last executing test programs: 30m1.724354335s ago: executing program 32 (id=172): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x9800, &(0x7f0000000580)={0x100003, 0x1, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c", @ANYRESOCT], 0xc4}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xddd, @mcast1, 0x7}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffffffe8eff80ec003108004570007400000000000190780a010101ac1414aa0400907800000000460000000000000000110000ffffffff000000000186400000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000bdebbd3e9f1fd"], 0x0) 27m53.470936869s ago: executing program 5 (id=383): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 27m49.346966528s ago: executing program 5 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 27m47.334228935s ago: executing program 5 (id=394): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109012000000006300e0ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc84}, 0x48) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 27m44.600321007s ago: executing program 5 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 27m43.774033807s ago: executing program 5 (id=401): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)}}], 0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) close(r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x54e979305c31cc96}, 0x40000) socket(0x3, 0x3, 0x0) 27m43.262396233s ago: executing program 5 (id=403): unshare(0x64000600) 27m28.103046786s ago: executing program 33 (id=403): unshare(0x64000600) 13m6.663842635s ago: executing program 1 (id=1707): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c504000000000000"], 0x78, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3e0000}], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) 13m6.432501455s ago: executing program 1 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 13m5.352149515s ago: executing program 1 (id=1711): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7030000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000240)='\r', 0x1, 0x20000000}]) 13m3.962636684s ago: executing program 1 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) 13m2.453797214s ago: executing program 1 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="fdff", 0x2) socket(0x1e, 0x4, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {0x9}, {}, {0x20}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) 13m0.912603525s ago: executing program 1 (id=1718): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000030000000000000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000500000800002085000000a500000085000000540000001811000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018550000090000000000000000000000852000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x3c, &(0x7f00000001c0)=""/60, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x3ff, 0xfffff8ec}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x0, 0x5, 0xe, 0x6}, {0x2, 0x4, 0x2, 0x3}, {0x3, 0x1, 0xa, 0x4}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x2, 0xf, 0xa}], 0x10, 0xfff0}, 0x94) r0 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='fsi_master_aspeed_cfam_reset\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) 12m45.653149575s ago: executing program 34 (id=1718): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000030000000000000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000500000800002085000000a500000085000000540000001811000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018550000090000000000000000000000852000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x3c, &(0x7f00000001c0)=""/60, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x3ff, 0xfffff8ec}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x0, 0x5, 0xe, 0x6}, {0x2, 0x4, 0x2, 0x3}, {0x3, 0x1, 0xa, 0x4}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x2, 0xf, 0xa}], 0x10, 0xfff0}, 0x94) r0 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='fsi_master_aspeed_cfam_reset\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) 12m25.193133009s ago: executing program 7 (id=1787): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)}}], 0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) close(r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x54e979305c31cc96}, 0x40000) socket(0x3, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRESOCT, @ANYBLOB="712fac7fa09751a043bcc8162ef83db49504dd0914556d6fc537ec548a5ba50651096f71333ee1ca784546e27376104bb694d1174b6ea80964235850c01639f5da1517b252d0b8a6e299e29198dd38843699092f91ea7f43f96b5b0a156ed1a232b396f6fda007f3afaea8408ab949509f87980b37d46d59b8c7b7dc95e2f787370976312e7c35ccff2dff7d204397950ac8cbcb2552356c21d9722bdb2bdb37968be2e46eed56d7ee3ea7dfdecada189803b7b5331c7e8e83744ecde920475c9ff47a9c494347537af2aadc995f6d826f50b3dcd899e3b75364", @ANYRESDEC=r1], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x60058c0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 12m23.2239457s ago: executing program 7 (id=1790): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000030000000000000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000500000800002085000000a500000085000000540000001811000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018550000090000000000000000000000852000000500", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x3c, &(0x7f00000001c0)=""/60, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x3ff, 0xfffff8ec}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x0, 0x5, 0xe, 0x6}, {0x2, 0x4, 0x2, 0x3}, {0x3, 0x1, 0xa, 0x4}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x2, 0xf, 0xa}], 0x10, 0xfff0}, 0x94) r0 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='fsi_master_aspeed_cfam_reset\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) 12m21.952380973s ago: executing program 7 (id=1793): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) setgroups(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12m21.612554823s ago: executing program 7 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 12m12.625303811s ago: executing program 7 (id=1807): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, r3, 0x0) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 12m10.594939479s ago: executing program 7 (id=1809): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x2000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0x80000004, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000790d42e53a988675cb3c007f64f03c905b0e49ffe97b7da8e77fbedffebbd1000180c2000000"], 0x0) close(0xffffffffffffffff) 11m55.30803068s ago: executing program 35 (id=1809): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x2000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0x80000004, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000790d42e53a988675cb3c007f64f03c905b0e49ffe97b7da8e77fbedffebbd1000180c2000000"], 0x0) close(0xffffffffffffffff) 8m52.781135178s ago: executing program 0 (id=2089): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 8m51.341695811s ago: executing program 0 (id=2093): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000240)='\r', 0x1, 0x20000000}]) 8m50.106230326s ago: executing program 0 (id=2097): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f340181c51471a853500", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088) unshare(0x64000600) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8m47.498495074s ago: executing program 0 (id=2098): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/77) 8m42.300326925s ago: executing program 0 (id=2105): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 8m39.923132101s ago: executing program 0 (id=2110): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x2663}, 0x0) 8m23.833748741s ago: executing program 36 (id=2110): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x2663}, 0x0) 1m4.091657317s ago: executing program 4 (id=2803): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x614, 0xa641, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(0x0, 0x1, &(0x7f000000a2c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 1m2.705380283s ago: executing program 4 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 1m0.720271562s ago: executing program 4 (id=2809): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x21) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xdc}}, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r5, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5111) 59.56178699s ago: executing program 4 (id=2813): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109012000000006300e0ff000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 56.205007083s ago: executing program 4 (id=2819): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@bridge_getlink={0x34, 0x12, 0x104fc4407ba7bf0b, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x201, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x2, 0x3, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 53.736132311s ago: executing program 4 (id=2822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x14eeaa19, &(0x7f00000000c0)) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 37.778438444s ago: executing program 37 (id=2822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x14eeaa19, &(0x7f00000000c0)) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 21.262458327s ago: executing program 2 (id=2870): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 16.638898564s ago: executing program 2 (id=2875): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000b000000001800000042a0000000000000", @ANYBLOB="010400000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) readv(r3, 0x0, 0x0) 12.898379317s ago: executing program 8 (id=2880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 12.059844351s ago: executing program 6 (id=2881): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x21) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xdc}}, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) 12.016611521s ago: executing program 2 (id=2882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000020e000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000017e000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00004cc000/0x3000)=nil, 0x0}, 0x68) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x45b9, &(0x7f0000000040)={0x0, 0x73e9, 0x20000, 0x1, 0x19f}) io_uring_enter(r1, 0x2cbe, 0x366, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000ffffff90950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) pipe(&(0x7f0000000040)) io_setup(0x2, &(0x7f00000011c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 11.86013724s ago: executing program 3 (id=2884): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x901, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x45001}, 0x8000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect(0x2, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) 11.125377352s ago: executing program 6 (id=2885): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x901, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x45001}, 0x8000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect(0x2, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 10.14381609s ago: executing program 8 (id=2886): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 9.41452098s ago: executing program 2 (id=2887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 8.802250406s ago: executing program 3 (id=2888): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@bridge_getlink={0x34, 0x12, 0x104fc4407ba7bf0b, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x201, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x2, 0x3, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 8.517279878s ago: executing program 6 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000380)='ceph\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7.695242378s ago: executing program 6 (id=2890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x200440d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 6.969666796s ago: executing program 3 (id=2891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 5.249305033s ago: executing program 3 (id=2892): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f340181c51471a853500", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088) unshare(0x64000600) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 4.728190334s ago: executing program 8 (id=2893): r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/200, 0xc8}, {0x0}], 0x2) close_range(r0, r1, 0x0) 3.658983232s ago: executing program 8 (id=2894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 3.541771916s ago: executing program 2 (id=2895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x7, &(0x7f00000000c0)="fdff", 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {0x9}, {}, {0x20}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) 3.333287501s ago: executing program 6 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 1.954889811s ago: executing program 2 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.856394866s ago: executing program 8 (id=2898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x200440d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 774.449267ms ago: executing program 8 (id=2899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 757.613416ms ago: executing program 6 (id=2900): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x901, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x45001}, 0x8000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect(0x2, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) 578.38602ms ago: executing program 3 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000380)='ceph\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=2902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0x0) kernel console output (not intermixed with test programs): rialNumber=0 [ 1492.297605][ T6004] usb 1-1: Could not find all expected endpoints [ 1492.351718][ T5907] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1492.383888][ T5907] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1492.492571][ T5907] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1492.962246][T14024] usb 1-1: USB disconnect, device number 64 [ 1493.004026][ T5907] cp2112 0003:10C4:EA90.0021: error requesting version [ 1493.047202][ T5907] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -32 [ 1493.117802][ T5907] usb 4-1: USB disconnect, device number 39 [ 1493.227241][T15939] fido_id[15939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1493.408512][T15006] team0 (unregistering): Port device team_slave_1 removed [ 1493.471999][T15006] team0 (unregistering): Port device team_slave_0 removed [ 1493.486703][T15941] Invalid ELF section header size [ 1493.722499][T15942] program syz.6.2070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.098610][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.105177][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.352885][T15704] team0: Port device team_slave_0 added [ 1497.369811][T15650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.398429][T15704] team0: Port device team_slave_1 added [ 1497.592506][T15704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.625744][T15704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.683124][T15704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.477792][T15650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.745136][T15704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.801208][T15704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.848182][T15704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.967181][T15650] team0: Port device team_slave_0 added [ 1500.161179][T15650] team0: Port device team_slave_1 added [ 1502.068580][T15650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.083525][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.142664][T15997] Invalid ELF section header size [ 1502.288598][T15999] program syz.3.2082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1502.674436][T15650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.951129][T15704] hsr_slave_0: entered promiscuous mode [ 1503.928641][T15704] hsr_slave_1: entered promiscuous mode [ 1505.555854][T15650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.520441][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.551805][T15650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.227079][T16064] program syz.3.