433][ T8639] syzkaller1: entered promiscuous mode [ 360.555464][ T8639] syzkaller1: entered allmulticast mode [ 360.857398][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.815'. [ 361.182382][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 361.644754][ T8681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.820'. [ 364.739305][ T8705] syzkaller1: entered promiscuous mode [ 364.739335][ T8705] syzkaller1: entered allmulticast mode [ 365.405469][ T8724] binder: 8722:8724 ioctl c0306201 200000000240 returned -11 [ 368.833848][ T8751] syzkaller1: entered promiscuous mode [ 368.833944][ T8751] syzkaller1: entered allmulticast mode [ 369.172085][ T8759] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 369.172107][ T8759] binder: 8755:8759 ioctl 4018620d 2000000002c0 returned -1 [ 369.172766][ T8759] binder: 8755:8759 ioctl c0306201 200000000240 returned -11 [ 372.555229][ T8797] tipc: Started in network mode [ 372.555267][ T8797] tipc: Node identity aa5ed70db521, cluster identity 4711 [ 372.556120][ T8797] tipc: Enabled bearer , priority 0 [ 373.042930][ T8808] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 373.042951][ T8808] binder: 8807:8808 ioctl 4018620d 2000000002c0 returned -1 [ 373.043363][ T8808] binder: 8807:8808 ioctl c0306201 200000000240 returned -11 [ 373.164826][ T8788] tipc: Disabling bearer [ 373.646322][ T6015] tipc: Node number set to 528471821 [ 374.470465][ T8823] sock: sock_set_timeout: `syz.0.865' (pid 8823) tries to set negative timeout [ 375.697125][ T8849] binder: 8845:8849 ioctl c0306201 200000000240 returned -11 [ 377.811964][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.880'. [ 378.217397][ T8878] binder: 8877:8878 ioctl c0306201 200000000240 returned -11 [ 378.772089][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.772162][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.135785][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 381.223468][ T8905] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 381.768394][ T8912] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 381.768421][ T8912] binder: 8911:8912 ioctl 4018620d 2000000002c0 returned -1 [ 381.768845][ T8912] binder: 8911:8912 ioctl c0306201 200000000240 returned -11 [ 382.818118][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.899'. [ 384.467676][ T8942] FAT-fs (loop9): unable to read boot sector [ 385.412735][ T8944] binder: 8943:8944 ioctl c0306201 200000000240 returned -11 [ 387.295372][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 387.859050][ T6018] IPVS: starting estimator thread 0... [ 388.080562][ T8973] IPVS: using max 9 ests per chain, 21600 per kthread [ 389.808114][ T8984] FAT-fs (loop11): unable to read boot sector [ 390.664706][ T8986] binder: 8985:8986 ioctl c0306201 200000000240 returned -11 [ 391.136838][ T8995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.922'. [ 391.854480][ T8994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.311362][ T9027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.934'. [ 395.560031][ T9033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.942607][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.937'. [ 396.964568][ T9038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.937'. [ 397.188112][ T9044] tipc: Started in network mode [ 397.188142][ T9044] tipc: Node identity de7e12b3aead, cluster identity 4711 [ 397.196346][ T9044] tipc: Enabled bearer , priority 0 [ 397.218738][ T9044] syzkaller0: entered promiscuous mode [ 397.218784][ T9044] syzkaller0: entered allmulticast mode [ 397.236857][ T9044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 397.322031][ T9050] netlink: 96 bytes leftover after parsing attributes in process `syz.2.942'. [ 398.451376][ T31] tipc: Node number set to 1892881075 [ 398.986465][ T9044] tipc: Resetting bearer [ 399.061932][ T9071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.115212][ T9041] tipc: Resetting bearer [ 399.444579][ T9041] tipc: Disabling bearer [ 401.625618][ T9104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.487201][ T9128] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 403.769499][ T9130] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 403.783346][ T9130] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 405.241269][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.047611][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.060761][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.072204][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.082876][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.083600][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.135367][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.155170][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.172565][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.213904][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.217759][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.222391][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.246558][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.276151][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.287500][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.288254][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.507497][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.509919][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.512155][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.524195][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.526553][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.627870][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.647783][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.649311][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.650472][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.661173][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.011607][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.011682][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.638816][ T6529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.935449][ T6529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.205877][ T6529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.211769][ T5857] Bluetooth: hci0: command tx timeout [ 441.451097][ T5857] Bluetooth: hci1: command tx timeout [ 441.451108][ T5158] Bluetooth: hci2: command tx timeout [ 441.566742][ T6529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.611198][ T5158] Bluetooth: hci3: command tx timeout [ 441.681130][ T5158] Bluetooth: hci4: command tx timeout [ 442.447240][ T9150] chnl_net:caif_netlink_parms(): no params data found [ 442.464365][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 442.590427][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 442.635065][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 442.807198][ T9156] chnl_net:caif_netlink_parms(): no params data found [ 442.832943][ T6529] bridge_slave_1: left allmulticast mode [ 442.832974][ T6529] bridge_slave_1: left promiscuous mode [ 442.833226][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.892282][ T6529] bridge_slave_0: left allmulticast mode [ 442.892306][ T6529] bridge_slave_0: left promiscuous mode [ 442.892521][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.281048][ T5158] Bluetooth: hci0: command tx timeout [ 443.521240][ T5158] Bluetooth: hci2: command tx timeout [ 443.534400][ T5158] Bluetooth: hci1: command tx timeout [ 443.681190][ T5158] Bluetooth: hci3: command tx timeout [ 443.761516][ T5158] Bluetooth: hci4: command tx timeout [ 443.866984][ T6529] bond1 (unregistering): (slave gretap1): Releasing active interface [ 444.982430][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.072161][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.095735][ T6529] bond0 (unregistering): Released all slaves [ 445.119926][ T6529] bond1 (unregistering): Released all slaves [ 445.147221][ T6529] bond2 (unregistering): Released all slaves [ 445.361160][ T5158] Bluetooth: hci0: command tx timeout [ 445.601327][ T5857] Bluetooth: hci2: command tx timeout [ 445.601414][ T5158] Bluetooth: hci1: command tx timeout [ 445.768686][ T5158] Bluetooth: hci3: command tx timeout [ 445.841243][ T5158] Bluetooth: hci4: command tx timeout [ 446.664157][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.664400][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.664615][ T9150] bridge_slave_0: entered allmulticast mode [ 446.666798][ T9150] bridge_slave_0: entered promiscuous mode [ 446.745686][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.745835][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.746086][ T9153] bridge_slave_0: entered allmulticast mode [ 446.755110][ T9153] bridge_slave_0: entered promiscuous mode [ 446.969372][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.970575][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.970799][ T9150] bridge_slave_1: entered allmulticast mode [ 446.993935][ T9150] bridge_slave_1: entered promiscuous mode [ 446.995286][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.995384][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.995508][ T9153] bridge_slave_1: entered allmulticast mode [ 446.996973][ T9153] bridge_slave_1: entered promiscuous mode [ 447.172338][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.172513][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.172713][ T9158] bridge_slave_0: entered allmulticast mode [ 447.175510][ T9158] bridge_slave_0: entered promiscuous mode [ 447.356927][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.357069][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.357279][ T9151] bridge_slave_0: entered allmulticast mode [ 447.360019][ T9151] bridge_slave_0: entered promiscuous mode [ 447.441324][ T5158] Bluetooth: hci0: command tx timeout [ 447.448254][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.448392][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.448618][ T9158] bridge_slave_1: entered allmulticast mode [ 447.481784][ T9158] bridge_slave_1: entered promiscuous mode [ 447.681027][ T6529] hsr_slave_0: left promiscuous mode [ 447.683492][ T5857] Bluetooth: hci2: command tx timeout [ 447.683535][ T5158] Bluetooth: hci1: command tx timeout [ 447.707353][ T6529] hsr_slave_1: left promiscuous mode [ 447.708291][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.708319][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.745073][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.745103][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.826100][ T6529] veth1_macvtap: left promiscuous mode [ 447.826217][ T6529] veth0_macvtap: left promiscuous mode [ 447.826397][ T6529] veth1_vlan: left promiscuous mode [ 447.826508][ T6529] veth0_vlan: left promiscuous mode [ 447.841176][ T5158] Bluetooth: hci3: command tx timeout [ 447.921073][ T5158] Bluetooth: hci4: command tx timeout [ 