last executing test programs: 26m22.535441984s ago: executing program 0 (id=24): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec0800000000600001fff00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f213", 0x65}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$proc_mixer(r0, &(0x7f00000003c0)=[{'IGAIN', @void}, {'SYNTH', @val={' \'', 'Synth Capture Switch'}}], 0x38) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0x174, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "5dfc831e5b2eedb1a43acd4f9401db22b2bd513f8c6cccf30952ce3681f3e4da750a6018687007e8b5f7037ce9421d85d57be5e5"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x603d43164fbb29ae}, @ETHTOOL_A_LINKMODES_OURS={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90c5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '**,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/cpu/#/msr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.&/^?\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\' '}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xded}]}]}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "996dce71ecf13b4ee2dde1d99224524b9fb2068b7d357c4327d1e3c9ab8c03100abae6df1d0a094092eae7a16b6e857bb6fdd0b705da5b85"}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x0) 26m11.399828965s ago: executing program 0 (id=43): r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x683, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x1f, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 25m56.15658335s ago: executing program 32 (id=43): r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x683, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x1f, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 25m1.370314369s ago: executing program 33 (id=114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x6c, r3, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @probe_request={{{}, {0x3}, @broadcast, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xb3}, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x6c}}, 0x14) 24m34.91637331s ago: executing program 34 (id=182): bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 23m0.831125783s ago: executing program 2 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a01010200000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) 22m57.260055294s ago: executing program 2 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) 22m56.274613376s ago: executing program 2 (id=322): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000820000000000000000000000090038000100feff02000300030000000f000000080000000000f6fffe070000000000000000000000000000e5"], 0xed) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0xc801) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r4, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r2, &(0x7f0000002c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0x4, 0xffffffff81021600, 0xcc0, 0x0, 0x618d915f, 0x8, 0x0, 0x0, 0x10, 0x9}}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 22m55.249598556s ago: executing program 2 (id=324): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x20000004) setpgid(r2, 0x0) setpgid(0x0, r2) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008510fffffeffffffffff0000c8decb60969b2822e29f9e2f16091143fae0d1c0cd418dd2728131a6328849b71eeb0f834513756e7f50b9ed92e2490453a180972ccb8882bdd576d82e08927cc982d6738e1bda16fc914ce7303f63c3487cec718bcdf518c7f3e2062a8b987837028e7b24a3e8069d0f43af0410c4655d03f08ccd0fb31637", @ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 22m54.297565152s ago: executing program 2 (id=325): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x24008800) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x200], &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x10000}) munlockall() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000280), &(0x7f0000000300)=[{}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 22m53.171801467s ago: executing program 2 (id=327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 22m52.842822676s ago: executing program 35 (id=327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 22m52.505349389s ago: executing program 4 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) 22m51.601245895s ago: executing program 4 (id=330): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22m51.419930329s ago: executing program 4 (id=331): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 22m51.372271293s ago: executing program 4 (id=332): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x20000004) setpgid(r2, 0x0) setpgid(0x0, r2) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008510fffffeffffffffff0000c8decb60969b2822e29f9e2f16091143fae0d1c0cd418dd2728131a6328849b71eeb0f834513756e7f50b9ed92e2490453a180972ccb8882bdd576d82e08927cc982d6738e1bda16fc914ce7303f63c3487cec718bcdf518c7f3e2062a8b987837028e7b24a3e8069d0f43af0410c4655d03f08ccd0fb31637", @ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 22m51.290721646s ago: executing program 4 (id=333): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x3, r6, 0x0, 0xffffffffffffffff, 0x0, 0xd0, 0x16a4}, 0x1ff, 0xb8, 0xd, 0x4, r7, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 22m50.587862966s ago: executing program 4 (id=334): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x24008800) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x200], &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x10000}) munlockall() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000280), &(0x7f0000000300)=[{}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 22m50.353716325s ago: executing program 36 (id=334): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x24008800) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x200], &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x10000}) munlockall() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000280), &(0x7f0000000300)=[{}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 21m47.845419351s ago: executing program 8 (id=353): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0201000a0e000000000000000400000005000600000000000a00000000000000fc000000000000000000000000000000000004000000000005000500000000000a00000000000000060100"], 0x70}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000300)) 21m46.604141125s ago: executing program 8 (id=355): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 21m46.319073367s ago: executing program 8 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) 21m43.318561566s ago: executing program 8 (id=363): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x20000004) setpgid(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008510fffffeffffffffff0000c8decb60969b2822e29f9e2f16091143fae0d1c0cd418dd2728131a6328849b71eeb0f834513756e7f50b9ed92e2490453a180972ccb8882bdd576d82e08927cc982d6738e1bda16fc914ce7303f63c3487cec718bcdf518c7f3e2062a8b987837028e7b24a3e8069d0f43af0410c4655d03f08ccd0fb31637", @ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 21m43.004096903s ago: executing program 8 (id=364): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0201000a0e000000000000000400000005000600000000000a00000000000000fc000000000000000000000000000000000004000000000005000500000000000a00000000000000060100"], 0x70}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000300)) 21m34.379900908s ago: executing program 8 (id=381): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x4, &(0x7f0000000480)=""/38, 0x26}, 0x8}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001c40)=""/223, 0xdf}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x2, &(0x7f0000001d40)=""/111, 0x6f}, 0x9}], 0x2, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 21m33.374045805s ago: executing program 37 (id=381): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x4, &(0x7f0000000480)=""/38, 0x26}, 0x8}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001c40)=""/223, 0xdf}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x2, &(0x7f0000001d40)=""/111, 0x6f}, 0x9}], 0x2, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 20m50.468784982s ago: executing program 7 (id=453): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x3, r7, 0x0, 0xffffffffffffffff, 0x0, 0xd0, 0x16a4}, 0x1ff, 0xb8, 0xd, 0x4, r8, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 20m48.680492021s ago: executing program 7 (id=454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 20m47.418481223s ago: executing program 7 (id=455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000840)={{}, 0x1}) 20m46.079893596s ago: executing program 7 (id=457): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r7, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x3, r8, 0x0, 0xffffffffffffffff, r9, 0xd0, 0x16a4}, 0x1ff, 0xb8, 0xd, 0x4, r10, 0x0, 0x1}) fchown(0xffffffffffffffff, r6, r9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 20m45.957880221s ago: executing program 5 (id=458): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1d}}]}}) read$FUSE(r0, 0x0, 0x0) 20m44.502866553s ago: executing program 5 (id=462): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 20m44.330788516s ago: executing program 7 (id=463): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x3, r7, 0x0, 0xffffffffffffffff, 0x0, 0xd0, 0x16a4}, 0x1ff, 0xb8, 0xd, 0x4, r8, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 20m43.18847482s ago: executing program 5 (id=464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 20m41.988290305s ago: executing program 5 (id=465): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="7706", 0x2}, {0x0}, {&(0x7f0000000300)="bf281997984d621f", 0x8}], 0x3, 0x0, 0x7f) 20m41.721414084s ago: executing program 7 (id=466): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x81, 0x0, 0x0, 0x0, 0x7f5, &(0x7f0000000140)='veth1_to_team\x00', 0x100000000, 0x8, 0x1157}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 20m41.689013624s ago: executing program 5 (id=467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) 20m34.097801839s ago: executing program 5 (id=479): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x3c, 0x0, 0x1, 0x0, 0x0) 20m25.463566853s ago: executing program 38 (id=466): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x81, 0x0, 0x0, 0x0, 0x7f5, &(0x7f0000000140)='veth1_to_team\x00', 0x100000000, 0x8, 0x1157}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 20m17.752408079s ago: executing program 39 (id=479): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x3c, 0x0, 0x1, 0x0, 0x0) 19m30.561332892s ago: executing program 6 (id=540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x1c, 0x0, 0xa03, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) 19m26.286647687s ago: executing program 6 (id=544): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19m24.44011972s ago: executing program 6 (id=545): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x20000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 19m20.760985883s ago: executing program 6 (id=549): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 19m19.951129663s ago: executing program 6 (id=550): r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08", 0x0, 0x57a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000ffff}, 0x4c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r8, &(0x7f0000000340)={0x1f, 0x17, 0x0, 0x1, 0x1, 0x6, @remote}, 0x13) 19m17.568969323s ago: executing program 6 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x41b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)="6f3d5b91fadda0", 0x7, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9}, 0x14) 19m0.966755412s ago: executing program 40 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x41b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)="6f3d5b91fadda0", 0x7, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9}, 0x14) 13.776637514s ago: executing program 3 (id=1677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, 0x0, 0x0, 0x38130d1, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) 9.598223237s ago: executing program 1 (id=1685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.360736907s ago: executing program 3 (id=1686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000540)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46", 0x83}], 0x2}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="eb7783e19397a6e6faa75380d70507b068e05011bf6d8c98003d6e56aaf21e1957e94eae91e66affbd863a5d6e1b", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}], 0x2, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) 9.163992987s ago: executing program 3 (id=1687): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100101) accept4(r5, 0x0, 0x0, 0x0) 8.435035033s ago: executing program 1 (id=1688): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x401) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4800) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r1 = syz_io_uring_setup(0x3, 0x0, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000340), 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x100, 0xb, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x1, 0x980900, 0x2eae0342ca72d7eb}) r3 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80000002}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 8.29606728s ago: executing program 3 (id=1689): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0xa, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x24, 0x8001, 0x0, 0x9, 0xfffffffffffffffd, 0x456, 0xfa11, 0x1}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x22b7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x31384142}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000009f461200"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x26022, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xffffffffffffff3f, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES16=r5, @ANYBLOB="000000ef00020000280012800b00010063726964d2735f000a43006500028008803100000000010000000000"], 0x48}}, 0x0) 8.206085727s ago: executing program 9 (id=1690): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 7.187728102s ago: executing program 1 (id=1691): io_setup(0x3ff, &(0x7f0000000500)) r0 = socket(0xa, 0x3, 0x3a) recvmmsg(r0, 0x0, 0x30, 0x40012083, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000300)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0403d11, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$inet6(0xa, 0x3, 0xd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 7.025373418s ago: executing program 9 (id=1692): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r2 = fsopen(&(0x7f00000005c0)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 5.135584155s ago: executing program 3 (id=1693): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000040), &(0x7f0000000740)=r3}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.935662024s ago: executing program 3 (id=1694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, 0x0, 0x0, 0x38130d1, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) 3.455352339s ago: executing program 0 (id=383): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40045b17, 0x0) 3.237638557s ago: executing program 9 (id=1695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000540)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46", 0x83}], 0x2}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="eb7783e19397a6e6faa75380d70507b068e05011bf6d8c98003d6e56aaf21e1957e94eae91e66affbd863a5d6e1b", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}], 0x2, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) 2.979908595s ago: executing program 9 (id=1696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.592303786s ago: executing program 0 (id=1697): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100101) accept4(r5, 0x0, 0x0, 0x0) 1.698700457s ago: executing program 9 (id=1698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="260a000000000000611176000000000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r3 = socket(0x2, 0x80805, 0x0) listen(r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x41, 