last executing test programs: 25m34.406968467s ago: executing program 32 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x4, 0x5}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 18m2.125818304s ago: executing program 2 (id=1397): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="021800001c00000002000000fedbdf25050006006c8000000a000000000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000006000000000000000000000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000bb000000040000000008001900000000000a"], 0xe0}}, 0x0) 18m1.770902059s ago: executing program 2 (id=1398): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000005608f3ff000000008500000006000000b70000000200000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 18m1.607616626s ago: executing program 2 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18m1.362304866s ago: executing program 2 (id=1401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18m0.835505257s ago: executing program 2 (id=1403): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 18m0.42763166s ago: executing program 2 (id=1405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r0, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)={'rose0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x10009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)) 17m45.336117354s ago: executing program 33 (id=1405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r0, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)={'rose0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x10009, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)) 11m19.581660536s ago: executing program 3 (id=2963): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c80)="a1a65d2a77a538", 0x7}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 11m19.318438327s ago: executing program 3 (id=2964): socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000580)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x4000014) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) close(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 11m19.277774208s ago: executing program 5 (id=2965): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0xe8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) 11m19.174150549s ago: executing program 6 (id=2967): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 11m18.992916099s ago: executing program 5 (id=2968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x56}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 11m18.991330211s ago: executing program 6 (id=2969): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 11m18.913900993s ago: executing program 6 (id=2970): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 11m18.682749887s ago: executing program 6 (id=2973): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/66, 0x42}, 0x7}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 11m18.676744872s ago: executing program 5 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 11m18.322440146s ago: executing program 5 (id=2976): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 11m18.088843242s ago: executing program 3 (id=2977): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0xe8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) 11m17.890460701s ago: executing program 6 (id=2978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xffffffff}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m17.503518842s ago: executing program 3 (id=2979): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 11m17.260026872s ago: executing program 3 (id=2980): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a0000001c000200fe880000000000000000000000000001050003000300000028000080060001000a0000001400020000000000000000000000000000000001050003000000000028000080060001000a00000014000200fc0200000000000000000080"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 11m17.215711981s ago: executing program 0 (id=2981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20004001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) 11m17.096068545s ago: executing program 3 (id=2982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000b00)=ANY=[@ANYRES32], 0x81) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x10}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 11m16.731348054s ago: executing program 5 (id=2983): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 11m16.646912425s ago: executing program 0 (id=2984): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x8}}}}}}, 0x0) 11m16.578982588s ago: executing program 6 (id=2985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40050) 11m16.505128699s ago: executing program 5 (id=2986): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x13, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, 0x0, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)={0x24, r3, 0x401, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d000}, 0x814) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x3b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048041}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11m16.37897552s ago: executing program 0 (id=2987): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909", 0x6f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f178070597759", 0xde}, {&(0x7f0000000500)="43a8b66c36146a75fecd9759f847600123ee1de4e2faafd48bfa46508a87f84670a26d20c29b1072d6f45a98bf367face890b3ea383d417a2f533b5344812ec897d37bf53e023934bd9a96ae9a18b79c563a292a0ad0766518fcc808ad6c262d2abac2b18be23b5256a91cbd0e3e344ce14edd63b5356c98468e962a4de8194de1d51dca9fdda8a9f5bc9ba033db01eabcddea9b1d55303545c37762558c5a61c7665683be6896ee4ccd1eb69bc9f90aea0855ca0b21525c25966dd0d892b18e8750b19fdb095ffbe37cf68c5e5525ea457cc0565899fa663d834edb2cb71a04", 0xe0}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf403ce9ebadb624b98507da134303fdad2411ad8e78baa7c091caec2828900597a5b64715bca43fe81706b60b6d6c931aedb065cfff4226f55cf9213c5309a6d5b51f7569bdd79729babdc4a8000ec8a11a7036a0ca57387e776b252aa0527ac158d975908592f709dd47dbdd", 0xd6}], 0x5, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 11m16.007533085s ago: executing program 0 (id=2988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="3e8bbce90da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efa978944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb022614681c9e3762a3ad5f84751ca94e35039796705cadae08ee170149049bca1061336755d0e4ab0454262699a2e46cd90a2374f0e7201efe43a4d614461f3e841", 0xc8}, {&(0x7f0000000240)="94d7d7a1db0e7c00000000000037da1eb2d3be4c8581ee5ce7b53e010cf8bb6f46912bb58c43579721a5948a1353a77b3066cd0caa0a78b2edee2403377d045db0f55f896ab86783c2af6f861927ef79ad5c573823a36c095b86b69ccb0900c0de4c9ee8da3075f0a855c3a49963522b4a61e6f55a0a3d4bda99db1934677b8b603eb81f0d63d82566a28e5babde509deac559bfc3", 0x95}], 0x2}, 0x547052430a225ce3) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(r2) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x1) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 11m15.791489106s ago: executing program 0 (id=2989): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 11m15.622038188s ago: executing program 0 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010020000000000c00a7551e6c59fcdb4b8843d17360"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0xa}, 0x28) 11m2.06499977s ago: executing program 34 (id=2982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000b00)=ANY=[@ANYRES32], 0x81) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x10}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 11m1.064127321s ago: executing program 35 (id=2986): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x13, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, 0x0, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)={0x24, r3, 0x401, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d000}, 0x814) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x3b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048041}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11m0.980410602s ago: executing program 36 (id=2985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40050) 10m59.850801023s ago: executing program 37 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010020000000000c00a7551e6c59fcdb4b8843d17360"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0xa}, 0x28) 3m41.326050199s ago: executing program 1 (id=3285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0xffffffffffffffff, 0x100000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12) r5 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24008004) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x6, 0x9, 0x5, 0xfff, 0x9}) r6 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x81, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00010129bd700000ffffff"], 0x20}}, 0x0) 3m39.509548797s ago: executing program 1 (id=3288): syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) keyctl$unlink(0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000240)={0x3, 0xb400, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) 3m38.238407654s ago: executing program 1 (id=3294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, 0x98ca, 0x108000) lseek(0xffffffffffffffff, 0x8828, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f00000003c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32, @ANYRES64=r4, @ANYRES64=0x0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555552}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m34.496998617s ago: executing program 1 (id=3298): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m32.991056437s ago: executing program 1 (id=3302): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x90) syz_emit_vhci(0x0, 0xf) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) r4 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 3m29.558879906s ago: executing program 1 (id=3306): openat$nvram(0xffffffffffffff9c, 0x0, 0x210c80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xffffffffffffffff, 0x24020000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 3m14.381353231s ago: executing program 38 (id=3306): openat$nvram(0xffffffffffffff9c, 0x0, 0x210c80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xffffffffffffffff, 0x24020000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 12.901968379s ago: executing program 8 (id=3558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x800000000000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r3, 0x0, 0x0, 0x4010, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x40040) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000200200"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000000)={0xa, 0x1, 0x4, {0x80000004, 0x1, 0x2, 0x8800001}}) 11.598144595s ago: executing program 7 (id=3559): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 11.258278693s ago: executing program 7 (id=3560): move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b1000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x0) 10.727917518s ago: executing program 7 (id=3561): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000e80)="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", 0x10e}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068", 0x38}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0e10cc58cad5b11d03df3e48d", 0xc3}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc", 0x1a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f1780", 