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1514.043078][ T9] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1514.113205][ T9674] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1514.228203][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1514.257185][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.285033][ T9] usb 1-1: config 0 descriptor?? [ 1514.315010][ T9674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.483454][ T9674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.514371][ T9674] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1514.527906][ T9674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.662339][T15704] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1514.664034][ T9674] usb 4-1: config 0 descriptor?? [ 1514.947392][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.956843][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.964766][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.973592][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1514.982938][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1514.995652][T15704] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1516.142959][ T9674] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 1516.150702][ T9674] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 1516.242807][ T9674] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1516.273170][T15704] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1516.385566][ T9674] cp2112 0003:10C4:EA90.0022: error requesting version [ 1516.985567][T15704] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1516.998770][ T9674] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -32 [ 1517.053183][ T5835] Bluetooth: hci0: command tx timeout [ 1517.462082][T16104] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2103'. [ 1517.471304][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 1517.490375][T16104] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2103'. [ 1517.499771][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 1518.128231][ T6017] usb 1-1: USB disconnect, device number 65 [ 1518.165548][ T9674] usb 4-1: USB disconnect, device number 40 [ 1518.323395][T10002] bridge_slave_1: left allmulticast mode [ 1518.329093][T10002] bridge_slave_1: left promiscuous mode [ 1518.353665][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.365436][T16105] fido_id[16105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1518.386281][T10002] bridge_slave_0: left allmulticast mode [ 1518.391949][T10002] bridge_slave_0: left promiscuous mode [ 1518.416713][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.627295][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.640581][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.655349][T10002] bond0 (unregistering): Released all slaves [ 1519.807779][ T5835] Bluetooth: hci0: command tx timeout [ 1520.553923][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.926372][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.021341][ T5835] Bluetooth: hci0: command tx timeout [ 1522.684953][T16141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1523.654953][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1524.079636][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 1524.091682][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 1524.977037][ T5835] Bluetooth: hci0: command tx timeout [ 1525.699180][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1527.532044][ T5965] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1527.655011][T16168] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2115'. [ 1527.664065][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 1527.678943][T16168] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2115'. [ 1527.688102][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 1528.753301][ T5965] usb 7-1: device descriptor read/64, error -71 [ 1529.247900][ T5965] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1529.771019][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1529.798333][T16088] chnl_net:caif_netlink_parms(): no params data found [ 1530.346161][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1530.358543][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1530.381352][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1530.417741][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1532.387554][T16088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.406139][T16088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.431223][T16088] bridge_slave_0: entered allmulticast mode [ 1532.473506][T16088] bridge_slave_0: entered promiscuous mode [ 1532.770430][ T5835] Bluetooth: hci1: command tx timeout [ 1533.601252][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2124'. [ 1533.621004][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2124'. [ 1535.563114][ T5835] Bluetooth: hci1: command tx timeout [ 1537.127255][T16088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.180426][T16088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.199707][T16088] bridge_slave_1: entered allmulticast mode [ 1537.242616][T16088] bridge_slave_1: entered promiscuous mode [ 1537.423135][ T6017] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1537.594718][ T6017] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1537.616120][ T5835] Bluetooth: hci1: command tx timeout [ 1537.623391][ T6017] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1537.642695][ T6017] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1537.650778][ T6017] usb 4-1: Manufacturer: syz [ 1537.678492][ T6017] usb 4-1: config 0 descriptor?? [ 1537.704818][ T6017] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1539.823582][ T5835] Bluetooth: hci1: command tx timeout [ 1540.545660][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1540.554476][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1540.562461][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1540.571291][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1540.579431][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1540.599441][T16088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.632260][ T6017] usb 4-1: USB disconnect, device number 41 [ 1540.751076][T16088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.250765][T16286] Invalid ELF section header size [ 1541.952423][T16088] team0: Port device team_slave_0 added [ 1542.017952][T16088] team0: Port device team_slave_1 added [ 1542.726232][ T5835] Bluetooth: hci6: command tx timeout [ 1543.241335][T16088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.297103][T16088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.343170][T16088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.361704][T16088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.417776][T16088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.468619][T16088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.798464][T16314] program syz.4.2143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1544.863047][ T5835] Bluetooth: hci6: command tx timeout [ 1546.174401][T16088] hsr_slave_0: entered promiscuous mode [ 1546.193853][T16088] hsr_slave_1: entered promiscuous mode [ 1546.230355][T16088] debugfs: 'hsr0' already exists in 'hsr' [ 1546.256774][T16088] Cannot create hsr debugfs directory [ 1546.490432][ T5907] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1546.931843][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.953201][ T5835] Bluetooth: hci6: command tx timeout [ 1546.970071][T10002] bridge_slave_1: left allmulticast mode [ 1546.973275][ T5907] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1546.987192][ T5907] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1546.995267][T10002] bridge_slave_1: left promiscuous mode [ 1546.995325][ T5907] usb 4-1: Manufacturer: syz [ 1547.013805][ T5907] usb 4-1: config 0 descriptor?? [ 1547.019375][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.048069][ T5907] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1547.058886][T10002] bridge_slave_0: left allmulticast mode [ 1547.073166][T10002] bridge_slave_0: left promiscuous mode [ 1547.081692][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.140801][T16344] Invalid ELF section header size [ 1547.983689][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.021845][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.043660][T10002] bond0 (unregistering): Released all slaves [ 1548.144489][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2150'. [ 1548.153734][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2150'. [ 1548.162644][T16357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2150'. [ 1548.182831][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2150'. [ 1548.192002][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2150'. [ 1548.200937][T16357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2150'. [ 1548.979875][ T5835] Bluetooth: hci6: command tx timeout [ 1549.261497][T16184] chnl_net:caif_netlink_parms(): no params data found [ 1549.292352][ T5967] usb 4-1: USB disconnect, device number 42 [ 1550.162593][T10002] hsr_slave_0: left promiscuous mode [ 1550.665112][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 1550.677465][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 1551.367697][T10002] hsr_slave_1: left promiscuous mode [ 1551.511016][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.835377][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.490837][T16412] Invalid ELF section header size [ 1554.023121][ T5907] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1554.159868][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1554.169024][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1554.178086][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1554.198218][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1554.207363][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1554.216382][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2161'. [ 1554.709121][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1554.875680][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.888569][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1554.907686][ T5907] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1554.934663][ T5907] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1554.942710][ T5907] usb 4-1: Manufacturer: syz [ 1554.960144][ T5907] usb 4-1: config 0 descriptor?? [ 1554.990596][ T5907] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1555.609071][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.615622][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.075465][T16436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1557.092497][ T5967] usb 4-1: USB disconnect, device number 43 [ 1557.715194][T16268] chnl_net:caif_netlink_parms(): no params data found [ 1557.833069][T16452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1559.182263][T16461] Invalid ELF section header size [ 1559.419088][T16465] program syz.4.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1561.682996][T16184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.705453][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.712761][T16184] bridge_slave_0: entered allmulticast mode [ 1562.704254][T16184] bridge_slave_0: entered promiscuous mode [ 1562.713586][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.720734][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.728469][T16184] bridge_slave_1: entered allmulticast mode [ 1562.812370][T16184] bridge_slave_1: entered promiscuous mode [ 1563.313239][T16268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.320425][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.356564][T16268] bridge_slave_0: entered allmulticast mode [ 1563.587861][T16268] bridge_slave_0: entered promiscuous mode [ 1564.263909][T16510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1564.418259][T16184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.437584][ T5967] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1564.517913][T10002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.540783][T16268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.552582][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.562702][T16268] bridge_slave_1: entered allmulticast mode [ 1564.572342][T16268] bridge_slave_1: entered promiscuous mode [ 1564.595318][ T5967] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1564.607610][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.622559][ T5967] usb 5-1: config 0 descriptor?? [ 1564.632569][T16184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.696509][T16268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.713307][ T5907] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1564.751091][T10002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.792899][T16268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.822824][T16184] team0: Port device team_slave_0 added [ 1564.832433][T16184] team0: Port device team_slave_1 added [ 1565.149003][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.164495][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.174743][ T5907] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1565.184204][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.197155][T10002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.209120][ T5907] usb 7-1: config 0 descriptor?? [ 1565.920830][T16268] team0: Port device team_slave_0 added [ 1565.986558][T16268] team0: Port device team_slave_1 added [ 1566.022664][T16184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.034569][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.062728][T16184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.076393][T16184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.084562][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.106629][ T5907] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1566.110626][T16184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.140847][T16088] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1566.150816][ T5907] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 1566.153895][T16088] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1566.192616][ T5907] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1566.217940][T10002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.298535][ T5907] cp2112 0003:10C4:EA90.0023: error requesting version [ 1566.314856][T16268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.327278][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.356092][T16268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.369141][ T5907] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -5 [ 1566.400515][T16088] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1566.428019][T16268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.437500][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.466969][T16268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.512355][ T5907] usb 7-1: USB disconnect, device number 16 [ 1566.559363][T16088] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1566.680229][T16268] hsr_slave_0: entered promiscuous mode [ 1566.687839][T16268] hsr_slave_1: entered promiscuous mode [ 