450.252992][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 450.542680][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 452.933262][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.933401][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.933608][ T9151] bridge_slave_1: entered allmulticast mode [ 452.936365][ T9151] bridge_slave_1: entered promiscuous mode [ 452.937473][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.937552][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.937667][ T9156] bridge_slave_0: entered allmulticast mode [ 452.939137][ T9156] bridge_slave_0: entered promiscuous mode [ 453.066096][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.109126][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.214763][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.214868][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.215016][ T9156] bridge_slave_1: entered allmulticast mode [ 453.216523][ T9156] bridge_slave_1: entered promiscuous mode [ 453.326639][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.330515][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.516140][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.716115][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.818400][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.984071][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.988177][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.105737][ T9150] team0: Port device team_slave_0 added [ 454.113569][ T9153] team0: Port device team_slave_0 added [ 454.235693][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.499447][ T9150] team0: Port device team_slave_1 added [ 454.502212][ T9153] team0: Port device team_slave_1 added [ 454.674965][ T9158] team0: Port device team_slave_0 added [ 454.860525][ T9151] team0: Port device team_slave_0 added [ 454.955734][ T9158] team0: Port device team_slave_1 added [ 455.097897][ T9151] team0: Port device team_slave_1 added [ 455.106784][ T9156] team0: Port device team_slave_0 added [ 455.173446][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.173463][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.173490][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.174907][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.174920][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.174945][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.324927][ T9156] team0: Port device team_slave_1 added [ 455.414321][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.414337][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.414364][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.418030][ T6529] IPVS: stop unused estimator thread 0... [ 455.420629][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.420644][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.420670][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.833462][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.833478][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.833505][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.906181][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.906198][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.906224][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.009688][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.009704][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.009729][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.027653][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.027668][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.027695][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.042625][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.042641][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.042667][ T9156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.100035][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.100051][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.100077][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.992678][ T9150] hsr_slave_0: entered promiscuous mode [ 456.994193][ T9150] hsr_slave_1: entered promiscuous mode [ 456.995105][ T9150] debugfs: 'hsr0' already exists in 'hsr' [ 456.995129][ T9150] Cannot create hsr debugfs directory [ 457.066642][ T9153] hsr_slave_0: entered promiscuous mode [ 457.067492][ T9153] hsr_slave_1: entered promiscuous mode [ 457.068014][ T9153] debugfs: 'hsr0' already exists in 'hsr' [ 457.068028][ T9153] Cannot create hsr debugfs directory [ 457.957995][ T9151] hsr_slave_0: entered promiscuous mode [ 457.959350][ T9151] hsr_slave_1: entered promiscuous mode [ 457.960255][ T9151] debugfs: 'hsr0' already exists in 'hsr' [ 457.960277][ T9151] Cannot create hsr debugfs directory [ 458.033592][ T9158] hsr_slave_0: entered promiscuous mode [ 458.034995][ T9158] hsr_slave_1: entered promiscuous mode [ 458.035899][ T9158] debugfs: 'hsr0' already exists in 'hsr' [ 458.035921][ T9158] Cannot create hsr debugfs directory [ 458.188486][ T6529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.481562][ T9156] hsr_slave_0: entered promiscuous mode [ 458.482829][ T9156] hsr_slave_1: entered promiscuous mode [ 458.483705][ T9156] debugfs: 'hsr0' already exists in 'hsr' [ 458.483728][ T9156] Cannot create hsr debugfs directory [ 458.665307][ T6529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.265164][ T6529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.775642][ T6529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.060528][ T6529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.288087][ T6529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.333747][ T9150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.357217][ T9150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.661169][ T9150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 461.897256][ T6529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.931714][ T9150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.428944][ T6529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.468541][ T6529] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.815623][ T6529] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.919457][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.072837][ T6529] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.112373][ T9151] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 464.147322][ T9151] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.184567][ T9151] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 464.336936][ T6529] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.423191][ T9151] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 464.514990][ T9150] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.570755][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.571840][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.624180][ T9153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 464.682802][ T9153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.731630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.731859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.762346][ T9153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.836356][ T9153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.262299][ T6529] bridge_slave_1: left allmulticast mode [ 465.262332][ T6529] bridge_slave_1: left promiscuous mode [ 465.262667][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.362963][ T6529] bridge_slave_0: left allmulticast mode [ 465.362994][ T6529] bridge_slave_0: left promiscuous mode [ 465.363253][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.831780][ T6529] bond1 (unregistering): (slave gretap1): Releasing active interface [ 467.832086][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.901816][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.945699][ T6529] bond0 (unregistering): Released all slaves [ 467.967843][ T6529] bond1 (unregistering): Released all slaves [ 467.986501][ T6529] bond2 (unregistering): Released all slaves [ 469.481843][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.543350][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.606566][ T6529] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 469.628747][ T6529] bond0 (unregistering): Released all slaves [ 471.121892][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.181878][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.210440][ T6529] bond0 (unregistering): Released all slaves [ 471.296467][ T9158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.408227][ T9158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.491384][ T9158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.544640][ T9158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.642500][ T6529] tipc: Left network mode [ 471.903759][ T9156] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 472.172488][ T9156] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 472.264193][ T9156] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 472.491099][ T9156] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 472.841754][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.202697][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.284990][ T9151] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.295224][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.870260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.870547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.014118][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.014323][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.048541][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.407374][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.408019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.515782][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.516004][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.557068][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.702704][ T6529] hsr_slave_0: left promiscuous mode [ 474.721408][ T6529] hsr_slave_1: left promiscuous mode [ 474.723568][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.723596][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.762100][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.762129][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.911174][ T6529] hsr_slave_0: left promiscuous mode [ 474.934194][ T6529] hsr_slave_1: left promiscuous mode [ 474.935124][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.935150][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.983857][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.983896][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.152734][ T6529] hsr_slave_0: left promiscuous mode [ 475.172156][ T6529] hsr_slave_1: left promiscuous mode [ 475.173069][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.173095][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.222214][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.222244][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.349154][ T6529] veth1_macvtap: left promiscuous mode [ 475.349227][ T6529] veth0_macvtap: left promiscuous mode [ 475.349423][ T6529] veth1_vlan: left promiscuous mode [ 475.461793][ T6529] veth1_macvtap: left promiscuous mode [ 475.461917][ T6529] veth0_macvtap: left promiscuous mode [ 475.464089][ T6529] veth1_vlan: left promiscuous mode [ 475.464304][ T6529] veth0_vlan: left promiscuous mode [ 475.591430][ T6529] veth1_macvtap: left promiscuous mode [ 475.591552][ T6529] veth0_macvtap: left promiscuous mode [ 475.591852][ T6529] veth1_vlan: left promiscuous mode [ 475.592099][ T6529] veth0_vlan: left promiscuous mode [ 478.356771][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 478.574128][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 483.035160][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 483.294800][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 487.616366][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 487.851797][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 490.199941][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.264693][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.273764][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.274396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.377965][ T9150] veth0_vlan: entered promiscuous mode [ 490.415684][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.415862][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.566125][ T9156] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.574375][ T9150] veth1_vlan: entered promiscuous mode [ 490.669630][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.671135][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.753401][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.761168][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.038423][ T9150] veth0_macvtap: entered promiscuous mode [ 491.121674][ T9150] veth1_macvtap: entered promiscuous mode [ 491.240103][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.339781][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.345955][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.464588][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.544374][ T1448] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.579453][ T1448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.588377][ T1448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.588667][ T1448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.253684][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.378216][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.378237][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.415545][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.674806][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.674827][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.817141][ T9151] veth0_vlan: entered promiscuous mode [ 492.892092][ T9158] veth0_vlan: entered promiscuous mode [ 492.922018][ T9151] veth1_vlan: entered promiscuous mode [ 492.957281][ T9153] veth0_vlan: entered promiscuous mode [ 493.022917][ T9158] veth1_vlan: entered promiscuous mode [ 493.112331][ T9366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.164872][ T9153] veth1_vlan: entered promiscuous mode [ 493.388364][ T9369] syzkaller1: entered promiscuous mode [ 493.388396][ T9369] syzkaller1: entered allmulticast mode [ 493.410174][ T9158] veth0_macvtap: entered promiscuous mode [ 493.419204][ T9151] veth0_macvtap: entered promiscuous mode [ 493.713122][ T9158] veth1_macvtap: entered promiscuous mode [ 493.729623][ T9151] veth1_macvtap: entered promiscuous mode [ 493.910292][ T9382] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 493.914587][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.916799][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.003761][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.008396][ T9153] veth0_macvtap: entered promiscuous mode [ 494.029940][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.067756][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.072680][ T9153] veth1_macvtap: entered promiscuous mode [ 494.098259][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.145251][ T1461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.187161][ T1461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.203172][ T9156] veth0_vlan: entered promiscuous mode [ 494.213905][ T1461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.241528][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.258672][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.292586][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.380342][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.397307][ T152] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.469714][ T9156] veth1_vlan: entered promiscuous mode [ 494.483535][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.775551][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.330594][ T6069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.347719][ T6529] IPVS: stop unused estimator thread 0... [ 495.369177][ T6529] IPVS: stop unused estimator thread 0... [ 495.386256][ T6069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.414761][ T6069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.440861][ T6069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.525629][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.525649][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.717286][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.717313][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.963361][ T9156] veth0_macvtap: entered promiscuous mode [ 496.122611][ T6532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.122631][ T6532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.132171][ T9156] veth1_macvtap: entered promiscuous mode [ 496.175968][ T9409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.303766][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.303785][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.411859][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.580620][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.588422][ T9416] syzkaller1: entered promiscuous mode [ 496.588453][ T9416] syzkaller1: entered allmulticast mode [ 497.284395][ T9434] FAT-fs (loop3): unable to read boot sector [ 498.206392][ T6529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.206414][ T6529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.933203][ T9458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.139856][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 500.171325][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 500.173649][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 500.197106][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.200431][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.479757][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 500.503453][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 500.505925][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 500.545405][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 500.549878][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 501.032277][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 501.035399][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 501.038629][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 501.041902][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 501.044498][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 501.329603][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.6.993'. [ 501.447147][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.447217][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.194915][ T9498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.743186][ T5857] Bluetooth: hci5: command tx timeout [ 502.881118][ T5857] Bluetooth: hci6: command tx timeout [ 502.906312][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1002'. [ 503.123379][ T5857] Bluetooth: hci3: command tx timeout [ 503.428619][ T9525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.802426][ T5857] Bluetooth: hci5: command tx timeout [ 504.962117][ T5857] Bluetooth: hci6: command tx timeout [ 505.331684][ T5857] Bluetooth: hci3: command tx timeout [ 505.520683][ T9567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1012'. [ 506.313317][ T6529] bridge_slave_1: left allmulticast mode [ 506.313351][ T6529] bridge_slave_1: left promiscuous mode [ 506.313604][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.883042][ T5857] Bluetooth: hci5: command tx timeout [ 506.898499][ T6529] bridge_slave_0: left allmulticast mode [ 506.898529][ T6529] bridge_slave_0: left promiscuous mode [ 506.898766][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.969684][ T9584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.041125][ T5857] Bluetooth: hci6: command tx timeout [ 507.370751][ T5857] Bluetooth: hci3: command tx timeout [ 508.571814][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.641893][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.686936][ T6529] bond0 (unregistering): Released all slaves [ 508.750272][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 508.971036][ T5857] Bluetooth: hci5: command tx timeout [ 509.121258][ T5857] Bluetooth: hci6: command tx timeout [ 509.441445][ T5857] Bluetooth: hci3: command tx timeout [ 509.952554][ T6529] hsr_slave_0: left promiscuous mode [ 509.991122][ T6529] hsr_slave_1: left promiscuous mode [ 509.992075][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.992111][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.054276][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.054307][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.184920][ T6529] veth1_macvtap: left promiscuous mode [ 510.185043][ T6529] veth0_macvtap: left promiscuous mode [ 510.185341][ T6529] veth1_vlan: left promiscuous mode [ 510.185549][ T6529] veth0_vlan: left promiscuous mode [ 513.381818][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 513.571823][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 515.540304][ T9467] chnl_net:caif_netlink_parms(): no params data found [ 515.655574][ T9475] chnl_net:caif_netlink_parms(): no params data found [ 515.918104][ T9652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.368432][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.368572][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.368780][ T9460] bridge_slave_0: entered allmulticast mode [ 516.391856][ T9460] bridge_slave_0: entered promiscuous mode [ 517.587386][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.587519][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.587728][ T9460] bridge_slave_1: entered allmulticast mode [ 517.590301][ T9460] bridge_slave_1: entered promiscuous mode [ 518.574376][ T9689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.836334][ T9700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1033'. [ 519.400608][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.619922][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.620071][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.620307][ T9467] bridge_slave_0: entered allmulticast mode [ 519.631122][ T9467] bridge_slave_0: entered promiscuous mode [ 519.638685][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.929859][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.932587][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.932848][ T9467] bridge_slave_1: entered allmulticast mode [ 519.941827][ T9467] bridge_slave_1: entered promiscuous mode [ 520.788408][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.788549][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.788797][ T9475] bridge_slave_0: entered allmulticast mode [ 520.801893][ T9475] bridge_slave_0: entered promiscuous mode [ 521.136690][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.136837][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.137061][ T9475] bridge_slave_1: entered allmulticast mode [ 521.145746][ T9475] bridge_slave_1: entered promiscuous mode [ 521.619235][ T9460] team0: Port device team_slave_0 added [ 521.797093][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.802516][ T9460] team0: Port device team_slave_1 added [ 522.219970][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.226872][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.427014][ T9747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.614866][ T9751] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1041'. [ 522.638203][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.334067][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.334084][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.334110][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.208997][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.209014][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.209042][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.398351][ T9467] team0: Port device team_slave_0 added [ 524.432859][ T9475] team0: Port device team_slave_0 added [ 524.439311][ T9467] team0: Port device team_slave_1 added [ 524.680207][ T6529] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.767826][ T9475] team0: Port device team_slave_1 added [ 525.880145][ T6529] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.908126][ T9788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.946191][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.946207][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.946234][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.168600][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.168617][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.168644][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.169982][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.169996][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.170022][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.759799][ T6529] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.807713][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.807730][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.807758][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.827604][ T9460] hsr_slave_0: entered promiscuous mode [ 526.828830][ T9460] hsr_slave_1: entered promiscuous mode [ 527.629540][ T6529] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.787064][ T9467] hsr_slave_0: entered promiscuous mode [ 527.791866][ T9467] hsr_slave_1: entered promiscuous mode [ 527.792818][ T9467] debugfs: 'hsr0' already exists in 'hsr' [ 527.792842][ T9467] Cannot create hsr debugfs directory [ 528.023714][ T9475] hsr_slave_0: entered promiscuous mode [ 528.025204][ T9475] hsr_slave_1: entered promiscuous mode [ 528.031852][ T9475] debugfs: 'hsr0' already exists in 'hsr' [ 528.031878][ T9475] Cannot create hsr debugfs directory [ 540.740509][ T9813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.944823][ T9851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.029385][ T9460] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.005120][ T9460] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.335738][ T9460] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.385503][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1073'. [ 544.517927][ T9870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.740028][ T9460] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.664936][ T6529] bridge_slave_1: left allmulticast mode [ 545.664966][ T6529] bridge_slave_1: left promiscuous mode [ 545.665197][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.779150][ T6529] bridge_slave_0: left allmulticast mode [ 545.779182][ T6529] bridge_slave_0: left promiscuous mode [ 545.779466][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.897177][ T6529] bridge_slave_1: left allmulticast mode [ 545.897221][ T6529] bridge_slave_1: left promiscuous mode [ 545.897466][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.012871][ T6529] bridge_slave_0: left allmulticast mode [ 546.012903][ T6529] bridge_slave_0: left promiscuous mode [ 546.013159][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.138601][ T9903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.343240][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.402625][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.443874][ T6529] bond0 (unregistering): Released all slaves [ 549.993739][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.073661][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.117856][ T6529] bond0 (unregistering): Released all slaves [ 550.173725][ T9905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1083'. [ 551.394763][ T9932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.778445][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1092'. [ 553.152972][ T9962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.553039][ T6529] hsr_slave_0: left promiscuous mode [ 553.571221][ T6529] hsr_slave_1: left promiscuous mode [ 553.574779][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.574808][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.624171][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.624201][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.771864][ T6529] hsr_slave_0: left promiscuous mode [ 553.791514][ T6529] hsr_slave_1: left promiscuous mode [ 553.792421][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.792449][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.999922][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.999953][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.188944][ T6529] veth1_macvtap: left promiscuous mode [ 554.189061][ T6529] veth0_macvtap: left promiscuous mode [ 554.189228][ T6529] veth1_vlan: left promiscuous mode [ 554.189350][ T6529] veth0_vlan: left promiscuous mode [ 554.540120][ T6529] veth1_macvtap: left promiscuous mode [ 554.540244][ T6529] veth0_macvtap: left promiscuous mode [ 554.540535][ T6529] veth1_vlan: left promiscuous mode [ 554.540743][ T6529] veth0_vlan: left promiscuous mode [ 555.654810][ T9984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.671893][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 557.893317][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 559.693606][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 559.698877][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 559.711289][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.731077][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.731847][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 559.835107][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.839541][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.842588][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.850229][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.851680][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 559.950161][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 559.967750][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 559.969484][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 559.970711][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 559.972853][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 561.761107][ T5857] Bluetooth: hci1: command tx timeout [ 561.921123][ T5857] Bluetooth: hci2: command tx timeout [ 562.091201][ T5857] Bluetooth: hci7: command tx timeout [ 562.711884][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 562.890111][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.890183][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.931810][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 563.852659][T10001] Bluetooth: hci1: command tx timeout [ 564.001099][T10001] Bluetooth: hci2: command tx timeout [ 564.161559][T10001] Bluetooth: hci7: command tx timeout [ 564.961231][T10001] Bluetooth: hci4: command 0x0406 tx timeout [ 564.964373][T10001] Bluetooth: hci0: command 0x0406 tx timeout [ 565.931052][ T5857] Bluetooth: hci1: command tx timeout [ 566.081130][ T5857] Bluetooth: hci2: command tx timeout [ 566.241893][ T5857] Bluetooth: hci7: command tx timeout [ 567.397891][T10033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.012267][ T5857] Bluetooth: hci1: command tx timeout [ 568.162647][ T5857] Bluetooth: hci2: command tx timeout [ 568.321123][ T5857] Bluetooth: hci7: command tx timeout [ 569.084938][T10060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.586411][ T9996] chnl_net:caif_netlink_parms(): no params data found [ 570.696107][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 570.705107][ T9993] chnl_net:caif_netlink_parms(): no params data found [ 570.831103][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 570.901057][ T5929] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 570.981020][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 570.984534][ T31] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 570.984575][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 570.984617][ T31] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 570.984645][ T31] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 570.984673][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 570.987686][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 570.987713][ T31] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 570.987735][ T31] usb 2-1: Product: syz [ 570.987750][ T31] usb 2-1: Manufacturer: syz [ 570.987765][ T31] usb 2-1: SerialNumber: syz [ 571.051050][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 571.089224][ T5929] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 