0x1, 0x0, "4749570000000000000000000e00000008000000000000001400"}) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x2a8, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x274, 0x2, [@TCA_U32_ACT={0x264, 0x7, [@m_bpf={0x2c, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_bpf={0x15c, 0x17, 0x0, 0x0, {{0x8}, {0x114, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x110, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x22, 0x6, "64fed1dbc6acdff2f58b109e970d3f8a5e673036db1b353e1f65160b66ef"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xd8, 0x15, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbaa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x82, 0x6, "d1368c98f2ea920353ddd9564585132954cbed4361f0420910de2025a2b67b71af8f6d31e4dc81cf7b589bdda5cc5993bf9665974672ebc9ab36c38153aa46624eb50ba4c86aefdc18b1df8854344ac754ae60865f6a5f7720c3edcc78ad1ed365ec41ade998285b738d79de1cf1b37ef7d38ba9a278f4fd6ff96f0ec2cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe3}, @TCA_U32_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c0000001200010227bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="189c000001100400140014007665746830000000000000000000000008001f00f9ffffff0a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x300080d4}, 0x20000000) read(r8, &(0x7f00000001c0)=""/253, 0xfd) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002000700000008000340000000f5080001400000001308000640000000040800054000fcd50108000440000000040900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1.517974629s ago: executing program 1 (id=1699): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x401) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4800) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r1 = syz_io_uring_setup(0x3, 0x0, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000340), 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x100, 0xb, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x1, 0x980900, 0x2eae0342ca72d7eb}) r4 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x80000002}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 567.928654ms ago: executing program 0 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 273.356759ms ago: executing program 1 (id=1701): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 187.174618ms ago: executing program 9 (id=1702): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000040), &(0x7f0000000740)=r3}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 13.139664ms ago: executing program 1 (id=1703): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x4, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(0x0, 0x0, 0x9) 0s ago: executing program 0 (id=1704): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x3, r7, 0x0, 0xffffffffffffffff, r8, 0xd0, 0x16a4}, 0x1ff, 0xb8, 0xd, 0x4, r9, 0x0, 0x1}) fchown(0xffffffffffffffff, 0x0, r8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1332.905770][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.997347][T12484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1333.246471][T12424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.419004][T10501] hsr_slave_0: left promiscuous mode [ 1333.461100][T10501] hsr_slave_1: left promiscuous mode [ 1333.471989][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.514642][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.649207][T10501] hsr_slave_0: left promiscuous mode [ 1334.690850][T10501] hsr_slave_1: left promiscuous mode [ 1334.691879][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.719723][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.889059][T10501] hsr_slave_0: left promiscuous mode [ 1334.913135][T10501] hsr_slave_1: left promiscuous mode [ 1334.914880][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.969991][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.880020][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1336.042322][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1336.245260][T12894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1336.457334][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1336.478056][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1336.484982][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1336.494755][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1336.495582][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1337.112002][T12905] sock: sock_set_timeout: `syz.9.1188' (pid 12905) tries to set negative timeout [ 1338.060030][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1338.209518][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1338.628635][T12546] Bluetooth: hci5: command tx timeout [ 1340.708893][T12546] Bluetooth: hci5: command tx timeout [ 1341.339936][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1341.615396][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1342.778999][T12546] Bluetooth: hci5: command tx timeout [ 1344.236171][ T7713] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1344.254547][ T7713] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1344.494468][T12643] hsr_slave_0: entered promiscuous mode [ 1344.495994][T12643] hsr_slave_1: entered promiscuous mode [ 1344.496968][T12643] debugfs: 'hsr0' already exists in 'hsr' [ 1344.496993][T12643] Cannot create hsr debugfs directory [ 1344.867973][T12546] Bluetooth: hci5: command tx timeout [ 1345.902312][T12896] lo speed is unknown, defaulting to 1000 [ 1346.924899][T12534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1347.033222][T12534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1347.194943][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1347.212824][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1347.214271][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1347.249671][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1347.252317][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1347.284071][T12534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1347.364546][T12534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1347.722664][T12896] chnl_net:caif_netlink_parms(): no params data found [ 1348.379414][T12924] lo speed is unknown, defaulting to 1000 [ 1348.693236][T12943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1349.774658][T12546] Bluetooth: hci0: command tx timeout [ 1349.905569][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.905692][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.905950][T12896] bridge_slave_0: entered allmulticast mode [ 1349.929849][T12896] bridge_slave_0: entered promiscuous mode [ 1349.990310][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.990506][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.990765][T12896] bridge_slave_1: entered allmulticast mode [ 1350.024983][T12896] bridge_slave_1: entered promiscuous mode [ 1350.365424][T12896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.456716][T12896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.766337][T12896] team0: Port device team_slave_0 added [ 1350.894357][T12896] team0: Port device team_slave_1 added [ 1351.484952][T12896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.484967][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.484989][T12896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.555888][T12643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1351.639098][T12896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.639117][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.644292][T12896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.738223][T12643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1351.899041][T12546] Bluetooth: hci0: command tx timeout [ 1352.244150][T12643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1352.599339][T12643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1352.927045][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1352.945746][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.947133][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1353.003991][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1353.006800][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1353.487368][T12896] hsr_slave_0: entered promiscuous mode [ 1353.488608][T12896] hsr_slave_1: entered promiscuous mode [ 1353.500939][T12896] debugfs: 'hsr0' already exists in 'hsr' [ 1353.500968][T12896] Cannot create hsr debugfs directory [ 1353.532795][T12924] chnl_net:caif_netlink_parms(): no params data found [ 1353.978850][T12546] Bluetooth: hci0: command tx timeout [ 1354.158264][T12499] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1354.184208][T12499] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1354.396239][T12958] lo speed is unknown, defaulting to 1000 [ 1355.100026][T12546] Bluetooth: hci2: command tx timeout [ 1355.208627][T12924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.217672][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.217946][T12924] bridge_slave_0: entered allmulticast mode [ 1355.234809][T12924] bridge_slave_0: entered promiscuous mode [ 1355.302563][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.302751][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.303025][T12924] bridge_slave_1: entered allmulticast mode [ 1355.305832][T12924] bridge_slave_1: entered promiscuous mode [ 1355.769003][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.805011][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.058907][T12546] Bluetooth: hci0: command tx timeout [ 1356.555166][T12924] team0: Port device team_slave_0 added [ 1356.663048][T12924] team0: Port device team_slave_1 added [ 1357.074633][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.074649][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.074669][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.182561][T12546] Bluetooth: hci2: command tx timeout [ 1357.323209][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.323224][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.323245][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.934689][T12924] hsr_slave_0: entered promiscuous mode [ 1357.957186][T12924] hsr_slave_1: entered promiscuous mode [ 1357.965655][T12924] debugfs: 'hsr0' already exists in 'hsr' [ 1357.965683][T12924] Cannot create hsr debugfs directory [ 1358.061305][T10501] bridge_slave_1: left allmulticast mode [ 1358.061330][T10501] bridge_slave_1: left promiscuous mode [ 1358.061531][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.170487][T10501] bridge_slave_0: left allmulticast mode [ 1358.170511][T10501] bridge_slave_0: left promiscuous mode [ 1358.170715][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.253962][T10501] bridge_slave_1: left allmulticast mode [ 1358.253988][T10501] bridge_slave_1: left promiscuous mode [ 1358.254166][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.310663][T10501] bridge_slave_0: left allmulticast mode [ 1358.310694][T10501] bridge_slave_0: left promiscuous mode [ 1358.330489][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.288808][T12546] Bluetooth: hci2: command tx timeout [ 1359.689033][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.854029][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.894801][T10501] bond0 (unregistering): Released all slaves [ 1361.382132][T12546] Bluetooth: hci2: command tx timeout [ 1363.429667][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.551897][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.646037][T10501] bond0 (unregistering): Released all slaves [ 1364.173082][T12958] chnl_net:caif_netlink_parms(): no params data found [ 1365.689174][T10501] hsr_slave_0: left promiscuous mode [ 1365.708930][T10501] hsr_slave_1: left promiscuous mode [ 1365.709748][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.743480][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.899004][T10501] hsr_slave_0: left promiscuous mode [ 1365.918894][T10501] hsr_slave_1: left promiscuous mode [ 1365.919734][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.942371][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.023805][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.023900][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.210266][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1367.382028][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1368.949636][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1369.109799][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1369.339912][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1369.346084][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1369.393966][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1369.396860][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1369.398105][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1371.911789][T12546] Bluetooth: hci3: command tx timeout [ 1373.154736][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1373.628819][T12896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1373.839839][T12896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1373.923060][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.923545][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.923759][T12958] bridge_slave_0: entered allmulticast mode [ 1373.928219][T12958] bridge_slave_0: entered promiscuous mode [ 1373.939740][T12896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1373.988289][T12546] Bluetooth: hci3: command tx timeout [ 1374.504676][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.504785][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.504978][T12958] bridge_slave_1: entered allmulticast mode [ 1374.506879][T12958] bridge_slave_1: entered promiscuous mode [ 1374.525096][T12896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1374.728833][T13024] lo speed is unknown, defaulting to 1000 [ 1375.296411][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.357650][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.864515][T12958] team0: Port device team_slave_0 added [ 1376.003325][T12958] team0: Port device team_slave_1 added [ 1376.059531][T12546] Bluetooth: hci3: command tx timeout [ 1376.479801][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.479821][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.479851][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.564718][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.564738][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.564766][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.067962][T12958] hsr_slave_0: entered promiscuous mode [ 1378.089790][T12958] hsr_slave_1: entered promiscuous mode [ 1378.139179][T12546] Bluetooth: hci3: command tx timeout [ 1378.875447][T13024] chnl_net:caif_netlink_parms(): no params data found [ 1381.654434][T12924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1381.745948][T12924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1383.598796][T12924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1383.683074][T12924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1384.120235][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.120888][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.121141][T13024] bridge_slave_0: entered allmulticast mode [ 1384.123536][T13024] bridge_slave_0: entered promiscuous mode [ 1384.210562][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.210726][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.210980][T13024] bridge_slave_1: entered allmulticast mode [ 1384.214999][T13024] bridge_slave_1: entered promiscuous mode [ 1386.027857][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.175192][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.648444][T12896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.672832][T13024] team0: Port device team_slave_0 added [ 1386.919272][T13024] team0: Port device team_slave_1 added [ 