0xda}, {&(0x7f0000000500)="43a8b66c36146a75fecd9759f847600123ee1de4e2faafd48bfa46508a87f84670a26d20c29b1072d6f45a98bf367face890b3ea383d417a2f533b5344812ec897d37bf53e023934bd9a96ae9a18b79c563a292a0ad0766518fcc808ad6c262d2abac2b18be23b5256a91cbd0e3e344ce14edd63b5356c98468e962a4de8194de1d51dca9fdda8a9f5bc9ba033db01eabcddea9b1d55303545c37762558c5a61c7665683be6896ee4ccd1eb69bc9f90aea0855ca0b21525c25966dd0d892b18e8750b19fdb095ffbe37cf6", 0xcb}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf403ce9ebadb624b98507da134303fdad2411ad8e78baa7c091caec2828900597a5b64715bca43fe81706b60b6d6c931aedb065cfff4226f55cf9213c5309a6d5b51f7569bdd79729babdc4a8000e", 0xb8}, {&(0x7f0000000740)}], 0x6}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 9.638395285s ago: executing program 7 (id=3564): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158"], 0xfdef) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1491d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 7.895533376s ago: executing program 7 (id=3565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000200)) dup(r6) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f00000008c0)={0x0, 0x0, 0x8, 0xf9c, 0x2, 0xfffffffe}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1}]) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4105, 0x1009}], 0x1, 0x4017, 0x7d) 6.14628154s ago: executing program 4 (id=3566): pipe(&(0x7f0000000200)) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0xc, "5dd9df453931d37eeee4"}, @fastopen={0x22, 0x4, '\rH'}]}}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x3000c000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x2, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={'virt_wifi0\x00', {0x2, 0x4e21, @loopback}}) preadv(r2, &(0x7f0000000180)=[{0x0}], 0x1, 0xe9, 0x7) 5.944426605s ago: executing program 7 (id=3567): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.586065621s ago: executing program 4 (id=3568): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 5.092269914s ago: executing program 8 (id=3569): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000640)="a644b408", 0x4, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) shutdown(r2, 0x1) fremovexattr(r2, &(0x7f0000000240)=@random={'btrfs.', 'tls'}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1012, 0x4, 0x6, 0x0, 0x5, 0x4}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x40000) sendto$inet6(r0, &(0x7f00000000c0)="6ad424ac99e8387c69c62ee5d693532f7c0a22000000000000f2cf71296ea8ccce4d2995bd149cc8746fbaf59382a390b9b04566deed9d8bf4b1059b0bdc16cbcc97b6df86b0c1e39d96961e3ddb136a82f286f176de19d74517d4e5d8690b6ae122063c086a54e9020d985df8c28c4c2f2ef8552a8d232d2c7a78fdee9184b7352451fde07a21ce71eb9fdd9c8d35c096d8b4f818664bd27c46c25e21", 0x9d, 0x8040, 0x0, 0x0) 4.940113032s ago: executing program 4 (id=3570): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x44800) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0xfffffff3}, &(0x7f0000000100)=0x0) timer_settime(r6, 0x0, &(0x7f0000000200), &(0x7f0000000240)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0xfffffffc, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x7, 0xb, 0x5}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x2, 0x1, 0x0, 0x0}], 0x1}) 3.093778708s ago: executing program 8 (id=3571): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x100, 0x1, 0xcc7, 0x2ff, 0x0, 0x2, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) syz_open_dev$sndpcmp(0x0, 0x3, 0x4a2302) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x800006f0, 0x7, 0xa13, 0x75e, 0x1b, "fd25a20d0000010000000000002300"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 2.53722339s ago: executing program 4 (id=3572): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7e1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635be000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb6040000000000000000000000000019dd7f96a348ebb6b50000c7aa5035897b20a6c2", 0x10e}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068", 0x38}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7509c5dcc1c63cba1acb07b44c35d557db3b025ebb1fd5688a91a7ff0e10cc58cad5b11d03df3e48d", 0xc3}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed", 0x1e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817c3", 0xe1}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e25cda5f35f40550110c34741f377c963922a4acf4b39fbb260a7ef745bf706ed34c423eca2fbed0acf3b4915062e4aa13d770c023c057da26bec248682391fe18b640a7071c29834424d724b2755a8a6ea73eaf2b7c14bccfbe19b3f14366c9687e3f48eb4fe042c246f0433b0b0f1780", 0xda}, {&(0x7f0000000500)="43a8b66c36146a75fecd9759f847600123ee1de4e2faafd48bfa46508a87f84670a26d20c29b1072d6f45a98bf367face890b3ea383d417a2f533b5344812ec897d37bf53e023934bd9a96ae9a18b79c563a292a0ad0766518fcc808ad6c262d2abac2b18be23b5256a91cbd0e3e344ce14edd63b5356c98468e962a4de8194de1d51dca9fdda8a9f5bc9ba033db01eabcddea9b1d55303545c37762558c5a61c7665683be6896ee4ccd1eb69bc9f90aea0855ca0b21525c25966dd0d892b18e8750b19fdb095ffbe37cf6", 0xcb}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf403ce9ebadb624b98507da134303fdad2411ad8e78baa7c091caec2828900597a5b64715bca43fe81706b60b6d6c931aedb065cfff4226f55cf9213c5309a6d5b51f7569bdd79729babdc4a8000e", 0xb8}, {&(0x7f0000000740)}], 0x6}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 1.601427308s ago: executing program 8 (id=3573): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1, 0x40, 0x4, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000000)=""/90, 0x5a) 1.427021682s ago: executing program 4 (id=3574): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60600) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) 713.598409ms ago: executing program 4 (id=3575): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a0009"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, &(0x7f00000002c0)) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000a00)={r6}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r8 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, 0x0, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, 0x0) 306.451904ms ago: executing program 8 (id=3576): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x8}}}}}}, 0x0) 0s ago: executing program 8 (id=3577): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) socket(0xa, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000020"], 0xff3c, 0x1) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="938403dce20112908c9e554712c3d90cebb81a12de53c2fa76f65bbd97525f6e724d3c3e3b5762a80fa4b78d93f07d9831340510820d1ce396152d747ef021549177a6b92ec7dcf38d46220ec9e1c2bae741590ada", @ANYRES64=r4, @ANYRESOCT=r0], 0x64}}, 0x0) kernel console output (not intermixed with test programs): only supported in persistent services, check your ipvs configuration [ 1410.962719][ T5257] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1411.425533][T20675] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 1411.425588][T20675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1412.076858][T20675] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 1414.501173][ T5710] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1414.681341][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 1414.685129][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1414.686431][ T5710] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1414.686456][ T5710] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1414.686475][ T5710] usb 5-1: config 14 has no interface number 0 [ 1414.686490][ T5710] usb 5-1: config 14 has no interface number 1 [ 1414.686564][ T5710] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1414.686587][ T5710] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1414.686611][ T5710] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1414.686637][ T5710] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1414.686662][ T5710] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1414.686690][ T5710] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.686717][ T5710] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1414.686735][ T5710] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1414.689147][ T5710] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1414.689174][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.691376][ T5710] usb 5-1: Product: syz [ 1414.691395][ T5710] usb 5-1: Manufacturer: syz [ 1414.691409][ T5710] usb 5-1: SerialNumber: syz [ 1415.029557][ T44] bridge_slave_1: left allmulticast mode [ 1415.029599][ T44] bridge_slave_1: left promiscuous mode [ 1415.029920][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.153471][ T44] bridge_slave_0: left allmulticast mode [ 1415.154294][ T44] bridge_slave_0: left promiscuous mode [ 1415.155036][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.369618][ T44] bridge_slave_1: left allmulticast mode [ 1415.369839][ T44] bridge_slave_1: left promiscuous mode [ 1415.370223][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.383900][ T5710] legousbtower 5-1:14.57: interrupt endpoints not found [ 1415.502418][ T44] bridge_slave_0: left allmulticast mode [ 1415.502479][ T44] bridge_slave_0: left promiscuous mode [ 1415.502727][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.699551][ T44] bridge_slave_1: left allmulticast mode [ 1415.699579][ T44] bridge_slave_1: left promiscuous mode [ 1415.699863][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.784299][ T5710] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1415.799547][ T5710] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1415.804451][ T44] bridge_slave_0: left allmulticast mode [ 1415.804488][ T44] bridge_slave_0: left promiscuous mode [ 1415.804771][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.591021][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1416.594164][T18427] usb 5-1: USB disconnect, device number 17 [ 1416.678942][T18427] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1416.959858][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.049958][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.111062][ T44] bond0 (unregistering): Released all slaves [ 1417.989757][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.072078][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.150874][ T44] bond0 (unregistering): Released all slaves [ 1418.627432][T15749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1418.728497][T15749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1418.747083][T15749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1418.797840][T15749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1418.809410][T15749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1419.430866][T20721] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 1419.430915][T20721] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3237'. [ 1420.109852][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.170077][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.211725][ T44] bond0 (unregistering): Released all slaves [ 1420.881106][T17687] Bluetooth: hci2: command tx timeout [ 1421.395151][T15749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1421.476254][T15749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1421.534724][T15749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1421.543170][T15749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1421.545386][T15749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1421.843922][T20733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.422852][ T44] hsr_slave_0: left promiscuous mode [ 1422.460797][ T44] hsr_slave_1: left promiscuous mode [ 