1566.780421][T16184] hsr_slave_0: entered promiscuous mode [ 1566.793353][T16184] hsr_slave_1: entered promiscuous mode [ 1566.800070][T16184] debugfs: 'hsr0' already exists in 'hsr' [ 1566.806599][T16184] Cannot create hsr debugfs directory [ 1567.079598][ T5907] usb 5-1: USB disconnect, device number 53 [ 1567.872097][T10002] bridge_slave_1: left allmulticast mode [ 1567.900411][T10002] bridge_slave_1: left promiscuous mode [ 1567.925871][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.964030][T10002] bridge_slave_0: left allmulticast mode [ 1567.988131][T10002] bridge_slave_0: left promiscuous mode [ 1568.003275][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.645783][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1569.670953][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1569.688914][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1570.462427][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1570.479767][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1573.665314][ T5830] Bluetooth: hci0: command tx timeout [ 1574.943998][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.968976][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.995914][T10002] bond0 (unregistering): Released all slaves [ 1575.697136][ T5830] Bluetooth: hci0: command tx timeout [ 1575.878649][T10002] tipc: Disabling bearer [ 1575.884261][T10002] tipc: Left network mode [ 1576.153168][ T5967] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1576.263500][T10002] hsr_slave_0: left promiscuous mode [ 1576.269581][T10002] hsr_slave_1: left promiscuous mode [ 1576.276733][T10002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1576.285288][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.293781][T10002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.301300][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.310388][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.327718][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.335559][T10002] veth1_macvtap: left promiscuous mode [ 1576.337689][ T5967] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1576.343841][T10002] veth0_macvtap: left promiscuous mode [ 1576.352042][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.358663][T10002] veth1_vlan: left promiscuous mode [ 1576.368931][ T5967] usb 5-1: config 0 descriptor?? [ 1576.370992][T10002] veth0_vlan: left promiscuous mode [ 1576.894952][ T5967] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 1576.906238][ T5967] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 1576.923900][ T5967] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1576.935932][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1577.020218][ T5967] cp2112 0003:10C4:EA90.0024: error requesting version [ 1577.036063][ T5967] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -5 [ 1577.045808][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1577.231208][ T5967] usb 5-1: USB disconnect, device number 54 [ 1577.774429][ T5830] Bluetooth: hci0: command tx timeout [ 1577.795303][T16570] chnl_net:caif_netlink_parms(): no params data found [ 1577.829117][T16184] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1578.882766][T16184] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1578.984436][T16184] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1579.868526][ T5830] Bluetooth: hci0: command tx timeout [ 1579.883401][ T5967] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1580.192654][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.314814][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.356840][ T5967] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1580.369003][ T5967] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1580.386351][ T5967] usb 5-1: Manufacturer: syz [ 1580.424060][ T5967] usb 5-1: config 0 descriptor?? [ 1580.550963][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.579246][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.589584][T16570] bridge_slave_0: entered allmulticast mode [ 1580.605941][T16570] bridge_slave_0: entered promiscuous mode [ 1580.726211][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.743369][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.760969][T16570] bridge_slave_1: entered allmulticast mode [ 1580.783873][T16570] bridge_slave_1: entered promiscuous mode [ 1581.095461][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1581.109505][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1581.118433][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.134511][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.881580][ T5967] uclogic 0003:256C:006D.0025: interface is invalid, ignoring [ 1581.896540][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1582.758363][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.028040][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.045505][T16268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1583.134067][T16676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.093378][ T5907] usb 5-1: USB disconnect, device number 55 [ 1584.106559][ T5830] Bluetooth: hci1: command tx timeout [ 1584.309119][T16268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1584.420798][T16268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1585.217732][T16570] team0: Port device team_slave_0 added [ 1585.464687][T16570] team0: Port device team_slave_1 added [ 1585.580640][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1585.589979][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1585.599109][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1585.619102][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1585.628237][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1585.637174][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1586.228790][ T5830] Bluetooth: hci1: command tx timeout [ 1586.324775][T16268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1587.393278][ T5907] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1587.457915][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.564905][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.573256][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.604326][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.616030][ T5907] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1587.625410][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.636148][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.670432][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.691003][ T5907] usb 4-1: config 0 descriptor?? [ 1587.703422][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.886111][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.253607][ T5830] Bluetooth: hci1: command tx timeout [ 1588.366887][ T5907] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1588.379249][ T5907] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1588.427281][ T5907] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1588.626361][ T5907] cp2112 0003:10C4:EA90.0026: error requesting version [ 1588.668846][T16570] hsr_slave_0: entered promiscuous mode [ 1588.689966][ T5907] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -5 [ 1588.729546][T16570] hsr_slave_1: entered promiscuous mode [ 1588.757267][T16570] debugfs: 'hsr0' already exists in 'hsr' [ 1588.785440][T16570] Cannot create hsr debugfs directory [ 1588.831205][ T5907] usb 4-1: USB disconnect, device number 44 [ 1589.116680][T10002] bridge_slave_1: left allmulticast mode [ 1589.122673][T10002] bridge_slave_1: left promiscuous mode [ 1589.137984][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.152083][T10002] bridge_slave_0: left allmulticast mode [ 1589.158986][T10002] bridge_slave_0: left promiscuous mode [ 1589.177159][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.333744][ T5830] Bluetooth: hci1: command tx timeout [ 1590.428635][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.615682][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.726865][T10002] bond0 (unregistering): Released all slaves [ 1592.974362][T10002] hsr_slave_0: left promiscuous mode [ 1592.994425][T10002] hsr_slave_1: left promiscuous mode [ 1593.000674][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.009173][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.930421][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1595.104681][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1596.593215][ T6017] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1597.173383][ T6017] usb 4-1: Using ep0 maxpacket: 16 [ 1597.184947][ T6017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.208427][ T6017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.388963][ T6017] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1597.953838][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.966158][ T6017] usb 4-1: config 0 descriptor?? [ 1598.437982][ T6017] apple 0003:05AC:024B.0027: unknown global tag 0xe [ 1598.494718][ T6017] apple 0003:05AC:024B.0027: item 0 1 1 14 parsing failed [ 1598.565108][ T6017] apple 0003:05AC:024B.0027: parse failed [ 1598.571389][ T6017] apple 0003:05AC:024B.0027: probe with driver apple failed with error -22 [ 1598.705891][ T5967] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1599.169438][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.190713][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.385273][ T5967] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1599.403588][ T5967] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1599.411599][ T5967] usb 7-1: Manufacturer: syz [ 1599.454798][ T5967] usb 7-1: config 0 descriptor?? [ 1599.599373][T16660] chnl_net:caif_netlink_parms(): no params data found [ 1599.782588][T14024] usb 4-1: USB disconnect, device number 45 [ 1600.016015][ T5967] usbhid 7-1:0.0: can't add hid device: -32 [ 1600.022219][ T5967] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1600.958537][ T5967] usb 7-1: USB disconnect, device number 17 [ 1602.006590][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1602.019912][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1602.030500][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1602.079425][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1602.089716][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1604.333386][ T5835] Bluetooth: hci3: command tx timeout [ 1605.188007][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.195475][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.212039][T16660] bridge_slave_0: entered allmulticast mode [ 1605.246135][T16660] bridge_slave_0: entered promiscuous mode [ 1605.760564][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.812485][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.831119][T16660] bridge_slave_1: entered allmulticast mode [ 1605.853446][T16660] bridge_slave_1: entered promiscuous mode [ 1606.641063][ T5835] Bluetooth: hci3: command tx timeout [ 1606.957995][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.040096][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.287924][T16660] team0: Port device team_slave_0 added [ 1607.323352][ T5907] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1607.507429][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.540189][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.604471][ T5907] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1607.820104][T16660] team0: Port device team_slave_1 added [ 1607.862410][ T5907] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1608.583758][ T5907] usb 4-1: Manufacturer: syz [ 1608.609148][ T5907] usb 4-1: config 0 descriptor?? [ 1608.653207][ T5835] Bluetooth: hci3: command tx timeout [ 1608.677038][T16570] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1608.851140][T16570] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1609.046185][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.054050][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.084130][ T5907] usbhid 4-1:0.0: can't add hid device: -32 [ 1609.104154][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1609.111982][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.121801][ T5907] usb 4-1: USB disconnect, device number 46 [ 1609.163462][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.183084][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.209005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1609.219613][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.248285][T16570] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1609.299680][T16570] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1609.508635][T16660] hsr_slave_0: entered promiscuous mode [ 1609.516870][T16660] hsr_slave_1: entered promiscuous mode [ 1609.524628][T16660] debugfs: 'hsr0' already exists in 'hsr' [ 1609.530475][T16660] Cannot create hsr debugfs directory [ 1609.540493][T10002] bridge_slave_1: left allmulticast mode [ 1609.546492][T10002] bridge_slave_1: left promiscuous mode [ 1609.554070][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.565683][T10002] bridge_slave_0: left allmulticast mode [ 1609.571338][T10002] bridge_slave_0: left promiscuous mode [ 1609.577201][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.497969][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.517874][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.536539][T10002] bond0 (unregistering): Released all slaves [ 1610.780285][ T5835] Bluetooth: hci3: command tx timeout [ 1612.185426][T10002] hsr_slave_0: left promiscuous mode [ 1612.191832][T10002] hsr_slave_1: left promiscuous mode [ 1612.198675][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.209292][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.605096][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1612.659360][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1613.690052][ T5975] Bluetooth: hci6: Frame reassembly failed (-84) [ 1614.274810][T16818] chnl_net:caif_netlink_parms(): no params data found [ 1615.625104][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.633834][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.660622][T16818] bridge_slave_0: entered allmulticast mode [ 1615.693875][ T5835] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1615.708345][T16818] bridge_slave_0: entered promiscuous mode [ 1615.803349][ T5907] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1615.843930][T16570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.881667][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.931962][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.951704][T16818] bridge_slave_1: entered allmulticast mode [ 1615.975432][T16818] bridge_slave_1: entered promiscuous mode [ 1616.019229][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.057840][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.112817][ T5907] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1616.166110][ T5907] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1616.196787][ T5907] usb 7-1: Manufacturer: syz [ 1616.238735][ T5907] usb 7-1: config 0 descriptor?? [ 1616.337658][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.458007][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.978820][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.985702][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.427392][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.629366][ T5907] usbhid 7-1:0.0: can't add hid device: -32 [ 1617.643159][ T5907] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1617.663985][ T5907] usb 7-1: USB disconnect, device number 18 [ 1617.808171][T16818] team0: Port device team_slave_0 added [ 1617.827603][T16818] team0: Port device team_slave_1 added [ 