1388.213567][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.213582][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.213602][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.283450][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.283466][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.283486][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.355809][T12896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.462032][T10501] bridge_slave_1: left allmulticast mode [ 1388.462065][T10501] bridge_slave_1: left promiscuous mode [ 1388.462336][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.540524][T10501] bridge_slave_0: left allmulticast mode [ 1388.540549][T10501] bridge_slave_0: left promiscuous mode [ 1388.540750][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.602353][T10501] bridge_slave_1: left allmulticast mode [ 1388.602378][T10501] bridge_slave_1: left promiscuous mode [ 1388.602573][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.650721][T10501] bridge_slave_0: left allmulticast mode [ 1388.650745][T10501] bridge_slave_0: left promiscuous mode [ 1388.650986][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.770222][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.869772][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.912028][T10501] bond0 (unregistering): Released all slaves [ 1391.381546][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.500146][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.565204][T10501] bond0 (unregistering): Released all slaves [ 1391.932111][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.932308][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.050492][T13024] hsr_slave_0: entered promiscuous mode [ 1392.051532][T13024] hsr_slave_1: entered promiscuous mode [ 1392.052312][T13024] debugfs: 'hsr0' already exists in 'hsr' [ 1392.052331][T13024] Cannot create hsr debugfs directory [ 1392.182201][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.182377][ T8062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.399310][T10501] hsr_slave_0: left promiscuous mode [ 1392.419074][T10501] hsr_slave_1: left promiscuous mode [ 1392.419889][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.445202][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.979191][T10501] hsr_slave_0: left promiscuous mode [ 1394.008876][T10501] hsr_slave_1: left promiscuous mode [ 1394.010519][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.049827][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.909833][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1396.167645][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1397.519747][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1397.672346][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1398.003776][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1398.023283][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1398.024760][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1398.060297][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1398.074195][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1398.925669][T12958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1399.080796][T12958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1399.181836][T12958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1399.247279][T13130] lo speed is unknown, defaulting to 1000 [ 1399.255882][T12958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1400.229715][ T5811] Bluetooth: hci1: command tx timeout [ 1400.618425][T13143] sock: sock_set_timeout: `syz.9.1228' (pid 13143) tries to set negative timeout [ 1400.946593][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.322071][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.476219][T13130] chnl_net:caif_netlink_parms(): no params data found [ 1401.503116][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.503361][ T8215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.787082][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.787232][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.223295][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.223423][T13130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.223819][T13130] bridge_slave_0: entered allmulticast mode [ 1402.225724][T13130] bridge_slave_0: entered promiscuous mode [ 1402.265509][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.265644][T13130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.265898][T13130] bridge_slave_1: entered allmulticast mode [ 1402.268668][T13130] bridge_slave_1: entered promiscuous mode [ 1402.300341][ T5811] Bluetooth: hci1: command tx timeout [ 1402.500286][T13130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.523123][T13130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.883351][T13130] team0: Port device team_slave_0 added [ 1403.067829][T13130] team0: Port device team_slave_1 added [ 1403.462398][T13024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1403.484173][T13130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.484188][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.484210][T13130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.487827][T13024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1403.553400][T13130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.553415][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.553436][T13130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.561668][T13024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1403.859287][T13024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1405.148872][ T5811] Bluetooth: hci1: command tx timeout [ 1405.413161][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.875637][T13130] hsr_slave_0: entered promiscuous mode [ 1405.877323][T13130] hsr_slave_1: entered promiscuous mode [ 1405.878055][T13130] debugfs: 'hsr0' already exists in 'hsr' [ 1405.878074][T13130] Cannot create hsr debugfs directory [ 1406.447468][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.601531][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.601683][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.767814][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.779179][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.779345][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.814640][T10501] bridge_slave_1: left allmulticast mode [ 1406.814671][T10501] bridge_slave_1: left promiscuous mode [ 1406.814945][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.882016][T10501] bridge_slave_0: left allmulticast mode [ 1406.882041][T10501] bridge_slave_0: left promiscuous mode [ 1406.882235][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.179234][ T5811] Bluetooth: hci1: command tx timeout [ 1408.788653][T12546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1408.797266][T12546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1408.833052][T12546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1408.865757][T12546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1408.867564][T12546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1409.049625][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.110116][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.151485][T10501] bond0 (unregistering): Released all slaves [ 1409.889229][T10501] hsr_slave_0: left promiscuous mode [ 1409.937804][T10501] hsr_slave_1: left promiscuous mode [ 1409.938599][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.010021][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.940847][ T5811] Bluetooth: hci5: command tx timeout [ 1411.238417][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1411.421673][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1412.929135][T10098] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1413.018914][ T5811] Bluetooth: hci5: command tx timeout [ 1413.111077][T10098] usb 10-1: Using ep0 maxpacket: 16 [ 1413.114972][T10098] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.114998][T10098] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.115015][T10098] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1413.115047][T10098] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1413.115065][T10098] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.176547][T10098] usb 10-1: config 0 descriptor?? [ 1413.613711][T10098] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 1413.613751][T10098] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 1413.613779][T10098] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 1413.613806][T10098] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 1413.613834][T10098] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 1413.663990][T10098] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 1413.777615][T10098] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 1413.777998][T10098] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1413.812957][T13191] netlink: 512 bytes leftover after parsing attributes in process `syz.9.1235'. [ 1413.829370][ T5868] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1413.832358][ T5868] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1413.832734][ T5868] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1413.833055][ T5868] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1413.885319][T10098] usb 10-1: USB disconnect, device number 35 [ 1415.986294][ T5811] Bluetooth: hci5: command tx timeout [ 1416.191914][T12546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1416.251631][T12546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1416.253003][T12546] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1416.256819][T12546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1416.257793][T12546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1416.564483][T13178] lo speed is unknown, defaulting to 1000 [ 1418.211165][T12546] Bluetooth: hci5: command tx timeout [ 1418.315921][T12546] Bluetooth: hci0: command tx timeout [ 1418.959888][T13199] lo speed is unknown, defaulting to 1000 [ 1419.342682][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.863704][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.006826][T13178] chnl_net:caif_netlink_parms(): no params data found [ 1420.029413][T13130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1420.158850][T13130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1420.184630][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.184766][ T8060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.318940][T13130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1420.378888][T12546] Bluetooth: hci0: command tx timeout [ 1420.580672][T13130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1420.661847][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.662299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.690354][T13199] chnl_net:caif_netlink_parms(): no params data found [ 1421.954416][T13178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.954627][T13178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.954829][T13178] bridge_slave_0: entered allmulticast mode [ 1421.958435][T13178] bridge_slave_0: entered promiscuous mode [ 1422.036156][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.037328][T13178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.037584][T13178] bridge_slave_1: entered allmulticast mode [ 1422.050693][T13178] bridge_slave_1: entered promiscuous mode [ 1422.458844][T12546] Bluetooth: hci0: command tx timeout [ 1422.643230][T13178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.740215][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.740861][T13199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.741073][T13199] bridge_slave_0: entered allmulticast mode [ 1423.742951][T13199] bridge_slave_0: entered promiscuous mode [ 1423.747506][T13178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.778152][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.788529][T13199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.788959][T13199] bridge_slave_1: entered allmulticast mode [ 1423.795201][T13199] bridge_slave_1: entered promiscuous mode [ 1424.093786][T13178] team0: Port device team_slave_0 added [ 1424.112242][T13199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.115429][T13178] team0: Port device team_slave_1 added [ 1424.217524][T13199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.524245][T13178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.524264][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.524292][T13178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.539143][T12546] Bluetooth: hci0: command tx timeout [ 1424.632712][T13199] team0: Port device team_slave_0 added [ 1424.634277][T13178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.634294][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.634323][T13178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.694942][T13199] team0: Port device team_slave_1 added [ 1425.065400][T13199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.065421][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.065448][T13199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.207370][T13199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.207391][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.207421][T13199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.263934][T13178] hsr_slave_0: entered promiscuous mode [ 1425.265470][T13178] hsr_slave_1: entered promiscuous mode [ 1425.266524][T13178] debugfs: 'hsr0' already exists in 'hsr' [ 1425.266551][T13178] Cannot create hsr debugfs directory [ 1425.888367][T13199] hsr_slave_0: entered promiscuous mode [ 1425.895675][T13199] hsr_slave_1: entered promiscuous mode [ 1425.896438][T13199] debugfs: 'hsr0' already exists in 'hsr' [ 1425.896465][T13199] Cannot create hsr debugfs directory [ 1428.637810][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.637905][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.765195][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.007046][T13130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.281162][T13130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.383981][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.384154][ T8215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.546076][T10501] bridge_slave_1: left allmulticast mode [ 1429.546111][T10501] bridge_slave_1: left promiscuous mode [ 1429.546415][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.611532][T10501] bridge_slave_0: left allmulticast mode [ 1429.611565][T10501] bridge_slave_0: left promiscuous mode [ 1429.611840][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.723475][T10501] bridge_slave_1: left allmulticast mode [ 1429.723515][T10501] bridge_slave_1: left promiscuous mode [ 1429.723781][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.850457][T10501] bridge_slave_0: left allmulticast mode [ 1429.850492][T10501] bridge_slave_0: left promiscuous mode [ 1429.850766][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.034731][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1431.048299][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1431.058221][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1431.068340][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1431.091831][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1432.420045][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.501237][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.526136][T10501] bond0 (unregistering): Released all slaves [ 1433.178857][T12546] Bluetooth: hci2: command tx timeout [ 1436.277615][T12546] Bluetooth: hci2: command tx timeout [ 1436.930716][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.009834][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.041672][T10501] bond0 (unregistering): Released all slaves [ 1439.106432][T12546] Bluetooth: hci2: command tx timeout [ 1439.123403][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.123560][ T8060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.828922][T10501] hsr_slave_0: left promiscuous mode [ 1439.870104][T10501] hsr_slave_1: left promiscuous mode [ 