571.089289][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 571.089320][ T5929] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.089346][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.089372][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.090838][ T5929] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 571.111019][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 571.111055][ T5929] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.111081][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.111106][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.121912][ T5929] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 571.121966][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 571.121994][ T5929] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.122021][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.122047][ T5929] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.258860][ T5929] usb 7-1: string descriptor 0 read error: -22 [ 571.259011][ T5929] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 571.259035][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.311698][ T31] usb 2-1: config 0 descriptor?? [ 571.350494][ T31] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 571.366657][ T5929] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 571.382382][ T31] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 571.558855][ T31] usb 7-1: USB disconnect, device number 2 [ 571.610663][ T9] usb 2-1: USB disconnect, device number 7 [ 571.615638][ T9] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 572.061092][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 572.129803][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.129942][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.130085][ T9996] bridge_slave_0: entered allmulticast mode [ 572.144869][ T9996] bridge_slave_0: entered promiscuous mode [ 572.211141][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 572.216462][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 572.216507][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 572.216549][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 572.216577][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 572.216606][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 572.219874][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 572.219903][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 572.219924][ T9] usb 2-1: Product: syz [ 572.219939][ T9] usb 2-1: Manufacturer: syz [ 572.219954][ T9] usb 2-1: SerialNumber: syz [ 572.232248][ T9] usb 2-1: config 0 descriptor?? [ 572.245509][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 572.253243][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 572.558380][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.558526][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.558753][ T9996] bridge_slave_1: entered allmulticast mode [ 572.568945][ T9996] bridge_slave_1: entered promiscuous mode [ 572.728430][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.728586][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.728831][ T9999] bridge_slave_0: entered allmulticast mode [ 572.750104][ T9999] bridge_slave_0: entered promiscuous mode [ 572.760404][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.760554][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.760760][ T9993] bridge_slave_0: entered allmulticast mode [ 572.763527][ T9993] bridge_slave_0: entered promiscuous mode [ 572.793939][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.794516][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.874529][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.874671][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.875016][ T9999] bridge_slave_1: entered allmulticast mode [ 573.891060][ T9999] bridge_slave_1: entered promiscuous mode [ 573.892477][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.892606][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.892804][ T9993] bridge_slave_1: entered allmulticast mode [ 573.908347][ T9993] bridge_slave_1: entered promiscuous mode [ 574.459806][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.625996][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.651171][ T5921] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 574.735778][ T9] usb 2-1: USB disconnect, device number 8 [ 574.749510][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 574.772635][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.800666][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.812662][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 574.815096][ T5921] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 574.815160][ T5921] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.815183][ T5921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.815208][ T5921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.815233][ T5921] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.815277][ T5921] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 574.815301][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.961684][T10126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1140'. [ 575.020869][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.034579][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.036575][ T5921] usb 7-1: GET_CAPABILITIES returned 0 [ 575.036617][ T5921] usbtmc 7-1:16.0: can't read capabilities [ 575.366155][T10124] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 575.368132][ T5921] usb 7-1: USB disconnect, device number 3 [ 575.606673][ T9996] team0: Port device team_slave_0 added [ 575.641224][ T5950] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 575.767292][ T9996] team0: Port device team_slave_1 added [ 575.770289][ T9999] team0: Port device team_slave_0 added [ 575.784908][ T9993] team0: Port device team_slave_0 added [ 575.807389][ T5950] usb 2-1: config index 0 descriptor too short (expected 61476, got 36) [ 575.807417][ T5950] usb 2-1: config 25 has too many interfaces: 135, using maximum allowed: 32 [ 575.807437][ T5950] usb 2-1: config 25 has an invalid descriptor of length 225, skipping remainder of the config [ 575.807457][ T5950] usb 2-1: config 25 has 0 interfaces, different from the descriptor's value: 135 [ 575.807495][ T5950] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 575.807519][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.871294][ T5921] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 576.021560][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 576.024409][ T5921] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 576.024466][ T5921] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.024490][ T5921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.024515][ T5921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.024540][ T5921] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.024584][ T5921] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 576.024608][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.109773][ T9] usb 2-1: USB disconnect, device number 9 [ 576.137294][ T9999] team0: Port device team_slave_1 added [ 576.156046][ T9993] team0: Port device team_slave_1 added [ 576.249042][ T5921] usb 7-1: usb_control_msg returned -32 [ 576.249091][ T5921] usbtmc 7-1:16.0: can't read capabilities [ 576.591321][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 576.611913][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.612444][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.673393][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.673409][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.673435][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.741216][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 576.746674][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 576.766080][ T9] usb 2-1: config index 0 descriptor too short (expected 89, got 36) [ 576.766108][ T9] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 576.766128][ T9] usb 2-1: config 4 has an invalid descriptor of length 53, skipping remainder of the config [ 576.766148][ T9] usb 2-1: config 4 has no interface number 0 [ 576.770552][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 576.770582][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.770604][ T9] usb 2-1: Product: syz [ 576.770618][ T9] usb 2-1: Manufacturer: syz [ 576.770633][ T9] usb 2-1: SerialNumber: syz [ 576.973738][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.973756][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.973782][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.975630][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.975701][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.975728][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.980132][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.980145][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.980163][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.009060][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.017339][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.092290][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.092307][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.092334][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.100006][ T9] usb 2-1: Found UVC 0.00 device syz (04f2:b746) [ 577.100049][ T9] usb 2-1: No valid video chain found. [ 577.109065][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.109080][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.109106][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.120767][ T9] usb 2-1: USB disconnect, device number 10 [ 577.641555][ T9996] hsr_slave_0: entered promiscuous mode [ 577.644869][ T9996] hsr_slave_1: entered promiscuous mode [ 577.649329][ T9996] debugfs: 'hsr0' already exists in 'hsr' [ 577.649354][ T9996] Cannot create hsr debugfs directory [ 577.691832][ T31] usb 7-1: USB disconnect, device number 4 [ 578.208221][ T9999] hsr_slave_0: entered promiscuous mode [ 578.220457][ T9999] hsr_slave_1: entered promiscuous mode [ 578.228646][ T9999] debugfs: 'hsr0' already exists in 'hsr' [ 578.228672][ T9999] Cannot create hsr debugfs directory [ 578.268700][ T9993] hsr_slave_0: entered promiscuous mode [ 578.277596][ T9993] hsr_slave_1: entered promiscuous mode [ 578.279658][ T9993] debugfs: 'hsr0' already exists in 'hsr' [ 578.279683][ T9993] Cannot create hsr debugfs directory [ 579.077314][T10158] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1148'. [ 579.271366][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 579.431560][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 579.435463][ T5921] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.435493][ T5921] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 579.435519][ T5921] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.435548][ T5921] usb 7-1: config 1 interface 