1617.946586][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.985682][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.043943][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.887616][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.894875][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.980014][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.014302][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.040223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.090352][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.347783][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.355017][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.102274][T16818] hsr_slave_0: entered promiscuous mode [ 1621.118732][T16818] hsr_slave_1: entered promiscuous mode [ 1621.195021][T16818] debugfs: 'hsr0' already exists in 'hsr' [ 1621.261773][T16818] Cannot create hsr debugfs directory [ 1621.809628][T16660] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1623.212291][T16660] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1623.806468][T16660] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1624.314913][T16660] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1625.783145][T14024] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1625.933512][ T6004] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1626.010574][T14024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.024034][T14024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.041113][T14024] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1626.053290][T14024] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1626.061424][T14024] usb 4-1: Manufacturer: syz [ 1626.100268][T10002] bridge_slave_1: left allmulticast mode [ 1626.146399][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.176853][T10002] bridge_slave_1: left promiscuous mode [ 1626.183746][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.200501][T14024] usb 4-1: config 0 descriptor?? [ 1626.220017][T10002] bridge_slave_0: left allmulticast mode [ 1626.235780][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.284310][T10002] bridge_slave_0: left promiscuous mode [ 1626.301860][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.302485][ T6004] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1626.363187][ T6004] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1626.376825][ T6004] usb 5-1: Manufacturer: syz [ 1626.412381][ T6004] usb 5-1: config 0 descriptor?? [ 1626.671522][T14024] usbhid 4-1:0.0: can't add hid device: -32 [ 1626.684671][T14024] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1627.203522][T14024] usb 4-1: USB disconnect, device number 47 [ 1627.301222][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.354219][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.377627][T10002] bond0 (unregistering): Released all slaves [ 1627.545829][ T6004] uclogic 0003:256C:006D.0028: interface is invalid, ignoring [ 1627.713882][T16570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.732580][T10002] hsr_slave_0: left promiscuous mode [ 1628.739173][T10002] hsr_slave_1: left promiscuous mode [ 1628.747205][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.545408][ T5907] usb 5-1: USB disconnect, device number 56 [ 1629.803843][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.784942][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1630.795344][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1630.803772][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1630.812007][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1630.820704][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1632.549940][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1632.769977][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1632.893499][ T5835] Bluetooth: hci6: command tx timeout [ 1634.997531][ T5835] Bluetooth: hci6: command tx timeout [ 1637.053208][ T5835] Bluetooth: hci6: command tx timeout [ 1638.594887][T16660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.209099][ T5835] Bluetooth: hci6: command tx timeout [ 1640.849639][T16818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1640.928870][T16818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1640.989836][T16818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1641.019133][T16818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1642.486934][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1642.496066][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1642.504141][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1642.512428][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1642.535921][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1642.600740][T17086] chnl_net:caif_netlink_parms(): no params data found [ 1642.654407][ T5967] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1643.385362][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.403484][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.432716][ T5967] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1644.263059][ T5967] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1644.282470][ T5967] usb 7-1: Manufacturer: syz [ 1644.306499][ T5967] usb 7-1: config 0 descriptor?? [ 1644.413715][T17086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.465727][T17086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.623193][ T5835] Bluetooth: hci0: command tx timeout [ 1645.788462][T17086] bridge_slave_0: entered allmulticast mode [ 1645.968628][T17086] bridge_slave_0: entered promiscuous mode [ 1646.062467][T17086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.081315][ T5967] usbhid 7-1:0.0: can't add hid device: -32 [ 1646.138908][ T5967] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1646.142758][T17086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.194658][T17086] bridge_slave_1: entered allmulticast mode [ 1646.307751][T17086] bridge_slave_1: entered promiscuous mode [ 1646.328710][ T5967] usb 7-1: USB disconnect, device number 19 [ 1646.664637][ T5835] Bluetooth: hci0: command tx timeout [ 1647.714970][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.789652][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.853155][ T5835] Bluetooth: hci0: command tx timeout [ 1649.008249][T17086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.037824][T17086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.123415][T14824] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1650.308346][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.315582][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.344664][T14824] usb 7-1: Using ep0 maxpacket: 16 [ 1650.395458][T14824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.489363][T14824] usb 7-1: config 0 has no interfaces? [ 1650.539244][T14824] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1650.592269][T14824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.609955][T17086] team0: Port device team_slave_0 added [ 1650.649291][T14824] usb 7-1: config 0 descriptor?? [ 1650.692377][T17086] team0: Port device team_slave_1 added [ 1650.709496][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.716699][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.812613][T10002] bridge_slave_1: left allmulticast mode [ 1650.823594][T10002] bridge_slave_1: left promiscuous mode [ 1650.829379][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.841096][T10002] bridge_slave_0: left allmulticast mode [ 1650.849415][T10002] bridge_slave_0: left promiscuous mode [ 1650.855965][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.913339][ T5835] Bluetooth: hci0: command tx timeout [ 1652.152920][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.202056][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.267471][T14824] usb 7-1: USB disconnect, device number 20 [ 1652.382478][T10002] bond0 (unregistering): Released all slaves [ 1653.795185][T17086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.822458][T17086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.854282][T17086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.154405][T10002] hsr_slave_0: left promiscuous mode [ 1654.193663][T10002] hsr_slave_1: left promiscuous mode [ 1654.282935][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.337113][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.107423][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1656.150307][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1656.642033][T17086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.660442][T17086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.690384][T17086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.278462][T17086] hsr_slave_0: entered promiscuous mode [ 1657.363987][T17086] hsr_slave_1: entered promiscuous mode [ 1657.419670][T17169] chnl_net:caif_netlink_parms(): no params data found [ 1658.286624][T17169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.303438][T17169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.341214][T17169] bridge_slave_0: entered allmulticast mode [ 1658.349816][T17169] bridge_slave_0: entered promiscuous mode [ 1658.375844][T17169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.393350][T17169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.423601][T17169] bridge_slave_1: entered allmulticast mode [ 1658.443627][T17169] bridge_slave_1: entered promiscuous mode [ 1659.680353][T17169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.328175][T17169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.223144][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1661.232536][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1661.240633][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1661.430653][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1661.439888][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1661.448906][T17324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1661.467900][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1661.477094][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1661.486106][T17324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1661.578410][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1661.603810][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1661.880207][T17169] team0: Port device team_slave_0 added [ 1661.902325][T17169] team0: Port device team_slave_1 added [ 1664.103256][T14824] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1664.282829][T17169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.310064][T17169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.344531][ T5835] Bluetooth: hci1: command tx timeout [ 1664.351914][T17169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.365297][T17169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.372247][T17169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.398325][T17169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.415474][T14824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.466384][T14824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.507654][T14824] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1664.532969][T14824] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1664.555087][T14824] usb 5-1: Manufacturer: syz [ 1664.572183][T14824] usb 5-1: config 0 descriptor?? [ 1665.501618][T17169] hsr_slave_0: entered promiscuous mode [ 1665.654167][T17169] hsr_slave_1: entered promiscuous mode [ 1665.782295][T17169] debugfs: 'hsr0' already exists in 'hsr' [ 1665.783202][T14824] usbhid 5-1:0.0: can't add hid device: -71 [ 1665.833317][T14824] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1665.876821][T17169] Cannot create hsr debugfs directory [ 1665.943206][T14824] usb 5-1: USB disconnect, device number 57 [ 1666.423168][ T5835] Bluetooth: hci1: command tx timeout [ 1666.933080][T10002] bridge_slave_1: left allmulticast mode [ 1666.939529][T10002] bridge_slave_1: left promiscuous mode [ 1666.979805][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.042396][T10002] bridge_slave_0: left allmulticast mode [ 1667.054076][T10002] bridge_slave_0: left promiscuous mode [ 1667.059918][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.423156][T14024] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1667.506506][T10002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.524433][T10002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1667.535901][T10002] bond0 (unregistering): Released all slaves [ 1667.588767][T14024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.614107][T14024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.689629][T14024] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1667.723109][T14024] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1667.733070][T14024] usb 5-1: Manufacturer: syz [ 1667.738720][T10002] hsr_slave_0: left promiscuous mode [ 1667.749813][T10002] hsr_slave_1: left promiscuous mode [ 1667.757405][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.757526][T14024] usb 5-1: config 0 descriptor?? [ 1667.770972][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.025177][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1668.062334][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1668.493144][ T5835] Bluetooth: hci1: command tx timeout [ 1668.721809][T14024] uclogic 0003:256C:006D.0029: interface is invalid, ignoring [ 1669.032273][T17086] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1669.087418][T17086] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1669.159844][T17086] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1669.269930][T17086] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1669.322102][T17317] chnl_net:caif_netlink_parms(): no params data found [ 1669.724160][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1669.733337][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1669.742227][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1669.758706][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1669.768039][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1669.777361][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1670.573473][ T5835] Bluetooth: hci1: command tx timeout [ 1670.681164][ T6004] usb 5-1: USB disconnect, device number 58 [ 1672.819997][T17317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.845803][T17317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.865949][T17317] bridge_slave_0: entered allmulticast mode [ 1672.878257][T17317] bridge_slave_0: entered promiscuous mode [ 1673.044867][T17317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.052157][T17317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.084637][T17317] bridge_slave_1: entered allmulticast mode [ 1673.101636][T17317] bridge_slave_1: entered promiscuous mode [ 1673.669060][T17317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.825124][T17317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.981100][T17169] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1674.114953][T17317] team0: Port device team_slave_0 added [ 1674.156306][T17317] team0: Port device team_slave_1 added [ 1674.182145][T17169] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1675.235939][T17317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.242914][T17317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.268913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.323066][T17317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.344139][T17169] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1675.365139][T17169] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1675.441457][T17317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.457911][T17317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.483849][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.523113][T17317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.655131][ T143] bridge_slave_1: left allmulticast mode [ 1675.671039][ T143] bridge_slave_1: left promiscuous mode [ 1675.681377][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.712188][ T143] bridge_slave_0: left allmulticast