1439.871951][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.919933][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.149121][T10501] hsr_slave_0: left promiscuous mode [ 1440.168914][T10501] hsr_slave_1: left promiscuous mode [ 1440.169757][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.192276][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.188900][T12546] Bluetooth: hci2: command tx timeout [ 1441.529754][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1441.691782][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1445.031491][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1445.290488][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1448.164553][T13257] lo speed is unknown, defaulting to 1000 [ 1449.802605][T13257] chnl_net:caif_netlink_parms(): no params data found [ 1449.842363][ T38] audit: type=1326 audit(1767077442.496:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13306 comm="syz.9.1257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f01ef749 code=0x0 [ 1450.412462][T13130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.583026][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.583194][T13257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.583385][T13257] bridge_slave_0: entered allmulticast mode [ 1450.585366][T13257] bridge_slave_0: entered promiscuous mode [ 1450.623423][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.623566][T13257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.623757][T13257] bridge_slave_1: entered allmulticast mode [ 1450.625608][T13257] bridge_slave_1: entered promiscuous mode [ 1450.961319][T13257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.047306][T13257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.385728][T13257] team0: Port device team_slave_0 added [ 1451.409003][T13257] team0: Port device team_slave_1 added [ 1452.481959][T13178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1452.527029][T13257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.527048][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.527072][T13257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.588409][T13178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1452.630103][T13257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.630117][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.630138][T13257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.642246][T13178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1452.857455][T13178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1454.050909][T13257] hsr_slave_0: entered promiscuous mode [ 1454.057615][T13257] hsr_slave_1: entered promiscuous mode [ 1454.378358][T13130] veth0_vlan: entered promiscuous mode [ 1454.554710][T13199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1454.692539][ T38] audit: type=1326 audit(1767077447.346:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13353 comm="syz.9.1265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f01ef749 code=0x0 [ 1454.933832][T13199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1455.306379][T13199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1455.362691][T13130] veth1_vlan: entered promiscuous mode [ 1455.367277][T13199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1456.334515][T10501] bridge_slave_1: left allmulticast mode [ 1456.334545][T10501] bridge_slave_1: left promiscuous mode [ 1456.334805][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.421568][T10501] bridge_slave_0: left allmulticast mode [ 1456.421593][T10501] bridge_slave_0: left promiscuous mode [ 1456.421796][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.897123][T12546] block nbd0: Receive control failed (result -22) [ 1458.932763][T13405] nbd0: detected capacity change from 0 to 32 [ 1458.937087][T13289] block nbd0: Dead connection, failed to find a fallback [ 1458.937116][T13289] block nbd0: shutting down sockets [ 1458.937234][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.937356][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.937514][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.937541][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.937609][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.937634][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.937700][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.937727][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.937786][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.937812][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.937929][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.937954][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.938043][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.938068][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.938141][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.938167][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.938195][T13289] ldm_validate_partition_table(): Disk read failed. [ 1458.938256][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.938282][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.938386][T13289] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1458.938412][T13289] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1458.938539][T13289] Dev nbd0: unable to read RDB block 0 [ 1458.939196][T13289] nbd0: unable to read partition table [ 1459.201618][T13289] ldm_validate_partition_table(): Disk read failed. [ 1459.201777][T13289] Dev nbd0: unable to read RDB block 0 [ 1459.201990][T13289] nbd0: unable to read partition table [ 1460.144538][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.202683][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.241725][T10501] bond0 (unregistering): Released all slaves [ 1460.295814][T13130] veth0_macvtap: entered promiscuous mode [ 1460.879491][T10501] hsr_slave_0: left promiscuous mode [ 1460.909416][T10501] hsr_slave_1: left promiscuous mode [ 1460.919962][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.952707][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.970507][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1461.033747][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1461.057920][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1461.060341][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1461.081792][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1461.098052][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1461.119449][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1461.124983][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.125019][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.125049][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1461.125093][ T10] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1461.125117][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.254151][ T10] usb 10-1: config 0 descriptor?? [ 1461.682197][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1461.682237][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1461.682265][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1461.682293][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1461.682321][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1461.732825][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 1461.822248][ T10] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 1461.822617][ T10] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1461.875275][T13411] netlink: 512 bytes leftover after parsing attributes in process `syz.9.1270'. [ 1461.888851][ T6010] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1461.889183][ T6010] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1461.889501][ T6010] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1461.889829][ T6010] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1461.955180][ T10] usb 10-1: USB disconnect, device number 36 [ 1463.215527][T12546] Bluetooth: hci3: command tx timeout [ 1463.300976][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1463.759617][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1465.258991][T12546] Bluetooth: hci3: command tx timeout [ 1466.911517][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1273'. [ 1467.491660][T12546] Bluetooth: hci3: command tx timeout [ 1468.519556][T13178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.579167][T13461] bridge1: entered promiscuous mode [ 1468.579197][T13461] bridge1: entered allmulticast mode [ 1468.579459][T13416] lo speed is unknown, defaulting to 1000 [ 1468.975115][T13199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.066231][T13199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.129250][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.129465][ T8215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.364136][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.364303][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.499865][T12546] Bluetooth: hci3: command tx timeout [ 1469.737562][T13416] chnl_net:caif_netlink_parms(): no params data found [ 1470.270424][T13257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1470.470077][T13257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1470.744691][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1470.763721][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1470.776108][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1470.779945][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1470.781143][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1470.954668][T13257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1471.020870][T13257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1471.619930][T13416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.620142][T13416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.620396][T13416] bridge_slave_0: entered allmulticast mode [ 1471.623695][T13416] bridge_slave_0: entered promiscuous mode [ 1471.673228][T13416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.673357][T13416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.680872][T13416] bridge_slave_1: entered allmulticast mode [ 1471.688055][T13416] bridge_slave_1: entered promiscuous mode [ 1471.911988][T13503] lo speed is unknown, defaulting to 1000 [ 1472.331414][T13416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.411079][T13416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.702739][T13416] team0: Port device team_slave_0 added [ 1472.731197][T13416] team0: Port device team_slave_1 added [ 1472.859036][ T5811] Bluetooth: hci1: command tx timeout [ 1473.095861][T13416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.095881][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.095910][T13416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.215096][T13416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.215111][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.215131][T13416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.332405][T13199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.656415][T10501] bridge_slave_1: left allmulticast mode [ 1473.656447][T10501] bridge_slave_1: left promiscuous mode [ 1473.656709][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.721592][T10501] bridge_slave_0: left allmulticast mode [ 1473.721623][T10501] bridge_slave_0: left promiscuous mode [ 1473.721870][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.951817][ T5811] Bluetooth: hci1: command tx timeout [ 1476.686268][T12546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1476.694167][T12546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1476.714260][T12546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1476.717620][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.718407][T12546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1476.765155][T12546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1476.849905][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.891848][T10501] bond0 (unregistering): Released all slaves [ 1476.965793][T13416] hsr_slave_0: entered promiscuous mode [ 1476.966985][T13416] hsr_slave_1: entered promiscuous mode [ 1476.967712][T13416] debugfs: 'hsr0' already exists in 'hsr' [ 1476.967730][T13416] Cannot create hsr debugfs directory [ 1477.021916][ T5811] Bluetooth: hci1: command tx timeout [ 1477.869304][T10501] hsr_slave_0: left promiscuous mode [ 1477.915093][T10501] hsr_slave_1: left promiscuous mode [ 1477.915964][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.971241][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.224172][T10501] veth0_macvtap: left promiscuous mode [ 1478.224465][T10501] veth1_vlan: left promiscuous mode [ 1478.224654][T10501] veth0_vlan: left promiscuous mode [ 1478.858965][ T5811] Bluetooth: hci5: command tx timeout [ 1479.098911][ T5811] Bluetooth: hci1: command tx timeout [ 1480.950843][ T5811] Bluetooth: hci5: command tx timeout [ 1482.678320][ T38] audit: type=1326 audit(1767077475.326:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13578 comm="syz.9.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f01ef749 code=0x0 [ 1483.019606][T12546] Bluetooth: hci5: command tx timeout [ 1483.379419][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1483.643319][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1483.752113][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1483.756512][ T10] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1485.119746][T12546] Bluetooth: hci5: command tx timeout [ 1488.031211][T13595] ======================================================= [ 1488.031211][T13595] WARNING: The mand mount option has been deprecated and [ 1488.031211][T13595] and is ignored by this kernel. Remove the mand [ 1488.031211][T13595] option from the mount to silence this warning. [ 1488.031211][T13595] ======================================================= [ 1488.827128][T13543] lo speed is unknown, defaulting to 1000 [ 1488.873182][T13503] chnl_net:caif_netlink_parms(): no params data found [ 1490.681977][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.682078][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.596774][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.596992][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.597263][T13503] bridge_slave_0: entered allmulticast mode [ 1491.604320][T13503] bridge_slave_0: entered promiscuous mode [ 1491.651606][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.651772][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.652021][T13503] bridge_slave_1: entered allmulticast mode [ 1491.654771][T13503] bridge_slave_1: entered promiscuous mode [ 1493.043200][ T38] audit: type=1326 audit(1767077485.686:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.9.