1422.472271][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.500991][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.506104][T17687] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1422.564388][T17687] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1422.566142][T17687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1422.567438][T17687] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1422.586575][T17687] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1422.968567][ T44] hsr_slave_0: left promiscuous mode [ 1423.008570][ T44] hsr_slave_1: left promiscuous mode [ 1423.010677][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.038662][T15749] Bluetooth: hci2: command tx timeout [ 1423.051448][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.250167][ T44] hsr_slave_0: left promiscuous mode [ 1423.288743][ T44] hsr_slave_1: left promiscuous mode [ 1423.290072][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.309682][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.364297][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.838662][T15749] Bluetooth: hci6: command tx timeout [ 1423.879165][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1423.929913][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1424.440451][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1424.519006][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1424.601842][T17687] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1424.685595][T17687] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1424.687672][T17687] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1424.705223][T17687] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1424.706115][T17687] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1424.963437][T17687] Bluetooth: hci7: command tx timeout [ 1425.120115][T15749] Bluetooth: hci2: command tx timeout [ 1425.450505][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1425.499075][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1425.717789][ T5257] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1425.927208][T15749] Bluetooth: hci6: command tx timeout [ 1426.365028][T20712] lo speed is unknown, defaulting to 1000 [ 1426.803602][T15749] Bluetooth: hci8: command tx timeout [ 1427.068305][T15749] Bluetooth: hci7: command tx timeout [ 1427.202657][T15749] Bluetooth: hci2: command tx timeout [ 1428.014626][T15749] Bluetooth: hci6: command tx timeout [ 1429.757992][T15749] Bluetooth: hci8: command tx timeout [ 1429.758033][T15749] Bluetooth: hci7: command tx timeout [ 1430.081916][T17687] Bluetooth: hci6: command tx timeout [ 1430.251060][T20728] lo speed is unknown, defaulting to 1000 [ 1430.507554][T20759] lo speed is unknown, defaulting to 1000 [ 1430.550133][T20743] lo speed is unknown, defaulting to 1000 [ 1431.837839][T17687] Bluetooth: hci8: command tx timeout [ 1431.837879][T17687] Bluetooth: hci7: command tx timeout [ 1432.606963][T20833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.532355][T20847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.917540][T15749] Bluetooth: hci8: command tx timeout [ 1434.583832][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3250'. [ 1434.682787][T20712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.684796][T20712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.685006][T20712] bridge_slave_0: entered allmulticast mode [ 1434.698637][T20712] bridge_slave_0: entered promiscuous mode [ 1434.736245][T20712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.736461][T20712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.736685][T20712] bridge_slave_1: entered allmulticast mode [ 1434.740722][T20712] bridge_slave_1: entered promiscuous mode [ 1435.353938][T20712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.727065][T20712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.088808][T20712] team0: Port device team_slave_0 added [ 1436.233992][T20712] team0: Port device team_slave_1 added [ 1436.365888][T17687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1436.459534][T17687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1436.467872][T17687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1436.538880][T17687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1436.543828][T17687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1437.203800][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.963045][T20712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.963066][T20712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.963097][T20712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.041587][T20712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.041606][T20712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.041640][T20712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.436227][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.797047][T15749] Bluetooth: hci3: command tx timeout [ 1439.041081][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.257976][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.258429][T20728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.258783][T20728] bridge_slave_0: entered allmulticast mode [ 1439.261224][T20728] bridge_slave_0: entered promiscuous mode [ 1439.326504][T20712] hsr_slave_0: entered promiscuous mode [ 1439.329247][T20712] hsr_slave_1: entered promiscuous mode [ 1439.330898][T20712] debugfs: 'hsr0' already exists in 'hsr' [ 1439.330923][T20712] Cannot create hsr debugfs directory [ 1439.350100][T20728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.350310][T20728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.350506][T20728] bridge_slave_1: entered allmulticast mode [ 1439.352609][T20728] bridge_slave_1: entered promiscuous mode [ 1439.382780][T20743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.382983][T20743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.383169][T20743] bridge_slave_0: entered allmulticast mode [ 1439.388879][T20743] bridge_slave_0: entered promiscuous mode [ 1439.594956][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.661651][T20759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.661875][T20759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.662083][T20759] bridge_slave_0: entered allmulticast mode [ 1439.664178][T20759] bridge_slave_0: entered promiscuous mode [ 1439.704792][T20874] lo speed is unknown, defaulting to 1000 [ 1439.728670][T20743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.728869][T20743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.729038][T20743] bridge_slave_1: entered allmulticast mode [ 1439.731063][T20743] bridge_slave_1: entered promiscuous mode [ 1439.775180][T20759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.781914][T20759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.782235][T20759] bridge_slave_1: entered allmulticast mode [ 1439.804828][T20759] bridge_slave_1: entered promiscuous mode [ 1439.943180][T20360] netdevsim netdevsim8: probe with driver netdevsim failed with error -12 [ 1440.403221][T20728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.535329][T20728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.562059][T20743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.592418][T20759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.833241][T20743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.852017][T20759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.891168][T15749] Bluetooth: hci3: command tx timeout [ 1441.895183][T20728] team0: Port device team_slave_0 added [ 1441.982432][T20728] team0: Port device team_slave_1 added [ 1441.985396][T20743] team0: Port device team_slave_0 added [ 1442.085126][T20759] team0: Port device team_slave_0 added [ 1442.125279][T20743] team0: Port device team_slave_1 added [ 1442.135035][T20759] team0: Port device team_slave_1 added [ 1442.252447][T20728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.252460][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.252477][T20728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.362753][T20728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.362766][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.362783][T20728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.364518][T20743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.364529][T20743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.364545][T20743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.455659][T20759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.455673][T20759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.455690][T20759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.548354][T20743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.548369][T20743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.548386][T20743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.669301][T20759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.669314][T20759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.669331][T20759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.956872][T15749] Bluetooth: hci3: command tx timeout [ 1443.027582][ T44] bridge_slave_1: left allmulticast mode [ 1443.027612][ T44] bridge_slave_1: left promiscuous mode [ 1443.027909][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.128048][ T44] bridge_slave_0: left allmulticast mode [ 1443.128083][ T44] bridge_slave_0: left promiscuous mode [ 1443.128308][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.367175][ T44] bridge_slave_1: left allmulticast mode [ 1443.367217][ T44] bridge_slave_1: left promiscuous mode [ 1443.367548][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.467957][ T44] bridge_slave_0: left allmulticast mode [ 1443.467987][ T44] bridge_slave_0: left promiscuous mode [ 1443.468219][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.466640][ T44] bond1 (unregistering): Released all slaves [ 1444.747881][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.847185][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.908981][ T44] bond0 (unregistering): Released all slaves [ 1444.978515][T20728] hsr_slave_0: entered promiscuous mode [ 1444.989675][T20728] hsr_slave_1: entered promiscuous mode [ 1445.003986][T20728] debugfs: 'hsr0' already exists in 'hsr' [ 1445.004017][T20728] Cannot create hsr debugfs directory [ 1445.073787][T15749] Bluetooth: hci3: command tx timeout [ 1445.504742][T20743] hsr_slave_0: entered promiscuous mode [ 1445.506124][T20743] hsr_slave_1: entered promiscuous mode [ 1445.520272][T20743] debugfs: 'hsr0' already exists in 'hsr' [ 1445.520304][T20743] Cannot create hsr debugfs directory [ 1445.674500][T20759] hsr_slave_0: entered promiscuous mode [ 1445.677194][T20759] hsr_slave_1: entered promiscuous mode [ 1445.679439][T20759] debugfs: 'hsr0' already exists in 'hsr' [ 1445.679466][T20759] Cannot create hsr debugfs directory [ 1447.662852][ T44] hsr_slave_0: left promiscuous mode [ 1447.697294][ T44] hsr_slave_1: left promiscuous mode [ 1447.699154][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.699175][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.737340][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.737361][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.876361][ T44] hsr_slave_0: left promiscuous mode [ 1447.917721][ T44] hsr_slave_1: left promiscuous mode [ 1447.918831][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.939930][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.056163][ T44] veth1_macvtap: left promiscuous mode [ 1448.056920][ T44] veth0_macvtap: left promiscuous mode [ 1448.057310][ T44] veth1_vlan: left promiscuous mode [ 1448.057521][ T44] veth0_vlan: left promiscuous mode [ 1449.126838][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1449.166986][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1449.616830][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1449.670959][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1449.910684][T20874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.911133][T20874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.911460][T20874] bridge_slave_0: entered allmulticast mode [ 1449.915470][T20874] bridge_slave_0: entered promiscuous mode [ 1450.006907][T20874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.007259][T20874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.007595][T20874] bridge_slave_1: entered allmulticast mode [ 1450.011624][T20874] bridge_slave_1: entered promiscuous mode [ 1450.182173][T20874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.206941][T20874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.708043][T20874] team0: Port device team_slave_0 added [ 1450.830434][T20874] team0: Port device team_slave_1 added [ 1450.832520][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1451.199320][T20874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.199335][T20874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.199356][T20874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.289265][T20874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.289282][T20874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.289309][T20874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.583751][T20874] hsr_slave_0: entered promiscuous mode [ 1451.588484][T20874] hsr_slave_1: entered promiscuous mode [ 1451.591084][T20874] debugfs: 'hsr0' already exists in 'hsr' [ 1451.591111][T20874] Cannot create hsr debugfs directory [ 1451.591665][T20712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1451.671310][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1451.674924][T20712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1451.780436][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.810480][T20712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1451.875221][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1452.022788][T20712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1452.115437][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1453.479226][T20728] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1453.532842][T20728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1453.596035][T20728] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1453.729820][T20728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1453.802669][T20728] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1453.851475][T20728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1454.118679][T20728] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1454.163164][T20728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1454.182086][ T44] IPVS: stop unused estimator thread 0... [ 1454.211611][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1454.545862][ T44] bridge_slave_1: left allmulticast mode [ 1454.545892][ T44] bridge_slave_1: left promiscuous mode [ 1454.546109][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.647699][ T44] bridge_slave_0: left allmulticast mode [ 1454.647730][ T44] bridge_slave_0: left promiscuous mode [ 1454.647952][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.866219][ T44] bridge_slave_1: left allmulticast mode [ 1454.866262][ T44] bridge_slave_1: left promiscuous mode [ 1454.866564][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.987780][ T44] bridge_slave_0: left allmulticast mode [ 1454.987823][ T44] bridge_slave_0: left promiscuous mode [ 1454.988066][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.205724][ T44] bridge_slave_1: left allmulticast mode [ 1455.205764][ T44] bridge_slave_1: left promiscuous mode [ 1455.206138][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.327399][ T44] bridge_slave_0: left allmulticast mode [ 1455.327427][ T44] bridge_slave_0: left promiscuous mode [ 1455.327621][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.746511][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.856809][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.919278][ T44] bond0 (unregistering): Released all slaves [ 1456.156782][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.256786][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.318113][ T44] bond0 (unregistering): Released all slaves [ 1456.576496][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.656125][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.717998][ T44] bond0 (unregistering): Released all slaves [ 1456.773971][T20759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1456.920412][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1457.042592][T20759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1457.202808][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.211479][T20759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1457.326591][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.354888][T20759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1457.511030][T20759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.302020][T20712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.546390][ T44] hsr_slave_0: left promiscuous mode [ 1458.565344][ T44] hsr_slave_1: left promiscuous mode [ 1458.566619][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.607967][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.766627][ T44] hsr_slave_0: left promiscuous mode [ 1458.785313][ T44] hsr_slave_1: left promiscuous mode [ 1458.786494][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.826451][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.985255][ T44] hsr_slave_0: left promiscuous mode [ 1459.005211][ T44] hsr_slave_1: left promiscuous mode [ 1459.006908][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.046413][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.486984][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1459.538427][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1460.016203][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1460.076207][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1460.545730][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1460.595663][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1460.790846][T20743] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1460.814579][T20743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1460.841890][T20743] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1460.874402][T20743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1461.258582][T20743] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1461.295746][T20743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1461.304151][T20743] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1461.342952][T20743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.463150][T20712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.680673][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.680850][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.729772][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.730033][ T2200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.869030][T20728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.614209][T20728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.249752][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.249992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.418289][T20759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.424371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.438564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.001721][T20759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.181557][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.181721][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.336087][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.336267][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.370002][T20743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.631306][T20743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.341035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.341362][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.702674][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.714607][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.982559][T20874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1466.037576][T20874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1466.062150][T20874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1466.258578][T20874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1466.276282][T20874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1466.371000][T20874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1466.406058][T20874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1466.539205][T20874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1466.552380][T20712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.110238][T20728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.619943][T20874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.796096][T20874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.903734][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.903949][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.978383][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.978589][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.249344][T20759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.520327][T20712] veth0_vlan: entered promiscuous mode [ 1468.697995][T20712] veth1_vlan: entered promiscuous mode [ 1469.142710][T20743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.188594][T20759] veth0_vlan: entered promiscuous mode [ 1469.195343][T20728] veth0_vlan: entered promiscuous mode [ 1469.342637][T20728] veth1_vlan: entered promiscuous mode [ 1469.429942][T20759] veth1_vlan: entered promiscuous mode [ 1469.469266][T20712] veth0_macvtap: entered promiscuous mode [ 1469.539789][T20712] veth1_macvtap: entered promiscuous mode [ 1469.894786][T20712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.959482][T20759] veth0_macvtap: entered promiscuous mode [ 1469.989532][T20712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.990815][T20728] veth0_macvtap: entered promiscuous mode [ 1470.045917][T20759] veth1_macvtap: entered promiscuous mode [ 1470.077814][T20728] veth1_macvtap: entered promiscuous mode [ 1470.195973][ T44] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.219209][ T44] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.259129][ T44] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.276839][ T44] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.592085][T20759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.670110][T20728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.859769][T20874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.877759][T20728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.882539][T20759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.999713][T20743] veth0_vlan: entered promiscuous mode [ 1471.103565][ T2200] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.136825][ T2200] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.216666][ T2200] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.231871][ T2200] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.294396][ T2200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.309384][T20743] veth1_vlan: entered promiscuous