mode [ 1675.719074][ T143] bridge_slave_0: left promiscuous mode [ 1675.725654][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.537485][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.552153][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.569975][ T143] bond0 (unregistering): Released all slaves [ 1676.652352][T17086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.008067][ T143] hsr_slave_0: left promiscuous mode [ 1677.180056][ T143] hsr_slave_1: left promiscuous mode [ 1677.194697][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.215045][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.472752][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.487886][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.107719][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1679.116877][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1679.125841][T17476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1680.748341][ T143] team0 (unregistering): Port device team_slave_1 removed [ 1681.082723][ T143] team0 (unregistering): Port device team_slave_0 removed [ 1683.414207][T17317] hsr_slave_0: entered promiscuous mode [ 1683.447320][T17317] hsr_slave_1: entered promiscuous mode [ 1683.474554][T17317] debugfs: 'hsr0' already exists in 'hsr' [ 1683.496959][T17317] Cannot create hsr debugfs directory [ 1683.899340][T17086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.022735][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.030040][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.229652][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.236967][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.529507][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'. [ 1686.538703][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 1686.547659][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2361'. [ 1688.598416][T17169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.620464][T17169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.732152][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.739470][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.800980][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.808184][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.216645][T17317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1690.248552][T17317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1690.276199][T17317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1690.309251][T17317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1690.561744][T17169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1690.632725][T17317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.011601][T17317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.591897][T17614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2372'. [ 1692.601391][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2372'. [ 1692.610338][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2372'. [ 1693.129701][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.136931][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.202546][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.209781][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1693.225784][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1693.234758][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1693.242559][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1693.251396][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1693.264198][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1693.815794][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2377'. [ 1693.826806][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2377'. [ 1695.622970][ T5830] Bluetooth: hci3: command tx timeout [ 1696.078634][T17169] veth0_vlan: entered promiscuous mode [ 1696.092558][T17169] veth1_vlan: entered promiscuous mode [ 1697.266356][T17169] veth0_macvtap: entered promiscuous mode [ 1697.371945][T17169] veth1_macvtap: entered promiscuous mode [ 1697.693637][ T5830] Bluetooth: hci3: command tx timeout [ 1698.246776][T17169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.779497][T17169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1699.023004][ T6382] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.032033][ T6382] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.163275][T14024] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1699.340010][T14024] usb 4-1: config 237 has an invalid interface number: 158 but max is 0 [ 1699.365669][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2386'. [ 1699.773209][ T5830] Bluetooth: hci3: command tx timeout [ 1699.829257][T14024] usb 4-1: config 237 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.885266][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'. [ 1699.923309][T14024] usb 4-1: config 237 has no interface number 0 [ 1699.943062][T17670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2386'. [ 1699.944206][ T6382] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.963285][T14024] usb 4-1: config 237 interface 158 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 1699.997418][ T6382] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.007626][T14024] usb 4-1: config 237 interface 158 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1700.065707][T14024] usb 4-1: config 237 interface 158 has no altsetting 0 [ 1700.083158][T14024] usb 4-1: New USB device found, idVendor=07d1, idProduct=3a07, bcdDevice=5d.55 [ 1700.112592][T14024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.139939][T17693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1700.174975][ T5975] bridge_slave_1: left allmulticast mode [ 1700.184281][ T5975] bridge_slave_1: left promiscuous mode [ 1700.195446][T14024] usb 4-1: Could not find all expected endpoints [ 1700.207507][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.240739][ T5975] bridge_slave_0: left allmulticast mode [ 1700.257159][ T5975] bridge_slave_0: left promiscuous mode [ 1700.271037][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.489764][T16169] usb 4-1: USB disconnect, device number 48 [ 1701.863171][ T5830] Bluetooth: hci3: command tx timeout [ 1705.141778][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.156764][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.174086][ T5975] bond0 (unregistering): Released all slaves [ 1705.283195][T17627] chnl_net:caif_netlink_parms(): no params data found [ 1706.564541][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 1706.573776][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 1706.582694][T17765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2401'. [ 1707.140139][T17770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1707.153157][T17770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1707.171097][T17770] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1707.197581][T17770] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1707.216858][T17770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1707.279351][ T5975] hsr_slave_0: left promiscuous mode [ 1707.308482][ T5975] hsr_slave_1: left promiscuous mode [ 1707.364460][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.393883][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.293290][ T5830] Bluetooth: hci6: command tx timeout [ 1709.991327][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 1710.111406][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 1711.264854][T17317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.300034][T17627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.310019][T17627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.318909][T17627] bridge_slave_0: entered allmulticast mode [ 1711.340401][T17627] bridge_slave_0: entered promiscuous mode [ 1711.370633][T17627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.378176][T17770] Bluetooth: hci6: command tx timeout [ 1711.402274][T17627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.422372][T17627] bridge_slave_1: entered allmulticast mode [ 1711.437812][T17627] bridge_slave_1: entered promiscuous mode [ 1711.453784][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1711.817438][T17627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.869284][T17627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.589076][ T6045] Bluetooth: hci0: Frame reassembly failed (-84) [ 1712.626397][T17627] team0: Port device team_slave_0 added [ 1713.079666][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'. [ 1713.102159][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'. [ 1713.783124][ T5830] Bluetooth: hci6: command tx timeout [ 1713.934863][T17627] team0: Port device team_slave_1 added [ 1714.713706][ T5830] Bluetooth: hci0: command 0x1003 tx timeout [ 1714.721374][T17770] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1714.794560][T17627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.931130][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.086529][T17627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.101860][T17627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.110761][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.163062][T17627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.208161][T17770] Bluetooth: hci6: command tx timeout [ 1717.936497][T17627] hsr_slave_0: entered promiscuous mode [ 1717.948882][T17627] hsr_slave_1: entered promiscuous mode [ 1717.962898][T17317] veth0_vlan: entered promiscuous mode [ 1718.040075][T17768] chnl_net:caif_netlink_parms(): no params data found [ 1719.727586][ T5975] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.370634][ T5975] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.690268][ T5975] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.813788][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1721.829011][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1721.838144][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1721.853471][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1721.871884][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1722.070559][ T5975] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.235537][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.256989][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.280050][T17768] bridge_slave_0: entered allmulticast mode [ 1722.315808][T17768] bridge_slave_0: entered promiscuous mode [ 1722.336667][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.365890][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.393373][T17768] bridge_slave_1: entered allmulticast mode [ 1722.410784][T17768] bridge_slave_1: entered promiscuous mode [ 1722.809689][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.026662][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.943333][ T5835] Bluetooth: hci0: command tx timeout [ 1724.639604][T17768] team0: Port device team_slave_0 added [ 1724.788076][T17768] team0: Port device team_slave_1 added [ 1726.208621][ T5835] Bluetooth: hci0: command tx timeout [ 1726.834051][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.841029][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.913102][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.021414][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.044844][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.074979][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.228292][ T5975] bridge_slave_1: left allmulticast mode [ 1727.234518][ T5975] bridge_slave_1: left promiscuous mode [ 1727.248450][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.259821][ T5975] bridge_slave_0: left allmulticast mode [ 1727.266178][ T5975] bridge_slave_0: left promiscuous mode [ 1727.272020][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.473113][ T5907] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1727.636112][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2434'. [ 1727.655493][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.691610][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.748516][ T5907] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1727.770291][ T5907] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1727.796075][ T5907] usb 7-1: Manufacturer: syz [ 1727.807575][ T5907] usb 7-1: config 0 descriptor?? [ 1727.875987][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.889904][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.905520][ T5975] bond0 (unregistering): Released all slaves [ 1728.149059][ T5975] hsr_slave_0: left promiscuous mode [ 1728.156231][ T5975] hsr_slave_1: left promiscuous mode [ 1728.162718][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.172564][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.181452][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.190540][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.221437][ T5975] veth1_macvtap: left promiscuous mode [ 1728.229775][ T5975] veth0_macvtap: left promiscuous mode [ 1728.240810][ T5975] veth1_vlan: left promiscuous mode [ 1728.246946][ T5975] veth0_vlan: left promiscuous mode [ 1728.254923][ T5835] Bluetooth: hci0: command tx timeout [ 1728.691791][ T5907] uclogic 0003:256C:006D.002A: failed retrieving string descriptor #200: -71 [ 1728.720701][ T5907] uclogic 0003:256C:006D.002A: failed retrieving pen parameters: -71 [ 1728.729959][ T5907] uclogic 0003:256C:006D.002A: failed probing pen v2 parameters: -71 [ 1728.746489][ T5907] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 1728.756794][ T5907] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 1728.782271][ T5907] usb 7-1: USB disconnect, device number 21 [ 1729.182530][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 1729.347332][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 1729.771596][T17768] hsr_slave_0: entered promiscuous mode [ 1729.798372][T17768] hsr_slave_1: entered promiscuous mode [ 1729.812546][T17768] debugfs: 'hsr0' already exists in 'hsr' [ 1729.828204][T17768] Cannot create hsr debugfs directory [ 1730.335921][ T5835] Bluetooth: hci0: command tx timeout [ 1731.060379][T17925] chnl_net:caif_netlink_parms(): no params data found [ 1733.072280][T17627] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1733.208509][T17627] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1733.259875][T17627] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1733.349577][T17925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.381035][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.411862][T17925] bridge_slave_0: entered allmulticast mode [ 1733.445568][T17925] bridge_slave_0: entered promiscuous mode [ 1733.483492][T17925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.490664][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.553315][T17925] bridge_slave_1: entered allmulticast mode [ 1733.573685][T17925] bridge_slave_1: entered promiscuous mode [ 1733.591689][T17627] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1733.809468][T17925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.044513][T17925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.829629][T17925] team0: Port device team_slave_0 added [ 1734.849884][T17925] team0: Port device team_slave_1 added [ 1735.355883][T17925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.380052][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.979442][T17925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.998048][T17925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.005123][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.032943][T17925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.299149][T17925] hsr_slave_0: entered promiscuous mode [ 1736.324493][T17925] hsr_slave_1: entered promiscuous mode [ 1736.351346][T17925] debugfs: 'hsr0' already exists in 'hsr' [ 1736.363085][T17925] Cannot create hsr debugfs directory [ 1736.964621][ T5975] bridge_slave_1: left allmulticast mode [ 1736.970421][ T5975] bridge_slave_1: left promiscuous mode [ 1736.983322][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.995587][ T5975] bridge_slave_0: left allmulticast mode [ 1737.001265][ T5975] bridge_slave_0: left promiscuous mode [ 1737.023313][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.755984][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.769006][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.902329][ T5975] bond0 (unregistering): Released all slaves [ 1738.357294][T17768] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1738.538780][T17768] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1738.890503][ T5975] hsr_slave_0: left promiscuous mode [ 1739.683142][ T5975] hsr_slave_1: left promiscuous mode [ 1739.694139][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1739.770297][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1739.914102][ T5975] veth0_vlan: left promiscuous mode [ 1739.933861][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.948395][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.337982][ T5907] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1740.775616][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.844429][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.864119][ T5907] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1740.884617][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.911706][ T5907] usb 4-1: config 0 descriptor?? [ 1741.645362][ T5907] usbhid 4-1:0.0: can't add hid device: -32 [ 1741.662921][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1741.686074][ T5907] usb 4-1: USB disconnect, device number 49 [ 1742.397146][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 1742.554884][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 1744.482009][T17768] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1744.587202][T17768] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1745.158025][T17627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.897129][T17627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.913126][T16169] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1746.969756][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.977102][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.049931][T17768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1747.076183][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.083477][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.092224][T16169] usb 5-1: Using ep0 maxpacket: 16 [ 1747.124440][T16169] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.172415][T16169] usb 5-1: config 0 has no interfaces? [ 1747.193626][T16169] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1747.223522][T16169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.256029][T16169] usb 5-1: config 0 descriptor?? [ 1747.311802][T17768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1747.368452][T17925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1747.555527][T17925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1747.576382][T17925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1747.989491][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.996819][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.423590][T17925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1748.487649][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.494894][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.668605][ T9] usb 5-1: USB disconnect, device number 59 [ 1750.789567][T17925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.942182][T17925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.992128][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.999352][T17243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.032016][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.039259][T17243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.498147][T17768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.975879][ T3503] Bluetooth: hci1: Frame reassembly failed (-84) [ 1753.209654][T17925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.800806][T18284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1753.810451][T18284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1753.819417][T18284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1753.946167][T18284] Bluetooth: hci1: command 0x1003 tx timeout [ 1753.968068][T18284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1753.980769][T18284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1754.570957][ T5835] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1754.609548][T17925] veth0_vlan: entered promiscuous mode [ 1754.871948][T17925] veth1_vlan: entered promiscuous mode [ 1756.093139][ T5835] Bluetooth: hci3: command tx timeout [ 1756.106710][T17768] veth0_vlan: entered promiscuous mode [ 1756.115319][T17925] veth0_macvtap: entered promiscuous mode [ 1756.192684][T17925] veth1_macvtap: entered promiscuous mode [ 1756.228648][T17768] veth1_vlan: entered promiscuous mode [ 1757.947611][T17925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.140934][T17925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.173740][ T5835] Bluetooth: hci3: command tx timeout [ 1758.233408][ T36] bridge_slave_1: left allmulticast mode [ 1758.249424][ T36] bridge_slave_1: left promiscuous mode [ 1758.283486][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.318905][ T36] bridge_slave_0: left allmulticast mode [ 1758.334951][ T36] bridge_slave_0: left promiscuous mode [ 1758.341261][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.940921][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.956552][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1759.649192][ T36] bond0 (unregistering): Released all slaves [ 1759.796799][T18282] chnl_net:caif_netlink_parms(): no params data found [ 1759.829072][T17768] veth0_macvtap: entered promiscuous mode [ 1759.992315][ T36] hsr_slave_0: left promiscuous mode [ 1760.009098][ T36] hsr_slave_1: left promiscuous mode [ 1760.027693][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1760.055650][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.282315][ T5835] Bluetooth: hci3: command tx timeout [ 1762.096846][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1762.333800][ T5835] Bluetooth: hci3: command tx timeout [ 1762.378258][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1763.600080][ T6045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.623784][ T6045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.712156][ T6045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.855214][ T6045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.587863][T18282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.428275][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.441060][T18282] bridge_slave_0: entered allmulticast mode [ 1766.456721][T18282] bridge_slave_0: entered promiscuous mode [ 1766.557486][T18284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1766.616275][T18284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1766.624147][T18284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1766.644569][T18284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1766.652527][T18284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1766.798406][T18282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.943976][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.491963][T18282] bridge_slave_1: entered allmulticast mode [ 1767.513392][T18282] bridge_slave_1: entered promiscuous mode [ 1767.686869][T18282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.783907][T18282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.866476][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.918340][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.038373][T18282] team0: Port device team_slave_0 added [ 1768.055766][T18282] team0: Port device team_slave_1 added [ 1768.750661][T18284] Bluetooth: hci1: command tx timeout [ 1768.859820][T18282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.874067][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.986785][T18282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.272165][T18282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.314970][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.716739][T18282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.748162][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.763094][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.696206][T18284] Bluetooth: hci1: command tx timeout [ 1772.373416][T18282] hsr_slave_0: entered promiscuous mode [ 1772.641485][T18282] hsr_slave_1: entered promiscuous mode [ 1773.873477][T18284] Bluetooth: hci1: command tx timeout [ 1775.933340][T18284] Bluetooth: hci1: command tx timeout [ 1776.523817][T18384] chnl_net:caif_netlink_parms(): no params data found [ 1779.859665][ T36] bridge_slave_1: left allmulticast mode [ 1779.935800][ T36] bridge_slave_1: left promiscuous mode [ 1780.083422][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.754352][ T36] bridge_slave_0: left allmulticast mode [ 1780.760039][ T36] bridge_slave_0: left promiscuous mode [ 1780.869097][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.043408][ T8709] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1783.258848][ T8709] usb 4-1: Using ep0 maxpacket: 32 [ 1783.298462][ T8709] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1783.321186][ T8709] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1783.344961][ T8709] usb 4-1: config 0 has no interface number 0 [ 1783.355427][ T8709] usb 4-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1783.388194][ T8709] usb 4-1: config 0 interface 114 has no altsetting 0 [ 1783.407943][ T8709] usb 4-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 1783.419372][ T8709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.438112][ T8709] usb 4-1: Product: syz [ 1783.641026][ T8709] usb 4-1: Manufacturer: syz [ 1783.646308][ T8709] usb 4-1: SerialNumber: syz [ 1783.663124][ T8709] usb 4-1: config 0 descriptor?? [ 1784.571656][ T8709] usb 4-1: bad CDC descriptors [ 1784.607058][ T8709] usb 4-1: USB disconnect, device number 50 [ 1784.639365][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1784.894755][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1784.918294][ T36] bond0 (unregistering): Released all slaves [ 1785.877170][T18384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.923414][T18384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.936206][T18384] bridge_slave_0: entered allmulticast mode [ 1785.982868][T18384] bridge_slave_0: entered promiscuous mode [ 1787.063574][ T36] hsr_slave_0: left promiscuous mode [ 1787.075979][ T36] hsr_slave_1: left promiscuous mode [ 1787.082104][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.153544][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.206908][ T36] veth0_macvtap: left promiscuous mode [ 1787.223503][ T36] veth1_vlan: left promiscuous mode [ 1787.234910][ T36] veth0_vlan: left promiscuous mode [ 1791.739742][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1792.430255][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1795.731123][T18384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.790815][T18384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.811614][T18384] bridge_slave_1: entered allmulticast mode [ 1795.834819][T18384] bridge_slave_1: entered promiscuous mode [ 1797.675245][T18384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.729747][T18384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.175004][T18384] team0: Port device team_slave_0 added [ 1799.235008][T18384] team0: Port device team_slave_1 added [ 1799.460469][T18384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.491097][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.517043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1799.703137][T18384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.750800][T18384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.828004][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.855010][T18661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1799.862235][T18661] IPv6: NLM_F_CREATE should be set when creating new route [ 1799.869657][T18661] IPv6: NLM_F_CREATE should be set when creating new route [ 1799.876992][T18661] IPv6: NLM_F_CREATE should be set when creating new route [ 1800.333535][T18384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.420064][T18282] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1800.544809][T18282] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1800.628246][T18384] hsr_slave_0: entered promiscuous mode [ 1800.678216][T18384] hsr_slave_1: entered promiscuous mode [ 1800.745780][T18384] debugfs: 'hsr0' already exists in 'hsr' [ 1800.751540][T18384] Cannot create hsr debugfs directory [ 1800.785205][T18282] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1800.824087][T18282] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1801.308769][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.316528][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1804.586066][T18282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.759890][T18282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.851425][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.858635][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.144949][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.152136][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.939122][T18384] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1806.023988][T18384] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1806.092866][T18384] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1806.168977][T18384] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1807.868930][T18384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.028013][T18384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1808.070120][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.077332][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1808.638181][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.645329][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.131399][T18282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.510503][T18384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.709099][T18282] veth0_vlan: entered promiscuous mode [ 1811.803415][T18282] veth1_vlan: entered promiscuous mode [ 1812.031293][T18282] veth0_macvtap: entered promiscuous mode [ 1812.121808][T18282] veth1_macvtap: entered promiscuous mode [ 1813.229999][T18384] veth0_vlan: entered promiscuous mode [ 1813.296905][T18384] veth1_vlan: entered promiscuous mode [ 1813.473037][T18384] veth0_macvtap: entered promiscuous mode [ 1813.512164][T18384] veth1_macvtap: entered promiscuous mode [ 1813.566704][T18384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.608243][T18384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.708814][ T1133] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.800102][T14732] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.074476][ T67] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.109480][ T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.402315][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1816.411488][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1816.420970][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1816.431479][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1816.442350][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1818.787300][T18284] Bluetooth: hci3: command tx timeout [ 1820.823325][T18284] Bluetooth: hci3: command tx timeout [ 1822.381019][ T6480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.397553][ T6480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.725114][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.764686][T18838] tipc: Enabling of bearer rejected, already enabled [ 1822.778399][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.893180][T18284] Bluetooth: hci3: command tx timeout [ 1824.059308][T18800] chnl_net:caif_netlink_parms(): no params data found [ 1825.092842][T18284] Bluetooth: hci3: command tx timeout [ 1825.456746][ T3503] bridge_slave_1: left allmulticast mode [ 1825.462429][ T3503] bridge_slave_1: left promiscuous mode [ 1825.529317][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.836711][ T3503] bridge_slave_0: left allmulticast mode [ 1826.842398][ T3503] bridge_slave_0: left promiscuous mode [ 1826.917141][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.899030][T18931] fuse: Bad value for 'fd' [ 1838.269057][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.290736][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.421307][ T3503] bond0 (unregistering): Released all slaves [ 1839.190386][ T3503] hsr_slave_0: left promiscuous mode [ 1839.217000][ T3503] hsr_slave_1: left promiscuous mode [ 1839.317386][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1839.358730][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1839.404390][ T3503] veth1_macvtap: left promiscuous mode [ 1839.429126][ T3503] veth0_macvtap: left promiscuous mode [ 1839.447551][ T3503] veth1_vlan: left promiscuous mode [ 1839.457667][ T3503] veth0_vlan: left promiscuous mode [ 1840.814588][T18966] fuse: Bad value for 'fd' [ 1842.025389][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 1842.454269][T18974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1842.585744][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 1844.623103][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 1845.680886][T18800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.709156][T18800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.726642][T18800] bridge_slave_0: entered allmulticast mode [ 1845.755342][T18800] bridge_slave_0: entered promiscuous mode [ 1845.794716][T18800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.803843][T18800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.819239][T18800] bridge_slave_1: entered allmulticast mode [ 1846.071155][T18800] bridge_slave_1: entered promiscuous mode [ 1846.150266][T18800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.178552][T18800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.515410][T18800] team0: Port device team_slave_0 added [ 1848.271465][T18800] team0: Port device team_slave_1 added [ 1850.151917][T18800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.213143][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1850.239167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1850.783203][T14024] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1851.972713][T18800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.137475][T18800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.260208][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1852.337779][T18800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.801646][T19036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1854.003512][T18800] hsr_slave_0: entered promiscuous mode [ 1854.041006][T18800] hsr_slave_1: entered promiscuous mode [ 1862.763797][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.770145][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1867.343320][T19131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1867.353301][T14024] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1867.897955][T18800] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1868.960048][T18800] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1869.011681][T18800] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1869.613593][T18800] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1871.062439][T18800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1871.982100][T18800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1872.071025][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.078253][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.286983][T17370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.294400][T17370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1879.122611][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2651'. [ 1882.475072][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1882.487965][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1882.500592][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1882.522456][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1882.531665][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1883.745133][T19272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1883.752405][T19272] IPv6: NLM_F_CREATE should be set when creating new route [ 1883.759749][T19272] IPv6: NLM_F_CREATE should be set when creating new route [ 1883.767015][T19272] IPv6: NLM_F_CREATE should be set when creating new route [ 1884.814889][ T5835] Bluetooth: hci3: command tx timeout [ 1886.895760][ T5835] Bluetooth: hci3: command tx timeout [ 1888.885865][ T6382] bridge_slave_1: left allmulticast mode [ 1888.976151][ T6382] bridge_slave_1: left promiscuous mode [ 1889.003162][T18284] Bluetooth: hci3: command tx timeout [ 1889.713398][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.759410][ T6382] bridge_slave_0: left allmulticast mode [ 1889.783723][ T6382] bridge_slave_0: left promiscuous mode [ 1889.791341][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.037443][T18284] Bluetooth: hci1: command 0x0406 tx timeout [ 1891.056261][T18284] Bluetooth: hci3: command tx timeout [ 1894.196225][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2677'. [ 1894.666977][ T6382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.679973][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.693283][ T6382] bond0 (unregistering): Released all slaves [ 1895.227295][ T6382] hsr_slave_0: left promiscuous mode [ 1895.671236][ T6382] hsr_slave_1: left promiscuous mode [ 1895.784972][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.054711][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1898.101089][T19371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1900.665945][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 1900.865455][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 1906.013582][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1906.297807][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1906.340725][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.392093][T19263] chnl_net:caif_netlink_parms(): no params data found [ 1906.400318][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.455353][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1906.506472][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.556610][ T9] usb 5-1: config 0 descriptor?? [ 1909.420724][ T9] usb 5-1: USB disconnect, device number 60 [ 1909.490956][T19263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.564641][T19263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.571934][T19263] bridge_slave_0: entered allmulticast mode [ 1909.623474][T19263] bridge_slave_0: entered promiscuous mode [ 1909.654774][T19263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.669015][T19263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.676519][T19263] bridge_slave_1: entered allmulticast mode [ 1909.698185][T19263] bridge_slave_1: entered promiscuous mode [ 1911.869929][T19477] fuse: Bad value for 'fd' [ 1914.231863][ T5965] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1914.818865][T19263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1914.943176][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 1914.968934][ T5965] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.015464][ T5965] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1915.064370][ T5965] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1915.121208][ T5965] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1915.244688][ T5965] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1915.267552][T19263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1915.323696][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.134029][ T5965] usbtmc 3-1:16.0: bulk endpoints not found [ 1917.229932][T14024] usb 3-1: USB disconnect, device number 7 [ 1917.345436][T19263] team0: Port device team_slave_0 added [ 1919.223250][T19263] team0: Port device team_slave_1 added [ 1920.497010][T19263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.518318][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.583150][T19263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.597138][T19263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.604554][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1921.774314][T19263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1924.178368][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.184907][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.308543][T19263] hsr_slave_0: entered promiscuous mode [ 1924.374163][T19263] hsr_slave_1: entered promiscuous mode [ 1924.987440][ T5975] Bluetooth: hci6: Frame reassembly failed (-84) [ 1927.470144][T18284] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1930.120012][T19629] tipc: Started in network mode [ 1930.138666][T19629] tipc: Node identity ac14140f, cluster identity 4711 [ 1930.174973][T19629] tipc: New replicast peer: 255.255.255.255 [ 1930.211171][T19629] tipc: Enabled bearer , priority 10 [ 1930.307187][T19263] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1930.338066][T19263] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1930.611599][T19263] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1931.365709][ T5965] tipc: Node number set to 2886997007 [ 1931.433346][T19263] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1932.339965][T19263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1932.569738][T19263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1932.805588][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.812751][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1932.905816][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.913153][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1942.741756][T18284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1942.751167][T18284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1942.761339][T18284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1942.770291][T18284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1942.780829][T18284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1942.937947][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2748'. [ 1942.949180][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2748'. [ 1944.813653][T18284] Bluetooth: hci3: command tx timeout [ 1946.905400][T18284] Bluetooth: hci3: command tx timeout [ 1948.370125][ T67] bridge_slave_1: left allmulticast mode [ 1948.385519][ T67] bridge_slave_1: left promiscuous mode [ 1949.183910][T18284] Bluetooth: hci3: command tx timeout [ 1949.224225][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.511953][ T67] bridge_slave_0: left allmulticast mode [ 1949.547565][ T67] bridge_slave_0: left promiscuous mode [ 1949.779012][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.277689][ T5830] Bluetooth: hci3: command tx timeout [ 1955.263704][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1955.341693][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.362297][ T67] bond0 (unregistering): Released all slaves [ 1956.793225][T19748] chnl_net:caif_netlink_parms(): no params data found [ 1959.240996][ T67] hsr_slave_0: left promiscuous mode [ 1959.259802][ T67] hsr_slave_1: left promiscuous mode [ 1959.270929][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1959.311608][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1965.104574][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1965.153059][ C1] hrtimer: interrupt took 44151 ns [ 1965.172872][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1967.983167][T14024] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1969.287888][T14024] usb 3-1: Using ep0 maxpacket: 8 [ 1969.344200][T14024] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1969.362221][T14024] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1969.383545][T14024] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1969.422722][T14024] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1969.453164][T14024] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1969.483346][T14024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.539228][T14024] usbtmc 3-1:16.0: bulk endpoints not found [ 1970.036511][T14024] usb 3-1: USB disconnect, device number 8 [ 1971.466516][T19748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.482419][T19748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.584728][T19748] bridge_slave_0: entered allmulticast mode [ 1971.608455][T19748] bridge_slave_0: entered promiscuous mode [ 1971.657920][T19748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.675825][T19748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.719078][T19748] bridge_slave_1: entered allmulticast mode [ 1971.748344][T19748] bridge_slave_1: entered promiscuous mode [ 1972.883729][T19748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1972.947924][T19748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1975.170028][T19748] team0: Port device team_slave_0 added [ 1976.822612][T19748] team0: Port device team_slave_1 added [ 1978.344382][T19748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.356118][T19748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.575428][T19748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1979.139708][T19748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1979.164346][T19748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1979.492184][T19748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1981.030895][T19748] hsr_slave_0: entered promiscuous mode [ 1981.072774][T19748] hsr_slave_1: entered promiscuous mode [ 1985.628309][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.634876][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1988.823713][T20128] program syz.2.2823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1989.070516][T19748] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1989.986255][T19748] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1990.064638][T19748] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1990.138363][T19748] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1990.650967][ T9674] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1991.532560][ T9674] usb 5-1: Using ep0 maxpacket: 8 [ 1992.634485][T19748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1993.006552][T19748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1993.940108][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.947415][T17243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1994.072791][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.079989][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.573482][ T9674] usb 5-1: unable to read config index 0 descriptor/start: -110 [ 1996.634908][ T9674] usb 5-1: can't read configurations, error -110 [ 1996.828763][ T9674] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1996.839943][T20193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1997.059020][ T9674] usb 5-1: device descriptor read/64, error -32 [ 1997.419042][ T9674] usb usb5-port1: attempt power cycle [ 1998.133173][ T9674] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1998.883439][ T9674] usb 5-1: device descriptor read/8, error -32 [ 1999.193579][ T9674] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1999.290645][ T9674] usb 5-1: device descriptor read/8, error -32 [ 1999.514558][ T9674] usb usb5-port1: unable to enumerate