0 has no altsetting 0 [ 579.438828][ T5921] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 579.438855][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.438876][ T5921] usb 7-1: Product: syz [ 579.438890][ T5921] usb 7-1: Manufacturer: syz [ 579.438906][ T5921] usb 7-1: SerialNumber: syz [ 579.709538][ T5921] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 580.130284][T10156] usblp0:failed reading printer status (-32) [ 580.137254][ T5921] usb 7-1: USB disconnect, device number 5 [ 580.142206][ T5921] usblp0: removed [ 581.147801][T10182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1156'. [ 581.180724][T10185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.815954][ T6529] bridge_slave_1: left allmulticast mode [ 581.815987][ T6529] bridge_slave_1: left promiscuous mode [ 581.816238][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.841141][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 581.944095][ T6529] bridge_slave_0: left allmulticast mode [ 581.944128][ T6529] bridge_slave_0: left promiscuous mode [ 581.944401][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.005340][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.005382][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 582.005409][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 582.005430][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.005473][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.005497][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.010775][ T31] usb 7-1: config 0 descriptor?? [ 582.117653][ T6529] bridge_slave_1: left allmulticast mode [ 582.117686][ T6529] bridge_slave_1: left promiscuous mode [ 582.117950][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.209982][ T6529] bridge_slave_0: left allmulticast mode [ 583.210067][ T6529] bridge_slave_0: left promiscuous mode [ 583.210477][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.395016][ T31] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 583.488863][ T6529] bridge_slave_1: left allmulticast mode [ 583.488895][ T6529] bridge_slave_1: left promiscuous mode [ 583.489140][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.504415][T10220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.541675][ T5950] usb 7-1: USB disconnect, device number 6 [ 583.612558][ T6529] bridge_slave_0: left allmulticast mode [ 583.612589][ T6529] bridge_slave_0: left promiscuous mode [ 583.612871][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.635365][T10218] fido_id[10218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 583.711437][T10223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1167'. [ 584.061857][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.182472][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.533435][ T6529] bond0 (unregistering): Released all slaves [ 584.791827][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.871926][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.935275][ T6529] bond0 (unregistering): Released all slaves [ 585.351751][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.461205][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.540009][ T6529] bond0 (unregistering): Released all slaves [ 585.901146][ T5921] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 586.931038][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 586.935146][ T5921] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 586.935174][ T5921] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 586.935199][ T5921] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.935228][ T5921] usb 7-1: config 1 interface 0 has no altsetting 0 [ 586.971498][ T5921] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 586.971529][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.971550][ T5921] usb 7-1: Product: syz [ 586.971565][ T5921] usb 7-1: Manufacturer: syz [ 586.971580][ T5921] usb 7-1: SerialNumber: syz [ 587.242810][ T5921] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 587.515983][T10236] usblp0:failed reading printer status (-32) [ 587.521615][ T6015] usb 7-1: USB disconnect, device number 7 [ 587.528495][ T6015] usblp0: removed [ 587.671194][ T6529] hsr_slave_0: left promiscuous mode [ 587.716584][ T6529] hsr_slave_1: left promiscuous mode [ 587.717504][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.753652][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.951273][ T6529] hsr_slave_0: left promiscuous mode [ 587.995668][ T6529] hsr_slave_1: left promiscuous mode [ 587.996575][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.032695][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.251392][ T6529] hsr_slave_0: left promiscuous mode [ 588.291205][ T6529] hsr_slave_1: left promiscuous mode [ 588.294347][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.344105][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.476218][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 589.863831][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 591.969080][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 592.112109][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 593.413645][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 593.552067][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 595.995260][ T9999] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 596.091077][ T9999] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 596.149982][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1197'. [ 596.251081][ T9999] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 596.494292][ T9999] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 596.866933][ T9996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 596.968365][ T9996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 597.067666][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1206'. [ 597.114124][ T9996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 597.310042][ T9996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 597.822581][T10355] FAT-fs (loop13): unable to read boot sector [ 598.866548][ T9993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 598.944781][ T9993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 599.005262][ T9993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 599.027804][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 599.077565][ T9993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 599.479780][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.630063][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.674899][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.681169][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.738687][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.770591][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.770724][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.851123][ T9142] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 599.899885][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.923747][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.960083][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.960223][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.014447][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.014670][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.022924][ T9142] usb 2-1: Using ep0 maxpacket: 8 [ 600.025745][ T9142] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 600.025803][ T9142] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.025825][ T9142] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.025850][ T9142] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.025873][ T9142] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.025915][ T9142] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.025938][ T9142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.146699][ T9993] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.163000][ T5950] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 600.248810][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.249056][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.256895][ T9142] usb 2-1: GET_CAPABILITIES returned 0 [ 600.256942][ T9142] usbtmc 2-1:16.0: can't read capabilities [ 600.321169][ T5950] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 600.321198][ T5950] usb 7-1: config 0 has no interface number 0 [ 600.322304][ T5950] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.322333][ T5950] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 600.322361][ T5950] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 600.322387][ T5950] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 600.322413][ T5950] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 600.322440][ T5950] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.322484][ T5950] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 600.322507][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.322577][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.323759][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.446847][ T5950] usb 7-1: config 0 descriptor?? [ 600.447798][T10385] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 600.447919][T10385] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 600.506931][ T5950] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 601.057644][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.061264][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.434179][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.750530][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.022480][ T9996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.183141][ T9999] veth0_vlan: entered promiscuous mode [ 603.352861][ T9999] veth1_vlan: entered promiscuous mode [ 603.458376][ T9993] veth0_vlan: entered promiscuous mode [ 603.590709][ T9993] veth1_vlan: entered promiscuous mode [ 603.706615][ T9996] veth0_vlan: entered promiscuous mode [ 603.730030][ T9999] veth0_macvtap: entered promiscuous mode [ 603.789099][ T9999] veth1_macvtap: entered promiscuous mode [ 603.829790][ T9996] veth1_vlan: entered promiscuous mode [ 604.000159][ T9993] veth0_macvtap: entered promiscuous mode [ 604.043525][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.079660][ T9993] veth1_macvtap: entered promiscuous mode [ 604.098487][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.258284][ T152] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.270076][ T152] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.275434][ T152] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.324720][ T9996] veth0_macvtap: entered promiscuous mode [ 604.337414][ T69] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.427119][ T9996] veth1_macvtap: entered promiscuous mode [ 604.438831][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.480507][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.718951][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.719505][ T6529] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.778439][ T6532] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.837245][ T6532] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.870217][ T6532] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.945816][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.098120][ T6532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.098143][ T6532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.134602][ T1177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.140531][ T1177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.173964][ T1177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.247391][ T1177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.465586][ T6532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.465609][ T6532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.542057][T10381] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 605.593831][ T31] usb 2-1: USB disconnect, device number 11 [ 605.701658][ T6016] usb 7-1: USB disconnect, device number 8 [ 605.742114][ T6016] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 605.786372][T10437] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1224'. [ 605.949303][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.949326][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.287369][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.287391][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.434208][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.434230][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.594036][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.594058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.308378][ T5832] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 608.611744][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 608.782158][ T5832] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 608.782229][ T5832] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.782255][ T5832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.782280][ T5832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.782306][ T5832] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.782356][ T5832] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 608.782378][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.229483][ T5832] usb 7-1: GET_CAPABILITIES returned 0 [ 609.229532][ T5832] usbtmc 7-1:16.0: can't read capabilities [ 609.420518][T10491] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1234'. [ 609.432870][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1235'. [ 609.448379][ T6016] usb 7-1: USB disconnect, device number 9 [ 609.549029][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1235'. [ 610.311573][T10520] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1248'. [ 610.440320][T10521] FAT-fs (loop15): unable to read boot sector [ 611.770360][T10529] input: syz0 as /devices/virtual/input/input9 [ 613.177337][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1269'. [ 613.883123][T10595] input: syz0 as /devices/virtual/input/input10 [ 614.250846][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1279'. [ 615.295223][ T37] audit: type=1326 audit(1758964605.186:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10608 comm="syz.1.1280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f380e0ceec9 code=0x0 [ 616.045037][T10633] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1291'. [ 617.872011][T10668] Device name cannot be null; rc = [-22] [ 618.116344][ T9142] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 618.918046][ T9142] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 618.918075][ T9142] usb 9-1: config 0 has no interface number 0 [ 618.918120][ T9142] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.918144][ T9142] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 618.918171][ T9142] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 618.918197][ T9142] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 618.918225][ T9142] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 618.918259][ T9142] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 618.918303][ T9142] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 618.918328][ T9142] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.923754][ T9142] usb 9-1: config 0 descriptor?? [ 618.941804][T10667] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 618.941929][T10667] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 619.116778][ T9142] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 619.442541][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.443880][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.446690][ T6016] usb 9-1: USB disconnect, device number 2 [ 620.382734][ T6016] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 621.615753][T10721] Device name cannot be null; rc = [-22] [ 623.283005][ T6014] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 623.453635][ T6014] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 623.453664][ T6014] usb 9-1: config 0 has no interface number 0 [ 623.453714][ T6014] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.453739][ T6014] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 623.453766][ T6014] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 623.453801][ T6014] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 623.453828][ T6014] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 623.453854][ T6014] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 623.453898][ T6014] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 623.453921][ T6014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.667014][ T6014] usb 9-1: config 0 descriptor?? [ 623.668092][T10742] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 623.668298][T10742] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 623.723385][ T6014] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 624.133676][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.151704][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.185642][ T1230] usb 9-1: USB disconnect, device number 3 [ 624.206373][ T1230] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 624.333370][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.333446][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.641181][ T6016] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 624.804141][ T6016] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.804175][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.804203][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 624.804227][ T6016] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.804270][ T6016] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.804294][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.816435][ T6016] usb 2-1: config 0 descriptor?? [ 625.311108][ T1230] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 625.341624][ T6016] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 625.461009][ T1230] usb 7-1: Using ep0 maxpacket: 8 [ 625.463513][ T1230] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 625.463581][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 625.463611][ T1230] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.463638][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 625.463665][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 625.465274][ T1230] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 625.465330][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 625.465359][ T1230] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.465386][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 625.465413][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 625.467107][ T1230] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 625.467168][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 625.467200][ T1230] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.467227][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 625.467253][ T1230] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 625.583883][ T1230] usb 7-1: string descriptor 0 read error: -22 [ 625.584029][ T1230] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 625.584054][ T1230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.593131][ T9142] usb 2-1: USB disconnect, device number 12 [ 626.138921][T10799] fido_id[10799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 626.175353][ T1230] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 626.180737][ T1230] usb 7-1: USB disconnect, device number 10 [ 626.870564][T10818] Device name cannot be null; rc = [-22] [ 627.733163][ T6014] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 627.870524][T10828] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1357'. [ 627.888041][ T6014] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 627.888072][ T6014] usb 8-1: config 0 has no interface number 0 [ 627.888119][ T6014] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 627.888144][ T6014] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 627.888172][ T6014] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 627.888199][ T6014] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 627.888226][ T6014] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 627.888252][ T6014] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 627.888296][ T6014] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 627.888319][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.905468][ T6014] usb 8-1: config 0 descriptor?? [ 627.907191][T10822] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 627.907507][T10822] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 628.015235][ T6014] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 628.306296][T10840] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1362'. [ 628.363535][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.384684][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.401279][ T6014] usb 8-1: USB disconnect, device number 2 [ 628.440501][ T6014] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 628.671273][ T1230] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 628.896681][ T1230] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 628.896717][ T1230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 628.896745][ T1230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 628.896768][ T1230] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.896813][ T1230] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.896837][ T1230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.914460][ T1230] usb 7-1: config 0 descriptor?? [ 629.251158][T10756] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 629.399388][ T1230] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 629.411082][T10756] usb 9-1: Using ep0 maxpacket: 8 [ 