mode [ 1471.534389][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.760598][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.777626][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.084792][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.084815][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.504935][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.504959][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.344194][T20743] veth0_macvtap: entered promiscuous mode [ 1474.549602][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.549626][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.959296][T20743] veth1_macvtap: entered promiscuous mode [ 1475.046298][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.046323][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.168120][ T2200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.168144][ T2200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.316143][T20874] veth0_vlan: entered promiscuous mode [ 1475.336310][T20743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.367729][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.367752][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.434571][T20743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.545718][T20874] veth1_vlan: entered promiscuous mode [ 1475.550923][ T1134] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.584743][ T1134] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.594371][ T1134] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.647810][ T1134] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.496287][T20874] veth0_macvtap: entered promiscuous mode [ 1478.567711][ T5584] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1478.713678][T20874] veth1_macvtap: entered promiscuous mode [ 1478.759894][T10829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.759919][T10829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.887910][ T5584] usb 2-1: Using ep0 maxpacket: 8 [ 1478.892396][ T5584] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.892434][ T5584] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1478.892451][ T5584] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.892466][ T5584] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1478.921987][ T5584] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.922046][ T5584] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1478.922074][ T5584] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.922099][ T5584] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1478.938243][ T5584] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.938309][ T5584] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1478.938343][ T5584] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.938368][ T5584] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1478.959438][ T5584] usb 2-1: string descriptor 0 read error: -22 [ 1478.959587][ T5584] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1478.959610][ T5584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.481611][ T5584] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1479.505337][ T5584] usb 2-1: USB disconnect, device number 4 [ 1479.600650][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.600673][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.677962][T20874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.722408][T20874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.844217][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.869307][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.872894][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.877323][ T3378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.843833][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.843861][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.182290][T17687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1484.352864][T17687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1484.398665][T17687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1484.582727][T17687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1484.584839][T17687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1484.820079][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.336038][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.336062][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.719707][T21234] dlm: non-version read from control device 0 [ 1486.889647][T15749] Bluetooth: hci0: command tx timeout [ 1487.928304][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1488.957465][T15749] Bluetooth: hci0: command tx timeout [ 1489.152209][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1489.934070][ T10] usb 8-1: device not accepting address 2, error -71 [ 1491.104437][T15749] Bluetooth: hci0: command tx timeout [ 1493.432345][T15749] Bluetooth: hci0: command tx timeout [ 1495.051758][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1495.203109][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1495.235729][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1495.235792][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1495.235823][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1495.235850][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1495.281082][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1495.281149][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1495.281180][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1495.281208][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1495.330770][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1495.330834][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1495.330866][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1495.330894][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1495.386578][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1495.386756][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1495.386782][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.472355][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1495.698819][ T3313] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.739317][T12796] usb 2-1: USB disconnect, device number 5 [ 1496.394533][T21211] lo speed is unknown, defaulting to 1000 [ 1496.561841][T21300] capability: warning: `syz.1.3285' uses deprecated v2 capabilities in a way that may be insecure [ 1498.280628][T21313] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3290'. [ 1498.519197][ T3313] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.742552][T21313] gretap0: entered promiscuous mode [ 1501.504620][ T5730] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1501.691066][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 1501.788768][ T5730] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1501.788832][ T5730] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1501.788863][ T5730] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1501.788890][ T5730] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1501.790261][ T5730] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1501.790317][ T5730] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1501.790346][ T5730] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1501.790373][ T5730] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1501.810808][ T5730] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1501.812891][ T5730] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1501.812931][ T5730] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1501.812960][ T5730] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1501.930653][ T5730] usb 2-1: string descriptor 0 read error: -22 [ 1501.931735][ T5730] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1501.931817][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.154401][ T5730] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1502.239571][ T3313] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.382142][ T5730] usb 2-1: USB disconnect, device number 6 [ 1504.207665][ T3313] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.768315][T21361] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1504.804714][T21361] gretap0: entered promiscuous mode [ 1505.350674][T21149] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1505.500718][T21149] usb 2-1: device descriptor read/64, error -71 [ 1507.590547][T21149] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1510.090613][T18948] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1510.413254][T18948] usb 5-1: Using ep0 maxpacket: 8 [ 1510.417739][T18948] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1510.417804][T18948] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1510.417833][T18948] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1510.417862][T18948] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1510.465299][T18948] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1510.465368][T18948] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1510.465400][T18948] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1510.465429][T18948] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1510.466909][T18948] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1510.466969][T18948] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1510.467000][T18948] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1510.467030][T18948] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1510.582515][T18948] usb 5-1: string descriptor 0 read error: -22 [ 1510.582688][T18948] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1510.582715][T18948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.614836][T18948] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1511.788975][T18948] usb 5-1: USB disconnect, device number 18 [ 1517.513689][T21211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.533981][T21211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.534195][T21211] bridge_slave_0: entered allmulticast mode [ 1517.562264][T21211] bridge_slave_0: entered promiscuous mode [ 1518.251288][T21211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.251577][T21211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.251880][T21211] bridge_slave_1: entered allmulticast mode [ 1518.296258][T21211] bridge_slave_1: entered promiscuous mode [ 1518.823187][T21211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.843101][T21211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.166947][T21424] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 1519.167026][T21424] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3318'. [ 1519.804222][T21424] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 1521.483258][ T3313] bridge_slave_1: left allmulticast mode [ 1521.483298][ T3313] bridge_slave_1: left promiscuous mode [ 1521.483601][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.039375][T18948] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1522.741870][T18948] usb 9-1: Using ep0 maxpacket: 8 [ 1522.756486][T18948] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1522.756548][T18948] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1522.756578][T18948] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1522.756606][T18948] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1522.758756][T18948] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1522.759251][T18948] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1522.759283][T18948] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1522.759309][T18948] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1522.760738][T18948] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1522.760788][T18948] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1522.760814][T18948] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1522.760840][T18948] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1522.772455][T18948] usb 