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f01ef749 code=0x0 [ 1493.116722][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1493.146264][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1493.160297][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1493.190946][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1493.199381][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1493.465659][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.496777][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.796179][T13503] team0: Port device team_slave_0 added [ 1493.847796][T13503] team0: Port device team_slave_1 added [ 1493.891524][T13613] lo speed is unknown, defaulting to 1000 [ 1494.024074][ T7713] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1494.041522][ T7713] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1495.268972][T12546] Bluetooth: hci0: command tx timeout [ 1495.789850][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.789871][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.789902][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.399102][T13543] chnl_net:caif_netlink_parms(): no params data found [ 1496.405500][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.405520][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.405550][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.341570][T12546] Bluetooth: hci0: command tx timeout [ 1497.357789][ T38] audit: type=1326 audit(1767077490.006:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.9.1306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f01ef749 code=0x0 [ 1498.212135][T13503] hsr_slave_0: entered promiscuous mode [ 1498.213284][T13503] hsr_slave_1: entered promiscuous mode [ 1498.213994][T13503] debugfs: 'hsr0' already exists in 'hsr' [ 1498.214012][T13503] Cannot create hsr debugfs directory [ 1498.872714][T13543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.874209][T13543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.874404][T13543] bridge_slave_0: entered allmulticast mode [ 1498.877846][T13543] bridge_slave_0: entered promiscuous mode [ 1498.982648][T13543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.982791][T13543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.983103][T13543] bridge_slave_1: entered allmulticast mode [ 1498.985998][T13543] bridge_slave_1: entered promiscuous mode [ 1499.157678][T13416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1499.418913][T12546] Bluetooth: hci0: command tx timeout [ 1499.540309][T13416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1499.614393][T13543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.617061][T13416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1499.680535][T13543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.681477][T13416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1500.017244][T13543] team0: Port device team_slave_0 added [ 1500.182707][T13543] team0: Port device team_slave_1 added [ 1500.504527][T13613] chnl_net:caif_netlink_parms(): no params data found [ 1500.529033][T13543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.529052][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.529077][T13543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.595970][T13543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.595989][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.596019][T13543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.641494][T12546] Bluetooth: hci0: command tx timeout [ 1503.998855][T13543] hsr_slave_0: entered promiscuous mode [ 1504.000389][T13543] hsr_slave_1: entered promiscuous mode [ 1504.001152][T13543] debugfs: 'hsr0' already exists in 'hsr' [ 1504.001171][T13543] Cannot create hsr debugfs directory [ 1504.360584][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.363707][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.363972][T13613] bridge_slave_0: entered allmulticast mode [ 1504.367270][T13613] bridge_slave_0: entered promiscuous mode [ 1504.579704][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.579909][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.580185][T13613] bridge_slave_1: entered allmulticast mode [ 1504.582690][T13613] bridge_slave_1: entered promiscuous mode [ 1507.111772][T13613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.139745][T13613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.383401][T13613] team0: Port device team_slave_0 added [ 1507.461492][T13613] team0: Port device team_slave_1 added [ 1507.978068][T13613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.978082][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.978102][T13613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.132752][T13613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.132766][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.132787][T13613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.470547][T13503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1508.638528][T13503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1508.751128][T13613] hsr_slave_0: entered promiscuous mode [ 1508.752232][T13613] hsr_slave_1: entered promiscuous mode [ 1508.753252][T13613] debugfs: 'hsr0' already exists in 'hsr' [ 1508.753270][T13613] Cannot create hsr debugfs directory [ 1508.809937][T13503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1508.855090][T13503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1508.952493][T10501] bridge_slave_1: left allmulticast mode [ 1508.952523][T10501] bridge_slave_1: left promiscuous mode [ 1508.953197][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.001004][T10501] bridge_slave_0: left allmulticast mode [ 1509.001038][T10501] bridge_slave_0: left promiscuous mode [ 1509.001322][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.095181][T10501] bridge_slave_1: left allmulticast mode [ 1509.095207][T10501] bridge_slave_1: left promiscuous mode [ 1509.095393][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.369701][T10501] bridge_slave_0: left allmulticast mode [ 1509.369727][T10501] bridge_slave_0: left promiscuous mode [ 1509.369945][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.432128][T10501] bridge_slave_1: left allmulticast mode [ 1509.432155][T10501] bridge_slave_1: left promiscuous mode [ 1509.432392][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.500683][T10501] bridge_slave_0: left allmulticast mode [ 1509.500709][T10501] bridge_slave_0: left promiscuous mode [ 1509.500901][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.701326][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.793808][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.851503][T10501] bond0 (unregistering): Released all slaves [ 1512.694702][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.749584][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.771533][T10501] bond0 (unregistering): Released all slaves [ 1514.489861][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.579653][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.624142][T10501] bond0 (unregistering): Released all slaves [ 1515.115687][T13714] syzkaller0: entered promiscuous mode [ 1515.115715][T13714] syzkaller0: entered allmulticast mode [ 1516.921820][T13416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.078960][T10501] hsr_slave_0: left promiscuous mode [ 1518.122579][T10501] hsr_slave_1: left promiscuous mode [ 1518.124451][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.151083][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.309528][T10501] hsr_slave_0: left promiscuous mode [ 1518.329064][T10501] hsr_slave_1: left promiscuous mode [ 1518.330984][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.370966][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.509212][T10501] hsr_slave_0: left promiscuous mode [ 1518.529027][T10501] hsr_slave_1: left promiscuous mode [ 1518.530012][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.580884][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.859596][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1520.142420][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1522.099794][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1522.373053][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1523.111557][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1523.125525][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1523.140670][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1523.192335][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1523.193258][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1525.441994][ T5811] Bluetooth: hci2: command tx timeout [ 1527.499041][ T5811] Bluetooth: hci2: command tx timeout [ 1527.629569][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1527.869571][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1528.314441][T13782] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 1529.600084][ T5811] Bluetooth: hci2: command tx timeout [ 1530.960777][T13756] lo speed is unknown, defaulting to 1000 [ 1531.659392][ T5811] Bluetooth: hci2: command tx timeout [ 1532.276437][T13756] chnl_net:caif_netlink_parms(): no params data found [ 1532.816337][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.816492][T13756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.816659][T13756] bridge_slave_0: entered allmulticast mode [ 1532.818535][T13756] bridge_slave_0: entered promiscuous mode [ 1532.879635][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.879772][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.880010][T13756] bridge_slave_1: entered allmulticast mode [ 1532.882417][T13756] bridge_slave_1: entered promiscuous mode [ 1533.200646][T12546] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.215956][T12546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.217836][T12546] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.219860][T12546] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.220870][T12546] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1533.562111][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1340'. [ 1533.562225][T13806] nbd: must specify at least one socket [ 1534.542736][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.588524][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.632007][T13543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1534.801176][T13543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1535.012530][T13543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1535.120375][T13756] team0: Port device team_slave_0 added [ 1535.154481][T13543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1535.240458][T13756] team0: Port device team_slave_1 added [ 1535.241493][T13803] lo speed is unknown, defaulting to 1000 [ 1535.338942][T12546] Bluetooth: hci1: command tx timeout [ 1535.756581][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.756596][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.756617][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.860798][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.860814][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.860836][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.957104][T13613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1536.009362][T13613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1536.352334][T13613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1536.546062][T13613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1536.627348][T13756] hsr_slave_0: entered promiscuous mode [ 1536.635515][T13756] hsr_slave_1: entered promiscuous mode [ 1537.418939][T12546] Bluetooth: hci1: command tx timeout [ 1538.019117][T13803] chnl_net:caif_netlink_parms(): no params data found [ 1538.536417][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1538.558272][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1538.573535][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1538.583142][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1538.584404][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1539.266395][T13841] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1345'. [ 1539.499435][T12546] Bluetooth: hci1: command tx timeout [ 1539.907144][T13803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.907455][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.907692][T13803] bridge_slave_0: entered allmulticast mode [ 1539.912725][T13803] bridge_slave_0: entered promiscuous mode [ 1540.112443][T13803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.112565][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.112768][T13803] bridge_slave_1: entered allmulticast mode [ 1540.114890][T13803] bridge_slave_1: entered promiscuous mode [ 1540.146002][T13836] lo speed is unknown, defaulting to 1000 [ 1540.771048][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1347'. [ 1540.771161][T13849] nbd: must specify at least one socket [ 1541.497748][T12546] Bluetooth: hci3: command tx timeout [ 1541.579571][T12546] Bluetooth: hci1: command tx timeout [ 1541.795285][T13803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.831207][T13803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.137386][T13803] team0: Port device team_slave_0 added [ 1542.183355][T13803] team0: Port device team_slave_1 added [ 1542.607059][T13803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.607080][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.607109][T13803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.651316][T13803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.651371][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.651456][T13803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.759717][T10501] bridge_slave_1: left allmulticast mode [ 1542.759751][T10501] bridge_slave_1: left promiscuous mode [ 1542.760051][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.810134][T10501] bridge_slave_0: left allmulticast mode [ 1542.810160][T10501] bridge_slave_0: left promiscuous mode [ 1542.810382][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.902152][T10501] bridge_slave_1: left allmulticast mode [ 1542.902185][T10501] bridge_slave_1: left promiscuous mode [ 1542.902403][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.970363][T10501] bridge_slave_0: left allmulticast mode [ 1542.970397][T10501] bridge_slave_0: left promiscuous mode [ 1542.970661][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.579027][T12546] Bluetooth: hci3: command tx timeout [ 1543.620400][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.719772][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.805263][T10501] bond0 (unregistering): Released all slaves [ 1545.825533][T12546] Bluetooth: hci3: command tx timeout [ 1546.116647][T13875] nbd: must specify at least one socket [ 1546.889584][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.180669][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.241387][T10501] bond0 (unregistering): Released all slaves [ 1547.485783][T13613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.899036][T12546] Bluetooth: hci3: command tx timeout [ 1547.980199][T13803] hsr_slave_0: entered promiscuous mode [ 1547.981638][T13803] hsr_slave_1: entered promiscuous mode [ 1547.982654][T13803] debugfs: 'hsr0' already exists in 'hsr' [ 1547.982681][T13803] Cannot create hsr debugfs directory [ 1547.989703][T13756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1548.071796][T13756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1548.163151][T13756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1548.328931][T10501] hsr_slave_0: left promiscuous mode [ 1548.379681][T10501] hsr_slave_1: left promiscuous mode [ 1548.385144][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.439836][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.611160][T10501] hsr_slave_0: left promiscuous mode [ 1548.633299][T10501] hsr_slave_1: left promiscuous mode [ 1548.635114][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.670290][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.520028][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1550.999617][T13900] nbd: must specify at least one socket [ 1551.648063][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.648160][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.739601][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1552.767912][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1364'. [ 1553.389727][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1553.549866][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1554.451893][T13756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1554.850604][T13836] chnl_net:caif_netlink_parms(): no params data found [ 1555.460911][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1555.479144][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1555.483030][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1555.527643][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1555.568164][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1556.320148][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.320341][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.320609][T13836] bridge_slave_0: entered allmulticast mode [ 1556.322853][T13836] bridge_slave_0: entered promiscuous mode [ 1556.325829][T13921] lo speed is unknown, defaulting to 1000 [ 