629.415199][T10756] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 629.418888][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 629.418925][T10756] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.418952][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.418981][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.428249][T10756] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 629.428314][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 629.428345][T10756] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.428371][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.428488][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.435552][T10756] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 629.435613][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 629.435642][T10756] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.435670][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.435697][T10756] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.481302][T10756] usb 9-1: string descriptor 0 read error: -22 [ 629.481444][T10756] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 629.481469][T10756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.575129][T10756] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 629.693453][T10756] usb 7-1: USB disconnect, device number 11 [ 629.766386][ T9] usb 9-1: USB disconnect, device number 4 [ 630.385919][T10863] fido_id[10863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 632.551534][T10906] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1383'. [ 632.912106][ T1230] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 633.051095][ T1230] usb 7-1: device descriptor read/64, error -71 [ 633.301034][ T1230] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 633.651106][ T1230] usb 7-1: device descriptor read/64, error -71 [ 633.898979][ T1230] usb usb7-port1: attempt power cycle [ 634.417881][T10929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1390'. [ 634.601110][ T1230] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 634.649878][ T1230] usb 7-1: device descriptor read/8, error -71 [ 634.881134][ T1230] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 634.901764][ T1230] usb 7-1: device descriptor read/8, error -71 [ 635.011558][ T1230] usb usb7-port1: unable to enumerate USB device [ 636.517750][T10963] input: syz0 as /devices/virtual/input/input13 [ 638.750957][T11001] Device name cannot be null; rc = [-22] [ 639.708129][T11017] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1418'. [ 640.321121][ T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 640.481375][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 640.484586][ T31] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 640.484648][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.484671][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.484696][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.484720][ T31] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.484765][ T31] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 640.484789][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.744238][ T31] usb 9-1: GET_CAPABILITIES returned 0 [ 640.744289][ T31] usbtmc 9-1:16.0: can't read capabilities [ 641.104992][T11030] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 641.131360][ T9144] usb 9-1: USB disconnect, device number 5 [ 641.275659][T11060] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1431'. [ 641.611218][ T9144] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 641.784226][ T9144] usb 9-1: Using ep0 maxpacket: 8 [ 641.786621][ T9144] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 641.786679][ T9144] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.786703][ T9144] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.786729][ T9144] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.786763][ T9144] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.786806][ T9144] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 641.786830][ T9144] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.022626][ T9144] usb 9-1: usb_control_msg returned -32 [ 642.022676][ T9144] usbtmc 9-1:16.0: can't read capabilities [ 643.112185][ T9] usb 9-1: USB disconnect, device number 6 [ 644.564249][T10756] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 644.711072][T10756] usb 8-1: Using ep0 maxpacket: 8 [ 644.713403][T10756] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 644.713462][T10756] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.713486][T10756] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.713512][T10756] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.713534][T10756] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.713575][T10756] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 644.713599][T10756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.054563][T10756] usb 8-1: GET_CAPABILITIES returned 0 [ 645.054613][T10756] usbtmc 8-1:16.0: can't read capabilities [ 645.384597][T11139] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 645.403411][T10756] usb 8-1: USB disconnect, device number 3 [ 646.032689][T10756] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 646.183705][T10756] usb 8-1: Using ep0 maxpacket: 8 [ 646.190526][T10756] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 646.190587][T10756] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.190611][T10756] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.190637][T10756] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.190662][T10756] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.190707][T10756] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 646.190731][T10756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.511744][T10756] usb 8-1: usb_control_msg returned -32 [ 646.511795][T10756] usbtmc 8-1:16.0: can't read capabilities [ 646.552424][T10756] usb 8-1: USB disconnect, device number 4 [ 646.948931][T11199] overlayfs: missing 'workdir' [ 647.160534][T11204] tap0: tun_chr_ioctl cmd 1074025675 [ 647.160558][T11204] tap0: persist enabled [ 647.181539][T11204] tap0: tun_chr_ioctl cmd 1074025675 [ 647.181561][T11204] tap0: persist disabled [ 648.722521][T11238] overlayfs: missing 'workdir' [ 649.871470][T11261] Illegal XDP return value 1387585928 on prog (id 133) dev N/A, expect packet loss! [ 653.364784][T11322] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 653.364808][T11322] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11322, name: syz.1.1517 [ 653.364826][T11322] preempt_count: 1, expected: 0 [ 653.364836][T11322] RCU nest depth: 1, expected: 1 [ 653.364860][T11322] 3 locks held by syz.1.1517/11322: [ 653.364873][T11322] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 653.364941][T11322] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 653.364997][T11322] #2: ffff888076eca298 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170 [ 653.365058][T11322] Preemption disabled at: [ 653.365064][T11322] [] bpf_test_timer_enter+0xf8/0x140 [ 653.365110][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.1.1517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 653.365135][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.365152][T11322] Call Trace: [ 653.365160][T11322] [ 653.365173][T11322] dump_stack_lvl+0x189/0x250 [ 653.365209][T11322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.365241][T11322] ? __pfx__printk+0x10/0x10 [ 653.365268][T11322] ? print_lock_name+0xde/0x100 [ 653.365289][T11322] ? bpf_test_timer_enter+0xf8/0x140 [ 653.365321][T11322] __might_resched+0x44b/0x5d0 [ 653.365350][T11322] ? bpf_test_timer_enter+0xf8/0x140 [ 653.365378][T11322] ? __pfx___might_resched+0x10/0x10 [ 653.365402][T11322] ? sock_map_delete_elem+0xb7/0x170 [ 653.365448][T11322] rt_spin_lock+0xc7/0x2c0 [ 653.365479][T11322] ? __pfx_rt_spin_lock+0x10/0x10 [ 653.365504][T11322] ? ktime_get+0x3e/0x1f0 [ 653.365524][T11322] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 653.365547][T11322] ? __pfx___cant_migrate+0x10/0x10 [ 653.365574][T11322] ? sock_map_delete_elem+0xa2/0x170 [ 653.365604][T11322] sock_map_delete_elem+0xb7/0x170 [ 653.365639][T11322] bpf_prog_2c29ac5cdc6b1842+0x43/0x4b [ 653.365666][T11322] bpf_flow_dissect+0x132/0x400 [ 653.365696][T11322] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 653.365741][T11322] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 653.365782][T11322] ? __fget_files+0x2a/0x420 [ 653.365819][T11322] ? __fget_files+0x2a/0x420 [ 653.365856][T11322] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 653.365887][T11322] bpf_prog_test_run+0x2ca/0x340 [ 653.365921][T11322] __sys_bpf+0x581/0x870 [ 653.365948][T11322] ? __pfx___sys_bpf+0x10/0x10 [ 653.365996][T11322] ? rcu_is_watching+0x15/0xb0 [ 653.366035][T11322] __x64_sys_bpf+0x7c/0x90 [ 653.366059][T11322] do_syscall_64+0xfa/0x3b0 [ 653.366078][T11322] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.366109][T11322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.366130][T11322] ? clear_bhb_loop+0x60/0xb0 [ 653.366156][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.366181][T11322] RIP: 0033:0x7f380e0ceec9 [ 653.366199][T11322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.366217][T11322] RSP: 002b:00007f380c336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 653.366238][T11322] RAX: ffffffffffffffda RBX: 00007f380e325fa0 RCX: 00007f380e0ceec9 [ 653.366255][T11322] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 653.366269][T11322] RBP: 00007f380e151f91 R08: 0000000000000000 R09: 0000000000000000 [ 653.366283][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.366297][T11322] R13: 00007f380e326038 R14: 00007f380e325fa0 R15: 00007fff19d89bf8 [ 653.366332][T11322] [ 654.435265][T11330] FAT-fs (loop15): unable to read boot sector [ 657.914931][ T1542] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.268076][ T1542] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.593792][ T1542] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.888775][ T1542] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.358690][ T1542] bridge_slave_1: left allmulticast mode [ 659.358725][ T1542] bridge_slave_1: left promiscuous mode [ 659.358990][ T1542] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.463681][ T1542] bridge_slave_0: left allmulticast mode [ 659.463714][ T1542] bridge_slave_0: left promiscuous mode [ 659.463991][ T1542] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.594174][ T1542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.653763][ T1542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.678860][ T1542] bond0 (unregistering): Released all slaves [ 663.292731][ T1542] hsr_slave_0: left promiscuous mode [ 663.331169][ T1542] hsr_slave_1: left promiscuous mode [ 663.332151][ T1542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.332179][ T1542] batman_adv: batadv0: Removing interface: batadv_slave_0