USB device [ 2000.118174][T20122] raw-gadget.0 gadget.4: failed to queue disconnect event [ 2007.968748][T18284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2007.981680][T18284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2007.996290][T18284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2008.007648][T18284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2008.020481][T18284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2008.132221][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2008.181204][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2008.200018][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2008.212433][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2008.221283][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2010.555331][T18284] Bluetooth: hci3: command tx timeout [ 2010.562424][ T5830] Bluetooth: hci6: command tx timeout [ 2012.657165][T18284] Bluetooth: hci3: command tx timeout [ 2012.662675][T18284] Bluetooth: hci6: command tx timeout [ 2014.733394][T18284] Bluetooth: hci3: command tx timeout [ 2014.813859][T18284] Bluetooth: hci6: command tx timeout [ 2016.813183][T18284] Bluetooth: hci3: command tx timeout [ 2016.903164][T18284] Bluetooth: hci6: command tx timeout [ 2016.969354][ T36] bridge_slave_1: left allmulticast mode [ 2017.058647][ T36] bridge_slave_1: left promiscuous mode [ 2017.133475][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.572696][ T36] bridge_slave_0: left allmulticast mode [ 2017.578467][ T36] bridge_slave_0: left promiscuous mode [ 2017.591303][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.826807][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2023.877196][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2023.895441][ T36] bond0 (unregistering): Released all slaves [ 2025.913404][ T36] hsr_slave_0: left promiscuous mode [ 2025.931199][ T36] hsr_slave_1: left promiscuous mode [ 2025.952230][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.982273][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.495173][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2028.550882][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2029.001128][T20276] chnl_net:caif_netlink_parms(): no params data found [ 2030.231872][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 2031.053011][T20278] chnl_net:caif_netlink_parms(): no params data found [ 2031.535457][T20276] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.575166][T20276] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.599172][T20276] bridge_slave_0: entered allmulticast mode [ 2031.627845][T20276] bridge_slave_0: entered promiscuous mode [ 2031.714248][T20276] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.730336][T20276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.741989][T20276] bridge_slave_1: entered allmulticast mode [ 2031.771040][T20276] bridge_slave_1: entered promiscuous mode [ 2032.409123][T20276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.154386][T20276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2033.382641][T20278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.444601][T20278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.505208][T20278] bridge_slave_0: entered allmulticast mode [ 2033.557644][T20278] bridge_slave_0: entered promiscuous mode [ 2034.316951][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.349659][T20278] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.393515][T20278] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.439296][T20278] bridge_slave_1: entered allmulticast mode [ 2035.509223][T20278] bridge_slave_1: entered promiscuous mode [ 2035.625138][T20276] team0: Port device team_slave_0 added [ 2035.715323][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.864868][T20276] team0: Port device team_slave_1 added [ 2036.181697][T20278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2036.249870][T20278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2036.548566][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.991880][T20276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.073134][T20276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.099216][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.171848][T20276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2037.194685][T20276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2037.201646][T20276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.227654][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.240359][T20276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2037.389844][T20278] team0: Port device team_slave_0 added [ 2037.485950][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.594201][T20278] team0: Port device team_slave_1 added [ 2037.701842][T20278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.720689][T20278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.746764][ C1] vkms_vblank_simulate: vblank timer overrun [ 2037.762418][T20278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.039236][T20278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2039.022422][T20278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2039.048416][ C1] vkms_vblank_simulate: vblank timer overrun [ 2039.133377][T20278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2041.000728][T20276] hsr_slave_0: entered promiscuous mode [ 2041.021064][T20276] hsr_slave_1: entered promiscuous mode [ 2041.127435][T20506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 2041.934372][ C1] ------------[ cut here ]------------ [ 2041.940197][ C1] ODEBUG: free active (active state 0) object: ffff888054573c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 2041.954582][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 2041.963854][ C1] Modules linked in: [ 2041.968042][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2041.977046][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2041.987226][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 2041.993091][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f9 f1 8b 4c 89 e6 48 c7 c7 20 ee f1 8b e8 cf b5 c9 fc 90 <0f> 0b 90 90 58 83 05 b6 ee d1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 2042.012754][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 2042.018868][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b5ee8 [ 2042.026886][ C1] RDX: ffff88801d6a5ac0 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 2042.034904][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2042.042901][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1f4c0 [ 2042.050922][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a515750 R15: ffffc90000a08b18 [ 2042.058938][ C1] FS: 0000000000000000(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 2042.067913][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2042.074537][ C1] CR2: 00007efc63daef98 CR3: 000000005d410000 CR4: 0000000000350ef0 [ 2042.082527][ C1] Call Trace: [ 2042.085835][ C1] [ 2042.088688][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2042.094377][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2042.100301][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.106097][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 2042.111797][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2042.118073][ C1] kfree+0x291/0x6d0 [ 2042.122028][ C1] ? rose_timer_expiry+0x53f/0x630 [ 2042.127233][ C1] ? rose_timer_expiry+0x53f/0x630 [ 2042.132390][ C1] rose_timer_expiry+0x53f/0x630 [ 2042.137433][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2042.142907][ C1] call_timer_fn+0x19a/0x620 [ 2042.147547][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2042.152764][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.158571][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.164276][ C1] ? rcu_is_watching+0x12/0xc0 [ 2042.169200][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2042.174757][ C1] __run_timers+0x6ef/0x960 [ 2042.179373][ C1] ? __pfx___run_timers+0x10/0x10 [ 2042.184437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.190217][ C1] run_timer_base+0x114/0x190 [ 2042.195009][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2042.200233][ C1] ? rcu_is_watching+0x12/0xc0 [ 2042.205033][ C1] run_timer_softirq+0x1a/0x40 [ 2042.209827][ C1] handle_softirqs+0x219/0x8e0 [ 2042.214673][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2042.219987][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.225703][ C1] __irq_exit_rcu+0x109/0x170 [ 2042.230491][ C1] irq_exit_rcu+0x9/0x30 [ 2042.234755][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2042.240414][ C1] [ 2042.243361][ C1] [ 2042.246284][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2042.252271][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 2042.258749][ C1] Code: fb 09 00 00 44 8b 05 19 3e f9 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d1 3a 00 fb 65 48 8b 1d de 07 1a 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 2042.278423][ C1] RSP: 0018:ffffc90000197bc8 EFLAGS: 00000202 [ 2042.284520][ C1] RAX: 0000000006093fc7 RBX: ffff88801d6a5ac0 RCX: ffffffff81c5290f [ 2042.292490][ C1] RDX: 0000000000000000 RSI: ffffffff8db01d98 RDI: ffffffff8bf1e8c0 [ 2042.300490][ C1] RBP: ffffc90000197c10 R08: 0000000000000001 R09: 0000000000000001 [ 2042.308658][ C1] R10: ffffffff908365d7 R11: 0000000000000001 R12: ffff8880b853a4c0 [ 2042.316668][ C1] R13: ffff888025fb9e40 R14: ffff8880b843a4c0 R15: ffff8880b853b2f0 [ 2042.324678][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2042.330675][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 2042.336520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.342190][ C1] ? __switch_to+0x7af/0x11b0 [ 2042.347027][ C1] __schedule+0x1198/0x5de0 [ 2042.351583][ C1] ? __pfx___schedule+0x10/0x10 [ 2042.356476][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.362122][ C1] ? find_held_lock+0x2b/0x80 [ 2042.366854][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.372493][ C1] ? rcu_is_watching+0x12/0xc0 [ 2042.377291][ C1] schedule_idle+0x5c/0x90 [ 2042.381738][ C1] do_idle+0x2b3/0x500 [ 2042.385943][ C1] ? __pfx_do_idle+0x10/0x10 [ 2042.390556][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 2042.395810][ C1] cpu_startup_entry+0x4f/0x60 [ 2042.400678][ C1] start_secondary+0x21d/0x2b0 [ 2042.405471][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2042.410790][ C1] common_startup_64+0x13e/0x148 [ 2042.415809][ C1] [ 2042.418822][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2042.426091][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2042.435025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2042.445073][ C1] Call Trace: [ 2042.448341][ C1] [ 2042.451174][ C1] dump_stack_lvl+0x3d/0x1f0 [ 2042.455788][ C1] vpanic+0x640/0x6f0 [ 2042.459779][ C1] ? debug_print_object+0x1a2/0x2b0 [ 2042.464981][ C1] panic+0xca/0xd0 [ 2042.468707][ C1] ? __pfx_panic+0x10/0x10 [ 2042.473153][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 2042.478307][ C1] check_panic_on_warn+0xab/0xb0 [ 2042.483279][ C1] __warn+0xf6/0x3c0 [ 2042.487189][ C1] ? debug_print_object+0x1a2/0x2b0 [ 2042.492408][ C1] report_bug+0x3c3/0x580 [ 2042.496757][ C1] ? debug_print_object+0x1a2/0x2b0 [ 2042.501985][ C1] handle_bug+0x184/0x210 [ 2042.506322][ C1] exc_invalid_op+0x17/0x50 [ 2042.510828][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2042.515680][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 2042.521491][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f9 f1 8b 4c 89 e6 48 c7 c7 20 ee f1 8b e8 cf b5 c9 fc 90 <0f> 0b 90 90 58 83 05 b6 ee d1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 2042.541103][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 2042.547169][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b5ee8 [ 2042.555133][ C1] RDX: ffff88801d6a5ac0 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 2042.563105][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2042.571067][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1f4c0 [ 2042.579057][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a515750 R15: ffffc90000a08b18 [ 2042.587025][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2042.592674][ C1] ? __warn_printk+0x198/0x350 [ 2042.597443][ C1] ? __warn_printk+0x1a5/0x350 [ 2042.602220][ C1] ? debug_print_object+0x1a1/0x2b0 [ 2042.607510][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2042.613162][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2042.619093][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.624741][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 2042.630312][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2042.636412][ C1] kfree+0x291/0x6d0 [ 2042.640326][ C1] ? rose_timer_expiry+0x53f/0x630 [ 2042.645461][ C1] ? rose_timer_expiry+0x53f/0x630 [ 2042.650584][ C1] rose_timer_expiry+0x53f/0x630 [ 2042.655566][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2042.661036][ C1] call_timer_fn+0x19a/0x620 [ 2042.665639][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2042.670769][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.676430][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.682066][ C1] ? rcu_is_watching+0x12/0xc0 [ 2042.687020][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2042.692518][ C1] __run_timers+0x6ef/0x960 [ 2042.697044][ C1] ? __pfx___run_timers+0x10/0x10 [ 2042.702084][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.707757][ C1] run_timer_base+0x114/0x190 [ 2042.712621][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2042.717835][ C1] ? rcu_is_watching+0x12/0xc0 [ 2042.722603][ C1] run_timer_softirq+0x1a/0x40 [ 2042.727392][ C1] handle_softirqs+0x219/0x8e0 [ 2042.732192][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2042.737503][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.743259][ C1] __irq_exit_rcu+0x109/0x170 [ 2042.747959][ C1] irq_exit_rcu+0x9/0x30 [ 2042.752198][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2042.757847][ C1] [ 2042.760854][ C1] [ 2042.763780][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2042.769764][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 2042.776223][ C1] Code: fb 09 00 00 44 8b 05 19 3e f9 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d1 3a 00 fb 65 48 8b 1d de 07 1a 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 2042.795830][ C1] RSP: 0018:ffffc90000197bc8 EFLAGS: 00000202 [ 2042.801894][ C1] RAX: 0000000006093fc7 RBX: ffff88801d6a5ac0 RCX: ffffffff81c5290f [ 2042.809864][ C1] RDX: 0000000000000000 RSI: ffffffff8db01d98 RDI: ffffffff8bf1e8c0 [ 2042.817832][ C1] RBP: ffffc90000197c10 R08: 0000000000000001 R09: 0000000000000001 [ 2042.825798][ C1] R10: ffffffff908365d7 R11: 0000000000000001 R12: ffff8880b853a4c0 [ 2042.833764][ C1] R13: ffff888025fb9e40 R14: ffff8880b843a4c0 R15: ffff8880b853b2f0 [ 2042.841833][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2042.847838][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 2042.853671][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.859312][ C1] ? __switch_to+0x7af/0x11b0 [ 2042.864099][ C1] __schedule+0x1198/0x5de0 [ 2042.868651][ C1] ? __pfx___schedule+0x10/0x10 [ 2042.873511][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.879147][ C1] ? find_held_lock+0x2b/0x80 [ 2042.883856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.889494][ C1] ? rcu_is_watching+0x12/0xc0 [ 2042.894260][ C1] schedule_idle+0x5c/0x90 [ 2042.898692][ C1] do_idle+0x2b3/0x500 [ 2042.902784][ C1] ? __pfx_do_idle+0x10/0x10 [ 2042.907398][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 2042.912646][ C1] cpu_startup_entry+0x4f/0x60 [ 2042.917408][ C1] start_secondary+0x21d/0x2b0 [ 2042.922174][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2042.927468][ C1] common_startup_64+0x13e/0x148 [ 2042.932451][ C1] [ 2042.935813][ C1] Kernel Offset: disabled [ 2042.940135][ C1] Rebooting in 86400 seconds..