1556.327272][T13836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.327485][T13836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.327701][T13836] bridge_slave_1: entered allmulticast mode [ 1556.388044][T13836] bridge_slave_1: entered promiscuous mode [ 1556.756676][T13836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.818061][T13836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.658893][T12546] Bluetooth: hci0: command tx timeout [ 1557.777470][T13836] team0: Port device team_slave_0 added [ 1557.826515][T13836] team0: Port device team_slave_1 added [ 1558.392892][T13836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.392911][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.392938][T13836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.397941][T13836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.397959][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.397994][T13836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.627296][T13836] hsr_slave_0: entered promiscuous mode [ 1559.628393][T13836] hsr_slave_1: entered promiscuous mode [ 1559.659779][T13836] debugfs: 'hsr0' already exists in 'hsr' [ 1559.659818][T13836] Cannot create hsr debugfs directory [ 1559.749241][T12546] Bluetooth: hci0: command tx timeout [ 1559.800714][T13803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1560.069818][T13803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1560.168998][T13803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1560.274000][T13803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1560.317205][T13756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.317859][T13921] chnl_net:caif_netlink_parms(): no params data found [ 1561.818839][T12546] Bluetooth: hci0: command tx timeout [ 1563.332604][T13756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.364007][T13921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.364219][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.364489][T13921] bridge_slave_0: entered allmulticast mode [ 1563.367412][T13921] bridge_slave_0: entered promiscuous mode [ 1563.760046][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.760231][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.760498][T13921] bridge_slave_1: entered allmulticast mode [ 1563.794375][T13921] bridge_slave_1: entered promiscuous mode [ 1563.898880][T12546] Bluetooth: hci0: command tx timeout [ 1563.935243][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.936214][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.451068][T13921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.523958][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.524159][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.546233][T13921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.098188][T13921] team0: Port device team_slave_0 added [ 1565.153328][T13921] team0: Port device team_slave_1 added [ 1566.391021][T13921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.391041][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.391071][T13921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.558808][T13921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.558828][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.558857][T13921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.470420][T10501] bridge_slave_1: left allmulticast mode [ 1567.470453][T10501] bridge_slave_1: left promiscuous mode [ 1567.470746][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.591282][T10501] bridge_slave_0: left allmulticast mode [ 1567.591408][T10501] bridge_slave_0: left promiscuous mode [ 1567.591597][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.672584][T10501] bridge_slave_1: left allmulticast mode [ 1567.672609][T10501] bridge_slave_1: left promiscuous mode [ 1567.672793][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.750098][T10501] bridge_slave_0: left allmulticast mode [ 1567.750123][T10501] bridge_slave_0: left promiscuous mode [ 1567.750350][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.385359][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.684162][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.763121][T10501] bond0 (unregistering): Released all slaves [ 1570.768982][ T9] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1570.932485][ T9] usb 10-1: no configurations [ 1570.932509][ T9] usb 10-1: can't read configurations, error -22 [ 1571.058965][ T9] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1571.077422][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.149428][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.213711][ T9] usb 10-1: no configurations [ 1571.213741][ T9] usb 10-1: can't read configurations, error -22 [ 1571.214055][ T9] usb usb10-port1: attempt power cycle [ 1571.222126][T10501] bond0 (unregistering): Released all slaves [ 1571.294146][T13921] hsr_slave_0: entered promiscuous mode [ 1571.295641][T13921] hsr_slave_1: entered promiscuous mode [ 1571.296700][T13921] debugfs: 'hsr0' already exists in 'hsr' [ 1571.296725][T13921] Cannot create hsr debugfs directory [ 1571.569291][ T9] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1571.635728][ T9] usb 10-1: no configurations [ 1571.635753][ T9] usb 10-1: can't read configurations, error -22 [ 1571.759712][ T9] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1571.788596][ T9] usb 10-1: no configurations [ 1571.789048][ T9] usb 10-1: can't read configurations, error -22 [ 1571.789668][ T9] usb usb10-port1: unable to enumerate USB device [ 1572.128988][T10501] hsr_slave_0: left promiscuous mode [ 1572.168928][T10501] hsr_slave_1: left promiscuous mode [ 1572.176705][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.220095][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.339085][T10501] hsr_slave_0: left promiscuous mode [ 1572.379664][T10501] hsr_slave_1: left promiscuous mode [ 1572.380505][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.419629][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.270638][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1573.489708][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1575.556916][T10501] team0 (unregistering): Port device team_slave_1 removed [ 1575.979405][T10501] team0 (unregistering): Port device team_slave_0 removed [ 1576.959239][T13803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.136041][T13836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1577.227811][T13836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1577.262851][T13836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1577.306325][T13836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1577.873812][T13803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.910609][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.932643][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.932867][ T8062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.147910][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.148148][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.042342][T13756] veth0_vlan: entered promiscuous mode [ 1579.181630][T13756] veth1_vlan: entered promiscuous mode [ 1580.004243][T13836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.080286][T13756] veth0_macvtap: entered promiscuous mode [ 1580.158598][T13756] veth1_macvtap: entered promiscuous mode [ 1580.281856][T13836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.287055][T13921] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1580.388782][T13921] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1580.429122][T13921] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1580.509951][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.512782][ T8267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.550740][T13921] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1580.586298][T13803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.630166][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.630365][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.653972][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.714560][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.773467][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.793413][ T1169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.810324][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.860057][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.717111][T13803] veth0_vlan: entered promiscuous mode [ 1581.801765][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.801790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.845610][T13803] veth1_vlan: entered promiscuous mode [ 1582.155296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.155319][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.349848][T13921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.739632][T13803] veth0_macvtap: entered promiscuous mode [ 1582.775919][T13803] veth1_macvtap: entered promiscuous mode [ 1582.824150][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.928445][T13921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.975822][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.977388][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.008435][T13803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.054468][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.054622][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.106520][T13803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.157820][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.177471][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.196361][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.239080][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.621469][T13836] veth0_vlan: entered promiscuous mode [ 1583.759130][T13836] veth1_vlan: entered promiscuous mode [ 1583.893916][ T8267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.893941][ T8267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.112159][ T8237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.112183][ T8237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.114777][T13836] veth0_macvtap: entered promiscuous mode [ 1584.167499][T13836] veth1_macvtap: entered promiscuous mode [ 1584.265120][T13836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.585423][T13836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.615762][ T8237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.915838][ T8237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.932855][ T8237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.163880][ T6009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.308727][ T8237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.355151][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1585.384000][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1585.386035][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1585.387179][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1585.399206][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1586.882576][ T6009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.067177][T13921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.310549][ T6009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.499662][T12546] Bluetooth: hci2: command tx timeout [ 1587.620752][T14150] lo speed is unknown, defaulting to 1000 [ 1587.869972][ T6009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.429421][ T7842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.429453][ T7842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.777168][T12546] Bluetooth: hci2: command tx timeout [ 1589.843078][ T1205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.843102][ T1205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.909932][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1417'. [ 1590.163426][T13921] veth0_vlan: entered promiscuous mode [ 1591.009557][ T6009] bridge_slave_1: left allmulticast mode [ 1591.009590][ T6009] bridge_slave_1: left promiscuous mode [ 1591.009865][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.434433][ T6009] bridge_slave_0: left allmulticast mode [ 1591.434456][ T6009] bridge_slave_0: left promiscuous mode [ 1591.434643][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.186389][T12546] Bluetooth: hci2: command tx timeout [ 1592.880584][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1426'. [ 1594.379293][T12546] Bluetooth: hci2: command tx timeout [ 1595.848955][T11535] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1596.013195][T11535] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1596.013229][T11535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.013251][T11535] usb 4-1: Product: syz [ 1596.013266][T11535] usb 4-1: Manufacturer: syz [ 1596.013282][T11535] usb 4-1: SerialNumber: syz [ 1596.023914][T11535] usb 4-1: config 0 descriptor?? [ 1596.089197][T14268] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1440'. [ 1597.293591][T11535] usb 4-1: USB disconnect, device number 3 [ 1600.655311][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.750187][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.783297][ T6009] bond0 (unregistering): Released all slaves [ 1600.956977][T13921] veth1_vlan: entered promiscuous mode [ 1603.169976][T14150] chnl_net:caif_netlink_parms(): no params data found [ 1603.221960][T13921] veth0_macvtap: entered promiscuous mode [ 1603.921594][T13921] veth1_macvtap: entered promiscuous mode [ 1604.532999][ T6009] hsr_slave_0: left promiscuous mode [ 1604.617199][ T6009] hsr_slave_1: left promiscuous mode [ 1604.629602][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.629634][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.719893][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.719924][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.008033][ T6009] veth1_macvtap: left promiscuous mode [ 1605.008149][ T6009] veth0_macvtap: left promiscuous mode [ 1605.008410][ T6009] veth1_vlan: left promiscuous mode [ 1605.019945][ T6009] veth0_vlan: left promiscuous mode [ 1612.783352][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.783505][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.700112][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 1614.083658][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 1617.314573][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1617.317594][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1617.335579][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1617.337828][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1617.357834][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1617.771642][T14150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.771872][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.772112][T14150] bridge_slave_0: entered allmulticast mode [ 1617.801906][T14150] bridge_slave_0: entered promiscuous mode [ 1617.817409][T14150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.817900][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.818091][T14150] bridge_slave_1: entered allmulticast mode [ 1617.861732][T14150] bridge_slave_1: entered promiscuous mode [ 1619.477536][T14459] lo speed is unknown, defaulting to 1000 [ 1619.499297][T12546] Bluetooth: hci5: command tx timeout [ 1619.539116][T14150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.026546][T14150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.672669][T14150] team0: Port device team_slave_0 added [ 1620.753140][T14150] team0: Port device team_slave_1 added [ 1621.323844][T14150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.323864][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.323894][T14150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.425714][T14150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.425735][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.425765][T14150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.698814][T12546] Bluetooth: hci5: command tx timeout [ 1623.362242][T14526] Set syz1 is full, maxelem 2 reached [ 1624.372288][T12546] Bluetooth: hci5: command tx