9-1: string descriptor 0 read error: -22 [ 1522.772607][T18948] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1522.772630][T18948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.087381][ T3313] bridge_slave_0: left allmulticast mode [ 1523.087425][ T3313] bridge_slave_0: left promiscuous mode [ 1523.087740][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.208189][T18948] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1523.331839][T18948] usb 9-1: USB disconnect, device number 2 [ 1524.040055][T17687] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1524.103773][T17687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1524.117210][T17687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1524.123226][T17687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1524.127381][T17687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1525.040224][ T3313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.190819][ T3313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.231449][ T3313] bond0 (unregistering): Released all slaves [ 1525.622199][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1526.274555][T21457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1526.401159][T17687] Bluetooth: hci1: command tx timeout [ 1528.787452][T17687] Bluetooth: hci1: command tx timeout [ 1529.123311][T21211] team0: Port device team_slave_0 added [ 1529.504074][T21211] team0: Port device team_slave_1 added [ 1529.946693][T21211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.946709][T21211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.946726][T21211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.952188][T21211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.952204][T21211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.952221][T21211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.811665][T17687] Bluetooth: hci1: command tx timeout [ 1533.036843][T17687] Bluetooth: hci1: command tx timeout [ 1533.088268][T21149] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1533.268249][T21149] usb 9-1: Using ep0 maxpacket: 8 [ 1533.270313][T21149] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1533.270377][T21149] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1533.270408][T21149] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1533.270436][T21149] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1533.273147][T21149] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1533.273206][T21149] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1533.273237][T21149] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1533.273264][T21149] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1533.274501][T21149] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1533.274568][T21149] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1533.274599][T21149] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1533.274626][T21149] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1533.415512][T21149] usb 9-1: string descriptor 0 read error: -22 [ 1533.415685][T21149] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1533.415712][T21149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.569599][T21149] usb 9-1: can't set config #168, error -71 [ 1533.602093][T21149] usb 9-1: USB disconnect, device number 3 [ 1533.653327][T17687] Bluetooth: hci6: Malformed LE Event: 0x1b [ 1533.803040][T21211] hsr_slave_0: entered promiscuous mode [ 1533.805726][T21211] hsr_slave_1: entered promiscuous mode [ 1534.047179][T21446] lo speed is unknown, defaulting to 1000 [ 1536.988305][ T3313] hsr_slave_0: left promiscuous mode [ 1537.039211][ T3313] hsr_slave_1: left promiscuous mode [ 1537.056688][ T3313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.056718][ T3313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.124577][ T3313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.124609][ T3313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.126651][T21501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1537.469619][ T3313] veth1_macvtap: left promiscuous mode [ 1537.469744][ T3313] veth0_macvtap: left promiscuous mode [ 1539.273578][ T3313] veth1_vlan: left promiscuous mode [ 1539.401018][ T3313] veth0_vlan: left promiscuous mode [ 1541.647566][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1541.917286][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1541.924838][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.924902][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1541.924933][ T10] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.924960][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1541.933761][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.933824][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1541.933855][ T10] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.933884][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1542.045709][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1542.045778][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1542.045810][ T10] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1542.045838][ T10] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1542.211852][ T10] usb 9-1: string descriptor 0 read error: -22 [ 1542.212031][ T10] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1542.212058][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.495001][T21548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1543.015219][ T10] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1543.109707][ T10] usb 9-1: USB disconnect, device number 4 [ 1543.273953][T17687] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.450665][ T3313] team0 (unregistering): Port device team_slave_1 removed [ 1543.498442][ T3313] team0 (unregistering): Port device team_slave_0 removed [ 1543.947738][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1545.825601][T17687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1545.942026][T17687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1545.957356][T17687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1545.958882][T17687] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1545.959999][T17687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1546.309748][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.407752][T21603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1548.572852][ T5612] Bluetooth: hci6: command 0x0406 tx timeout [ 1549.553809][T15749] Bluetooth: hci4: command tx timeout [ 1549.956561][T12796] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1549.996671][ T5785] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1550.169114][T12796] usb 9-1: Using ep0 maxpacket: 8 [ 1550.169299][ T5785] usb 5-1: Using ep0 maxpacket: 8 [ 1550.313794][ T5785] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1550.313826][ T5785] usb 5-1: config 0 has no interface number 0 [ 1550.313876][ T5785] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1550.313925][ T5785] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1550.313949][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.355855][ T5785] usb 5-1: config 0 descriptor?? [ 1550.453037][T12796] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1550.453102][T12796] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1550.453134][T12796] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1550.453172][T12796] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1550.455044][T12796] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1550.455101][T12796] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1550.455129][T12796] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1550.455163][T12796] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1550.468733][T12796] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1550.468793][T12796] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1550.468821][T12796] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1550.468845][T12796] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1550.472394][T12796] usb 9-1: string descriptor 0 read error: -22 [ 1550.472540][T12796] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1550.472564][T12796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.524817][ T5785] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1550.579373][ T38] audit: type=1326 audit(1784241236.520:349): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=21609 comm="syz.4.3353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3201efde59 code=0x0 [ 1550.625700][T12796] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1550.947769][ T5785] usb 9-1: USB disconnect, device number 5 [ 1550.976149][T21205] usb 5-1: USB disconnect, device number 19 [ 1551.320187][T21632] Bluetooth: MGMT ver 1.23 [ 1551.787179][T17687] Bluetooth: hci4: command tx timeout [ 1553.829381][T17687] Bluetooth: hci4: command tx timeout [ 1554.238412][T14806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.486729][T21446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.487097][T21446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.487426][T21446] bridge_slave_0: entered allmulticast mode [ 1554.517284][T21446] bridge_slave_0: entered promiscuous mode [ 1554.532010][ T5257] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1554.602003][T21446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.602314][T21446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.602586][T21446] bridge_slave_1: entered allmulticast mode [ 1554.633049][T21446] bridge_slave_1: entered promiscuous mode [ 1554.770702][T21661] netlink: 'syz.7.3361': attribute type 10 has an invalid length. [ 1554.829581][T21662] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3361'. [ 1555.257590][T21667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1555.508316][T21661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1555.549803][T21661] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1555.905884][T17687] Bluetooth: hci4: command tx timeout [ 1556.015185][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3361'. [ 1556.901535][T14806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.918306][T21576] lo speed is unknown, defaulting to 1000 [ 1558.366685][T21205] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1558.398070][T21662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1558.460189][T21662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1558.515940][T21205] usb 5-1: Using ep0 maxpacket: 8 [ 1558.517984][T21205] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1558.518047][T21205] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1558.518066][T21205] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1558.518082][T21205] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1558.519175][T21205] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1558.519254][T21205] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1558.519272][T21205] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1558.519288][T21205] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1558.520351][T21205] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1558.520402][T21205] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1558.520430][T21205] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1558.520445][T21205] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1558.524114][T21205] usb 