timeout [ 1624.658748][T14150] hsr_slave_0: entered promiscuous mode [ 1624.663811][T14150] hsr_slave_1: entered promiscuous mode [ 1625.886483][T14551] bond_slave_0: entered promiscuous mode [ 1625.886527][T14551] bond_slave_1: entered promiscuous mode [ 1625.887073][T14551] vlan2: entered promiscuous mode [ 1625.887086][T14551] bond0: entered promiscuous mode [ 1626.500319][T12546] Bluetooth: hci5: command tx timeout [ 1628.642265][T14577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1504'. [ 1628.885938][T14459] chnl_net:caif_netlink_parms(): no params data found [ 1631.023124][T14459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.023220][T14459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.023416][T14459] bridge_slave_0: entered allmulticast mode [ 1631.058482][T14459] bridge_slave_0: entered promiscuous mode [ 1632.642020][T14459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.642241][T14459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.642604][T14459] bridge_slave_1: entered allmulticast mode [ 1632.653748][T14459] bridge_slave_1: entered promiscuous mode [ 1633.625925][T14459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.849714][T14459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.098408][ T6009] bridge_slave_1: left allmulticast mode [ 1636.098440][ T6009] bridge_slave_1: left promiscuous mode [ 1636.100591][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.224681][ T6009] bridge_slave_0: left allmulticast mode [ 1636.224713][ T6009] bridge_slave_0: left promiscuous mode [ 1636.224971][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.396889][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 1636.827507][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 1641.371052][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.409613][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.432808][ T6009] bond0 (unregistering): Released all slaves [ 1641.503100][T14459] team0: Port device team_slave_0 added [ 1641.994523][T14459] team0: Port device team_slave_1 added [ 1642.519757][ T10] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1642.620383][ T6009] hsr_slave_0: left promiscuous mode [ 1642.660181][ T6009] hsr_slave_1: left promiscuous mode [ 1642.665031][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1642.694191][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.694217][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.694245][ T10] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1642.694262][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.702425][ T10] usb 10-1: config 0 descriptor?? [ 1642.784437][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.282367][ T10] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 1643.283269][ T10] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 1643.317401][ T6009] veth1_macvtap: left promiscuous mode [ 1643.317480][ T6009] veth0_macvtap: left promiscuous mode [ 1643.317682][ T6009] veth1_vlan: left promiscuous mode [ 1643.317821][ T6009] veth0_vlan: left promiscuous mode [ 1643.348757][ T10] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected [ 1643.529246][ T10] hid-steam 0003:28DE:1142.001E: unknown main item tag 0x0 [ 1643.655118][ T10] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 1643.860933][ T10] usb 10-1: USB disconnect, device number 41 [ 1643.905867][ T10] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected [ 1644.178305][T14751] binder: BINDER_SET_CONTEXT_MGR already set [ 1644.178331][T14751] binder: 14749:14751 ioctl 4018620d 200000000040 returned -16 [ 1646.085062][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1646.268894][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1646.272271][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1646.296794][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1646.296832][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.296848][ T10] usb 4-1: Product: syz [ 1646.296859][ T10] usb 4-1: Manufacturer: syz [ 1646.296870][ T10] usb 4-1: SerialNumber: syz [ 1646.323956][ T10] usb 4-1: config 0 descriptor?? [ 1646.353209][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1646.353248][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1646.965714][ T10] em28xx 4-1:0.0: chip ID is em2765 [ 1647.600713][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1647.600749][ T10] em28xx 4-1:0.0: board has no eeprom [ 1648.007245][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1648.007284][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 1648.007721][ T6010] em28xx 4-1:0.0: Binding DVB extension [ 1648.811382][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1648.844142][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1648.847972][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1648.884372][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1648.897607][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1649.537904][ T7552] usb 4-1: USB disconnect, device number 4 [ 1649.542705][ T7552] em28xx 4-1:0.0: Disconnecting em28xx [ 1649.699882][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 1649.773889][ T6010] em28xx 4-1:0.0: Registering input extension [ 1649.797748][ T7552] em28xx 4-1:0.0: Closing input extension [ 1651.020002][T12546] Bluetooth: hci0: command tx timeout [ 1651.039243][T12500] IPVS: starting estimator thread 0... [ 1651.087403][ T7552] em28xx 4-1:0.0: Freeing device [ 1651.179671][T14785] IPVS: using max 11 ests per chain, 26400 per kthread [ 1652.679722][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 1653.024277][ T7713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1653.108981][T12546] Bluetooth: hci0: command tx timeout [ 1653.221065][ T7713] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1653.221099][ T7713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.221122][ T7713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1653.221180][ T7713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.224213][ T7713] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1653.224246][ T7713] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1653.224268][ T7713] usb 2-1: Product: syz [ 1653.224284][ T7713] usb 2-1: Manufacturer: syz [ 1653.332946][ T7713] cdc_wdm 2-1:1.0: skipping garbage [ 1653.332971][ T7713] cdc_wdm 2-1:1.0: skipping garbage [ 1653.337992][ T7713] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1653.338031][ T7713] cdc_wdm 2-1:1.0: Unknown control protocol [ 1653.564939][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.565054][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.565450][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.565474][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.567773][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.567795][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.570967][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.571039][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.572165][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.572187][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.573187][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.573211][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.574309][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.574333][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.574572][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.574595][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.574838][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.574861][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.575096][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1653.575119][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1653.723953][ T7713] usb 2-1: USB disconnect, device number 2 [ 1653.724057][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1655.323737][ T5811] Bluetooth: hci0: command tx timeout [ 1656.125905][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 1657.880940][T12546] Bluetooth: hci0: command tx timeout [ 1660.728748][ T7713] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1660.967119][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.989182][ T7713] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1660.989205][ T7713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.989219][ T7713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1660.989259][ T7713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.991395][ T7713] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1660.991424][ T7713] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1660.991450][ T7713] usb 2-1: Product: syz [ 1660.991461][ T7713] usb 2-1: Manufacturer: syz [ 1661.082854][ T7713] cdc_wdm 2-1:1.0: skipping garbage [ 1661.082872][ T7713] cdc_wdm 2-1:1.0: skipping garbage [ 1661.100810][ T7713] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1661.100834][ T7713] cdc_wdm 2-1:1.0: Unknown control protocol [ 1661.285196][ C0] wdm_int_callback: 382 callbacks suppressed [ 1661.285217][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.285231][ C0] wdm_int_callback: 382 callbacks suppressed [ 1661.285243][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.287257][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.287275][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.287489][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.287504][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.287704][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.287719][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.287928][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.287943][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.288142][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.288157][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.288356][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.288370][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.288565][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.288657][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.288886][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.288902][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.289306][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1661.289372][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1661.466799][ T7552] usb 2-1: USB disconnect, device number 3 [ 1661.466921][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1661.796236][T14459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.796256][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.796284][T14459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.897365][T14459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.897380][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.897401][T14459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.821867][T14459] hsr_slave_0: entered promiscuous mode [ 1663.823268][T14459] hsr_slave_1: entered promiscuous mode [ 1663.824245][T14459] debugfs: 'hsr0' already exists in 'hsr' [ 1663.824271][T14459] Cannot create hsr debugfs directory [ 1663.871753][T14770] lo speed is unknown, defaulting to 1000 [ 1666.271522][T14882] fuse: Unknown parameter '7ý5«' [ 1670.252385][T14926] fuse: Unknown parameter '7ý5«' [ 1672.833457][T14770] chnl_net:caif_netlink_parms(): no params data found [ 1673.268924][T14962] fuse: Unknown parameter '7ý5«' [ 1674.249539][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.249616][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.986708][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.986919][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.987176][T14770] bridge_slave_0: entered allmulticast mode [ 1675.015597][T14770] bridge_slave_0: entered promiscuous mode [ 1675.089671][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.089807][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.090028][T14770] bridge_slave_1: entered allmulticast mode [ 1675.092748][T14770] bridge_slave_1: entered promiscuous mode [ 1675.544205][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.560334][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.733783][ T71] bridge_slave_1: left allmulticast mode [ 1675.733811][ T71] bridge_slave_1: left promiscuous mode [ 1675.734047][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.748796][T12500] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1675.857716][ T71] bridge_slave_0: left allmulticast mode [ 1675.857740][ T71] bridge_slave_0: left promiscuous mode [ 1675.857967][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.928713][T12500] usb 10-1: Using ep0 maxpacket: 8 [ 1675.973590][T12500] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1675.973624][T12500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.973646][T12500] usb 10-1: Product: syz [ 1675.973663][T12500] usb 10-1: Manufacturer: syz [ 1675.973678][T12500] usb 10-1: SerialNumber: syz [ 1676.030524][T12500] usb 10-1: config 0 descriptor?? [ 1676.300363][T12500] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1676.302798][T12500] dvb_usb_af9015 10-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1676.334517][T12500] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1676.334691][T12500] dvb_usb_af9035 10-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1676.369305][T12500] usb 10-1: USB disconnect, device number 42 [ 1676.680075][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.760196][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.828091][ T71] bond0 (unregistering): Released all slaves [ 1677.162328][T14770] team0: Port device team_slave_0 added [ 1677.188006][T14770] team0: Port device team_slave_1 added [ 1677.458866][ T71] hsr_slave_0: left promiscuous mode [ 1677.500654][ T71] hsr_slave_1: left promiscuous mode [ 1677.501399][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.523266][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.323026][ T71] team0 (unregistering): Port device team_slave_1 removed [ 1678.480083][ T71] team0 (unregistering): Port device team_slave_0 removed [ 1679.261255][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1679.292421][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1679.298004][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1679.314608][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1679.331177][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1679.338318][T15042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'. [ 1679.481581][ T6053] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1679.631144][ T6053] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1679.631176][ T6053] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.631198][ T6053] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1679.631255][ T6053] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.633600][ T6053] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1679.633630][ T6053] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1679.633652][ T6053] usb 10-1: Product: syz [ 1679.633668][ T6053] usb 10-1: Manufacturer: syz [ 1679.674846][ T6053] cdc_wdm 10-1:1.0: skipping garbage [ 1679.674863][ T6053] cdc_wdm 10-1:1.0: skipping garbage [ 1679.743940][ T6053] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1679.743966][ T6053] cdc_wdm 10-1:1.0: Unknown control protocol [ 1679.864850][ C0] wdm_int_callback: 512 callbacks suppressed [ 1679.864873][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.864887][ C0] wdm_int_callback: 512 callbacks suppressed [ 1679.864899][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.865109][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.865124][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.865326][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.865341][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.867742][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.867763][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.868027][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.868051][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.868324][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.868339][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.868448][ T6053] usb 10-1: USB disconnect, device number 43 [ 1679.868538][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1679.868553][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1679.868647][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1680.303352][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.303366][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.303387][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.359022][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.359038][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.359059][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.970455][T12546] Bluetooth: hci2: command tx timeout [ 1682.267489][T14770] hsr_slave_0: entered promiscuous mode [ 1682.275979][T14770] hsr_slave_1: entered promiscuous mode [ 1682.367547][T15043] lo speed is unknown, defaulting to 1000 [ 1682.869143][T14324] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1682.907351][ T7713] IPVS: starting estimator thread 0... [ 1683.028814][T15058] IPVS: using max 8 ests per chain, 19200 per kthread [ 1683.048742][T14324] usb 10-1: Using ep0 maxpacket: 8 [ 1683.054229][T14324] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1683.054262][T14324] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.054285][T14324] usb 10-1: Product: syz [ 1683.054302][T14324] usb 10-1: Manufacturer: syz [ 1683.054318][T14324] usb 10-1: SerialNumber: syz [ 1683.108933][T14324] usb 10-1: config 0 descriptor?? [ 1683.323572][T14324] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1683.324732][T14324] dvb_usb_af9015 10-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1683.349796][T14324] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1683.349909][T14324] dvb_usb_af9035 10-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1683.380005][T14324] usb 10-1: USB disconnect, device number 44 [ 1683.990039][T12546] Bluetooth: hci2: command tx timeout [ 1683.999117][T15063] lo speed is unknown, defaulting to 1000 [ 1684.121712][T15068] Invalid logical block size (8192) [ 1685.377196][ T7713] IPVS: starting estimator thread 0... [ 1685.458802][T15085] IPVS: using max 8 ests per chain, 19200 per kthread [ 1685.871637][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1639'. [ 1686.059528][T12546] Bluetooth: hci2: command tx timeout [ 1687.260617][T15043] chnl_net:caif_netlink_parms(): no params data found [ 1687.774235][T14324] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 1687.931697][T14324] usb 10-1: config 0 has an invalid interface number: 218 but max is 0 [ 1687.931728][T14324] usb 10-1: config 0 has no interface number 0 [ 1687.931764][T14324] usb 10-1: config 0 interface 218 has no altsetting 0 [ 1687.931798][T14324] usb 10-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=b6.d6 [ 1687.931823][T14324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.943611][T14324] usb 10-1: config 0 descriptor?? [ 1688.149912][T12546] Bluetooth: hci2: command tx timeout [ 1688.372277][T15119] fuse: Unknown parameter '7ý5«' [ 1688.452623][T14324] usb 10-1: string descriptor 0 read error: -71 [ 1688.480927][T14324] usb 10-1: USB disconnect, device number 45 [ 1688.639443][T15043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.639664][T15043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.639925][T15043] bridge_slave_0: entered allmulticast mode [ 1688.642746][T15043] bridge_slave_0: entered promiscuous mode [ 1688.720567][T15043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.720722][T15043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.720974][T15043] bridge_slave_1: entered allmulticast mode [ 1688.730935][T15043] bridge_slave_1: entered promiscuous mode [ 1689.130570][ T71] bridge_slave_1: left allmulticast mode [ 1689.130608][ T71] bridge_slave_1: left promiscuous mode [ 1689.130891][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.182620][ T71] bridge_slave_0: left allmulticast mode [ 1689.182644][ T71] bridge_slave_0: left promiscuous mode [ 1689.182853][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.879866][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.012927][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.088909][ T71] bond0 (unregistering): Released all slaves [ 1690.449072][T15043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.468357][T15043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.021424][T15144] fuse: Unknown parameter '7ý5«' [ 1691.119165][ T71] hsr_slave_0: left promiscuous mode [ 1691.140272][ T71] hsr_slave_1: left promiscuous mode [ 1691.141266][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.183338][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.418871][ T7713] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 1691.482578][T15154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1663'. [ 1691.583300][ T7713] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1691.583974][ T7713] usb 10-1: not running at top speed; connect to a high speed hub [ 1691.585283][ T7713] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.585376][ T7713] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1691.585408][ T7713] usb 10-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1691.642622][ T7713] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1691.642655][ T7713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.642678][ T7713] usb 10-1: Product: syz [ 1691.642694][ T7713] usb 10-1: Manufacturer: syz [ 1691.642712][ T7713] usb 10-1: SerialNumber: syz [ 1693.069673][ T7713] usb 10-1: USB disconnect, device number 46 [ 1693.256196][T15120] udevd[15120]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1693.619425][ T71] team0 (unregistering): Port device team_slave_1 removed [ 1693.959721][ T71] team0 (unregistering): Port device team_slave_0 removed [ 1695.622173][T14770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1695.682625][T15043] team0: Port device team_slave_0 added [ 1695.763852][T14770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1695.812653][T15043] team0: Port device team_slave_1 added [ 1695.843298][T14770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1696.209267][T14770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1696.885307][T15043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.885321][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.885343][T15043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.083271][T15043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.083290][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.083319][T15043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.635731][T15043] hsr_slave_0: entered promiscuous mode [ 1697.636694][T15043] hsr_slave_1: entered promiscuous mode [ 1697.637334][T15043] debugfs: 'hsr0' already exists in 'hsr' [ 1697.637352][T15043] Cannot create hsr debugfs directory [ 1697.858127][T15204] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1676'. [ 1700.422439][T14770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.795935][T14770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.043050][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.043289][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.087600][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.087824][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.146947][T15233] ªªªªªª: renamed from wg2 (while UP) [ 1703.136543][T14770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.169290][T15043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1703.566810][T15043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1704.050938][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1689'. [ 1704.172512][T15043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1704.221944][T15043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1704.829189][T12499] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1704.893497][T14770] veth0_vlan: entered promiscuous mode [ 1704.973688][T14770] veth1_vlan: entered promiscuous mode [ 1704.978737][T12499] usb 2-1: Using ep0 maxpacket: 16 [ 1704.985974][T12499] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.986033][T12499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1704.986059][T12499] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1704.990263][T12499] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1704.990297][T12499] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1704.990319][T12499] usb 2-1: Manufacturer: syz [ 1705.067496][T12499] usb 2-1: config 0 descriptor?? [ 1705.577401][T14770] veth0_macvtap: entered promiscuous mode [ 1705.642049][T14770] veth1_macvtap: entered promiscuous mode [ 1705.710257][T15043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1705.968102][T14770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.026724][T15043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.101784][T14770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.138343][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.138458][ T7696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.158458][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.165510][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.169171][T12845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.169304][T12845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.270479][ T7842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.270660][ T7842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.151711][T12845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.151742][T12845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.661110][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.661133][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.402541][T15043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.827375][T15043] veth0_vlan: entered promiscuous mode [ 1709.689569][ T7713] usb 2-1: USB disconnect, device number 4 [ 1709.752150][T15043] veth1_vlan: entered promiscuous mode [ 1709.997965][T15043] veth0_macvtap: entered promiscuous mode [ 1710.174238][T15043] veth1_macvtap: entered promiscuous mode [ 1710.426462][T15043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.438458][T15043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.727032][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1698'. [ 1710.823698][T15313] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1698'. [ 1710.824669][ T2180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.824720][ T2180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.824762][ T2180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.824801][ T2180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.353343][T14279] ------------[ cut here ]------------ [ 1711.353357][T14279] kernel BUG at net/ipv6/route.c:1473! [ 1711.353407][T14279] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1711.353442][T14279] CPU: 1 UID: 0 PID: 14279 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1711.353463][T14279] Hardware name: Google Google Compute Engine/Google Comput[ 1711.353463][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1711.353477][T14279] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 1711.353673][T14279] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1711.353898][T14279] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 6e 74 9d f8 e9 f6 fa ff ff e8 64 3c 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1711.353914][T14279] RSP: 0018:ffffc90004d273e0 EFLAGS: 00010293 [ 1711.353930][T14279] RAX: ffffffff89846fcc RBX: ffff888126def000 RCX: ffff8880255fbc80 [ 1711.353944][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1711.353955][T14279] RBP: ffffc90004d274f0 R08: ffffe8ffffd4a26f R09: 1ffffd1ffffa944d [ 1711.353968][T14279] R10: dffffc0000000000 R11: fffff91ffffa944e R12: ffff888074786b40 [ 1711.353981][T14279] R13: ffffffff89845fb2 R14: dffffc0000000000 R15: 0000607ed8f5b268 [ 1711.353995][T14279] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1711.354009][T14279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1711.354021][T14279] CR2: 000000110c266235 CR3: 00000000528c6000 CR4: 00000000003526f0 [ 1711.354038][T14279] Call Trace: [ 1711.354052][T14279] [ 1711.354061][T14279] ? ip6_pol_route+0x162/0x1180 [ 1711.354091][T14279] ? __pfx_ip6_pol_route+0x10/0x10 [ 1711.354116][T14279] ? __lock_acquire+0x6b6/0x2cf0 [ 1711.354185][T14279] fib6_rule_lookup+0x1fc/0x6f0 [ 1711.354272][T14279] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1711.354301][T14279] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1711.354333][T14279] ? ip6_route_output_flags+0x2e/0x5d0 [ 1711.354361][T14279] ? ip6_route_output_flags+0x2e/0x5d0 [ 1711.354396][T14279] ip6_route_output_flags+0x364/0x5d0 [ 1711.354426][T14279] ? ip6_route_output_flags+0x2e/0x5d0 [ 1711.354457][T14279] ip6_dst_lookup_tail+0x299/0x1510 [ 1711.354522][T14279] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1711.354562][T14279] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 1711.354589][T14279] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 1711.354612][T14279] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 1711.354639][T14279] ip6_dst_lookup_flow+0x47/0xe0 [ 1711.354669][T14279] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1711.354701][T14279] send6+0x4ce/0x8d0 [ 1711.354723][T14279] ? rt_read_lock+0x203/0x490 [ 1711.354852][T14279] ? send6+0x220/0x8d0 [ 1711.354878][T14279] ? __pfx_send6+0x10/0x10 [ 1711.354900][T14279] ? rcu_is_watching+0x15/0xb0 [ 1711.354942][T14279] ? rcu_is_watching+0x15/0xb0 [ 1711.354960][T14279] ? __local_bh_disable_ip+0x3c/0x420 [ 1711.354998][T14279] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1711.355022][T14279] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1711.355046][T14279] wg_socket_send_skb_to_peer+0x128/0x200 [ 1711.355072][T14279] wg_packet_tx_worker+0x1c8/0x7c0 [ 1711.355096][T14279] ? process_scheduled_works+0x9ef/0x1770 [ 1711.355126][T14279] process_scheduled_works+0xad1/0x1770 [ 1711.355164][T14279] ? __pfx_process_scheduled_works+0x10/0x10 [ 1711.355186][T14279] ? do_raw_spin_lock+0x121/0x290 [ 1711.355219][T14279] worker_thread+0x8a0/0xda0 [ 1711.355251][T14279] ? __kthread_parkme+0x7b/0x200 [ 1711.355284][T14279] kthread+0x711/0x8a0 [ 1711.355315][T14279] ? __pfx_worker_thread+0x10/0x10 [ 1711.355341][T14279] ? __pfx_kthread+0x10/0x10 [ 1711.355368][T14279] ? rt_spin_unlock+0x150/0x200 [ 1711.355398][T14279] ? rt_spin_unlock+0x161/0x200 [ 1711.355427][T14279] ? __pfx_kthread+0x10/0x10 [ 1711.355458][T14279] ret_from_fork+0x510/0xa50 [ 1711.355495][T14279] ? __pfx_ret_from_fork+0x10/0x10 [ 1711.355518][T14279] ? __switch_to+0xc9e/0x1480 [ 1711.355562][T14279] ? __pfx_kthread+0x10/0x10 [ 1711.355593][T14279] ret_from_fork_asm+0x1a/0x30 [ 1711.355661][T14279] [ 1711.355673][T14279] Modules linked in: [ 1711.355699][T14279] ---[ end trace 0000000000000000 ]--- [ 1711.391714][T14279] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1711.391831][T14279] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 6e 74 9d f8 e9 f6 fa ff ff e8 64 3c 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1711.391885][T14279] RSP: 0018:ffffc90004d273e0 EFLAGS: 00010293 [ 1711.391948][T14279] RAX: ffffffff89846fcc RBX: ffff888126def000 RCX: ffff8880255fbc80 [ 1711.392017][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1711.392064][T14279] RBP: ffffc90004d274f0 R08: ffffe8ffffd4a26f R09: 1ffffd1ffffa944d [ 1711.392116][T14279] R10: dffffc0000000000 R11: fffff91ffffa944e R12: ffff888074786b40 [ 1711.392161][T14279] R13: ffffffff89845fb2 R14: dffffc0000000000 R15: 0000607ed8f5b268 [ 1711.392206][T14279] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1711.392258][T14279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1711.392301][T14279] CR2: 0000561e1a248138 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 1711.392362][T14279] Kernel panic - not syncing: Fatal exception in interrupt [ 1711.392998][T14279] Kernel Offset: disabled