5-1: string descriptor 0 read error: -22 [ 1558.524241][T21205] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1558.524257][T21205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.542217][T21662] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1558.578825][T21205] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1558.675298][T21662] bond0 (unregistering): Released all slaves [ 1558.732544][T21446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.820506][T21205] usb 5-1: USB disconnect, device number 20 [ 1559.059807][T21446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.930755][T14806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.788149][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 1565.273627][T21446] team0: Port device team_slave_0 added [ 1565.302453][T21446] team0: Port device team_slave_1 added [ 1566.517248][T21714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.012579][T14806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.424499][T21446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.424521][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.424552][T21446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.536981][T21446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.537000][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.537033][T21446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.802112][T21446] hsr_slave_0: entered promiscuous mode [ 1567.822604][T21446] hsr_slave_1: entered promiscuous mode [ 1567.843663][T21446] debugfs: 'hsr0' already exists in 'hsr' [ 1567.843698][T21446] Cannot create hsr debugfs directory [ 1568.229535][ T199] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1568.434703][ T199] usb 5-1: Using ep0 maxpacket: 8 [ 1568.442813][ T199] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1568.442874][ T199] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1568.442906][ T199] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.442936][ T199] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1568.487584][ T199] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1568.487644][ T199] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1568.487675][ T199] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.487704][ T199] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1568.520077][ T199] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1568.520143][ T199] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1568.520173][ T199] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.520201][ T199] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1568.582098][ T199] usb 5-1: string descriptor 0 read error: -22 [ 1568.582281][ T199] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1568.582307][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.518088][ T199] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1569.534046][ T199] usb 5-1: USB disconnect, device number 21 [ 1570.967960][T21752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1571.578728][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1571.764386][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1571.767892][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1571.859960][ T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1571.859996][ T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1571.860019][ T10] usb 5-1: config 14 has no interface number 0 [ 1571.860037][ T10] usb 5-1: config 14 has no interface number 1 [ 1571.860113][ T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1571.860141][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1571.860168][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1571.860197][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1571.860227][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1571.860255][ T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1571.860285][ T10] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1571.860305][ T10] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1571.881274][ T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1571.881304][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.881325][ T10] usb 5-1: Product: syz [ 1571.881340][ T10] usb 5-1: Manufacturer: syz [ 1571.881354][ T10] usb 5-1: SerialNumber: syz [ 1572.439465][ T10] legousbtower 5-1:14.57: interrupt endpoints not found [ 1572.641755][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1572.642280][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1572.642728][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1572.698004][ T10] legousbtower 5-1:14.228: get version request failed: -71 [ 1572.698309][ T10] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 1573.206310][ T5257] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1573.227158][ T10] usb 5-1: USB disconnect, device number 22 [ 1575.875529][ T5710] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1576.056358][ T5710] usb 9-1: Using ep0 maxpacket: 8 [ 1576.063468][ T5710] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.063569][ T5710] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.063615][ T5710] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.063658][ T5710] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1576.081336][ T5710] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.083258][ T5710] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.083308][ T5710] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.083353][ T5710] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1576.096526][ T5710] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.096658][ T5710] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.096706][ T5710] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.096749][ T5710] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1576.139457][ T5710] usb 9-1: string descriptor 0 read error: -22 [ 1576.140018][ T5710] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1576.140063][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.531297][ T5710] usb 9-1: can't set config #168, error -71 [ 1577.682863][ T5710] usb 9-1: USB disconnect, device number 6 [ 1578.270492][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1579.023259][T21446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.113651][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1580.277713][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1581.215279][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1581.217208][ T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1581.217227][ T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1581.217240][ T10] usb 5-1: config 14 has no interface number 0 [ 1581.217250][ T10] usb 5-1: config 14 has no interface number 1 [ 1581.217294][ T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1581.217309][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1581.217325][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1581.217341][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1581.217357][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1581.217380][ T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1581.217397][ T10] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1581.217408][ T10] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1581.223001][ T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1581.223033][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.223045][ T10] usb 5-1: Product: syz [ 1581.223054][ T10] usb 5-1: Manufacturer: syz [ 1581.223063][ T10] usb 5-1: SerialNumber: syz [ 1581.614443][T21205] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1581.949433][ T10] legousbtower 5-1:14.57: interrupt endpoints not found [ 1581.983423][T21205] usb 8-1: Using ep0 maxpacket: 8 [ 1581.989541][T21446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.004587][T21205] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1582.004879][T21205] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1582.004913][T21205] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.004943][T21205] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1582.010850][T21205] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1582.011137][T21205] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1582.011171][T21205] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.011200][T21205] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1582.110750][T21205] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1582.110878][T21205] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1582.110911][T21205] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.110938][T21205] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1582.114818][T21205] usb 8-1: string descriptor 0 read error: -22 [ 1582.115113][T21205] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1582.115140][T21205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.236415][ T10] legousbtower 5-1:14.228: get version request failed: -71 [ 1582.236642][ T10] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 1582.288662][ T10] usb 5-1: USB disconnect, device number 23 [ 1582.290002][T21205] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1582.496791][ T5584] usb 8-1: USB disconnect, device number 4 [ 1582.596030][T14806] bridge_slave_1: left allmulticast mode [ 1582.596071][T14806] bridge_slave_1: left promiscuous mode [ 1582.596367][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.695229][T14806] bridge_slave_0: left allmulticast mode [ 1582.695270][T14806] bridge_slave_0: left promiscuous mode [ 1582.695610][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.979118][T14806] bridge_slave_1: left allmulticast mode [ 1582.979159][T14806] bridge_slave_1: left promiscuous mode [ 1582.979471][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.140906][T14806] bridge_slave_0: left allmulticast mode [ 1583.140946][T14806] bridge_slave_0: left promiscuous mode [ 1583.141274][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.488878][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.763924][T14806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.877566][T14806] bond0 (unregistering): Released all slaves [ 1585.101376][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1585.163839][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1585.280783][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1585.301785][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1585.312202][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1585.805349][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.873967][T14806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.893252][ T5710] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1585.921905][T14806] bond0 (unregistering): Released all slaves [ 1586.253198][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 1586.283900][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1586.285330][ T5710] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1586.285359][ T5710] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1586.285381][ T5710] usb 5-1: config 14 has no interface number 0 [ 1586.285397][ T5710] usb 5-1: config 14 has no interface number 1 [ 1586.285451][ T5710] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1586.285477][ T5710] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1586.285492][ T5710] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1586.285508][ T5710] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1586.285524][ T5710] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1586.285540][ T5710] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1586.285556][ T5710] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1586.285566][ T5710] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1586.311993][ T5710] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1586.312030][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.312052][ T5710] usb 5-1: Product: syz [ 1586.312067][ T5710] usb 5-1: Manufacturer: syz [ 1586.312083][ T5710] usb 5-1: SerialNumber: syz [ 1586.907147][T21446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.950963][ T5710] legousbtower 5-1:14.57: interrupt endpoints not found [ 1587.053926][T21576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.054230][T21576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.054522][T21576] bridge_slave_0: entered allmulticast mode [ 1587.086360][T21576] bridge_slave_0: entered promiscuous mode [ 1587.124984][ T5710] legousbtower 5-1:14.228: get version request failed: -71 [ 1587.125209][ T5710] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 1587.223384][T21576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.223776][T21576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.224064][T21576] bridge_slave_1: entered allmulticast mode [ 1587.298636][T21576] bridge_slave_1: entered promiscuous mode [ 1587.310666][ T5710] usb 5-1: USB disconnect, device number 24 [ 1587.614249][ T5612] Bluetooth: hci0: command tx timeout [ 1588.186006][T21576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.340436][T21576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.315173][T21446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.225187][ T5612] Bluetooth: hci0: command tx timeout [ 1591.375014][T21878] lo speed is unknown, defaulting to 1000 [ 1592.315134][ T5612] Bluetooth: hci0: command tx timeout [ 1593.630106][T21891] tunl0: entered promiscuous mode [ 1593.640493][T21891] netlink: 'syz.7.3416': attribute type 4 has an invalid length. [ 1593.640520][T21891] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1593.667922][T21576] team0: Port device team_slave_0 added [ 1594.097604][T21576] team0: Port device team_slave_1 added [ 1594.145903][T21901] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3419'. [ 1595.092755][ T5612] Bluetooth: hci0: command tx timeout [ 1595.897153][ T5584] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1596.053254][ T5584] usb 5-1: Using ep0 maxpacket: 32 [ 1596.057529][ T5584] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1596.077566][ T5584] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1596.077601][ T5584] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1596.077623][ T5584] usb 5-1: config 14 has no interface number 0 [ 1596.077640][ T5584] usb 5-1: config 14 has no interface number 1 [ 1596.077721][ T5584] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1596.077768][ T5584] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1596.077796][ T5584] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1596.077826][ T5584] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1596.077858][ T5584] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1596.077887][ T5584] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1596.077918][ T5584] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1596.077938][ T5584] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1597.278769][ T5584] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1597.278805][ T5584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.278829][ T5584] usb 5-1: Product: syz [ 1597.278845][ T5584] usb 5-1: Manufacturer: syz [ 1597.278871][ T5584] usb 5-1: SerialNumber: syz [ 1597.775652][ T5584] legousbtower 5-1:14.57: interrupt endpoints not found [ 1598.011271][T21843] lo speed is unknown, defaulting to 1000 [ 1598.047307][T21576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.047327][T21576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.047357][T21576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.082545][T21576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.082564][T21576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.082590][T21576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.259671][ T5584] legousbtower 5-1:14.228: get version request failed: -71 [ 1598.259906][ T5584] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 1598.474506][ T5584] usb 5-1: USB disconnect, device number 25 [ 1600.599049][T21945] netlink: 'syz.7.3428': attribute type 10 has an invalid length. [ 1601.123309][T21940] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1601.309695][T21576] hsr_slave_0: entered promiscuous mode [ 1601.322361][T21576] hsr_slave_1: entered promiscuous mode [ 1601.330838][T21576] debugfs: 'hsr0' already exists in 'hsr' [ 1601.330869][T21576] Cannot create hsr debugfs directory [ 1601.370926][T21945] syz_tun: entered promiscuous mode [ 1601.571699][T14806] hsr_slave_0: left promiscuous mode [ 1601.676401][T14806] hsr_slave_1: left promiscuous mode [ 1601.678311][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.867810][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.103959][T14806] hsr_slave_0: left promiscuous mode [ 1604.143312][T14806] hsr_slave_1: left promiscuous mode [ 1604.148074][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.148107][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.562596][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1605.562944][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.805737][T14806] veth1_macvtap: left promiscuous mode [ 1605.805853][T14806] veth0_macvtap: left promiscuous mode [ 1605.806170][T14806] veth1_vlan: left promiscuous mode [ 1605.806372][T14806] veth0_vlan: left promiscuous mode [ 1606.412002][T14806] team0 (unregistering): Port device team_slave_1 removed [ 1606.464794][T14806] team0 (unregistering): Port device team_slave_0 removed [ 1607.098938][T14806] team0 (unregistering): Port device team_slave_1 removed [ 1607.142083][T14806] team0 (unregistering): Port device team_slave_0 removed [ 1607.564984][ T5257] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1607.665790][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.081182][ T5584] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1608.313915][ T5584] usb 8-1: Using ep0 maxpacket: 16 [ 1608.314376][T17687] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1608.378769][ T5584] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 1608.378829][ T5584] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1608.378854][ T5584] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1608.378899][ T5584] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1608.378925][ T5584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.439388][T17687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1608.496435][ T5584] usb 8-1: config 0 descriptor?? [ 1608.500652][T17687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1608.526261][T17687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1608.527168][T17687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1608.644352][ T5584] pxrc 8-1:0.0: Could not find endpoint [ 1608.648860][ T5584] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1608.715883][T17876] usb 8-1: USB disconnect, device number 5 [ 1610.806692][T22013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1611.324159][T17687] Bluetooth: hci1: command tx timeout [ 1613.594593][T17687] Bluetooth: hci1: command tx timeout [ 1613.845789][T21843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.846149][T21843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.886772][T21843] bridge_slave_0: entered allmulticast mode [ 1613.943034][T21843] bridge_slave_0: entered promiscuous mode [ 1614.025446][T21843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.025827][T21843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.026110][T21843] bridge_slave_1: entered allmulticast mode [ 1614.149394][T21843] bridge_slave_1: entered promiscuous mode [ 1614.691366][T21843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.002800][T21843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.223968][T21980] lo speed is unknown, defaulting to 1000 [ 1615.481114][ T199] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1615.612716][T21843] team0: Port device team_slave_0 added [ 1615.642676][T21843] team0: Port device team_slave_1 added [ 1615.650291][ T199] usb 9-1: Using ep0 maxpacket: 16 [ 1615.675769][ T199] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 1615.675837][ T199] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1615.675861][ T199] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1615.675910][ T199] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1615.675935][ T199] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.803763][ T199] usb 9-1: config 0 descriptor?? [ 1615.827591][ T199] pxrc 9-1:0.0: Could not find endpoint [ 1615.842906][ T199] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1615.901454][T17687] Bluetooth: hci1: command tx timeout [ 1616.081188][T21843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.081202][T21843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.081219][T21843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.313082][T17414] usb 9-1: USB disconnect, device number 7 [ 1616.334467][T21843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.334488][T21843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.334519][T21843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.390314][ T199] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1616.390484][ T5257] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1616.541259][ T199] usb 8-1: Using ep0 maxpacket: 8 [ 1616.544248][ T199] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1616.544299][ T199] usb 8-1: config 0 has no interface number 0 [ 1616.544433][ T199] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1616.544522][ T199] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1616.544576][ T199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.632362][ T199] usb 8-1: config 0 descriptor?? [ 1616.657933][ T199] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1617.029255][ T38] audit: type=1326 audit(1784241302.976:350): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22059 comm="syz.7.3449" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x0 [ 1617.338998][T21843] hsr_slave_0: entered promiscuous mode [ 1617.376561][T21843] hsr_slave_1: entered promiscuous mode [ 1618.719386][T17687] Bluetooth: hci1: command tx timeout [ 1619.820983][ T9] usb 8-1: USB disconnect, device number 6 [ 1620.221529][T14806] bridge_slave_1: left allmulticast mode [ 1620.221579][T14806] bridge_slave_1: left promiscuous mode [ 1620.221910][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.423270][T14806] bridge_slave_0: left allmulticast mode [ 1620.423310][T14806] bridge_slave_0: left promiscuous mode [ 1620.423655][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.843290][T14806] bridge_slave_1: left allmulticast mode [ 1620.843319][T14806] bridge_slave_1: left promiscuous mode [ 1620.843546][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.106718][T14806] bridge_slave_0: left allmulticast mode [ 1621.106760][T14806] bridge_slave_0: left promiscuous mode [ 1621.107077][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.511888][T22082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1621.605256][T14806] bridge_slave_1: left allmulticast mode [ 1621.605291][T14806] bridge_slave_1: left promiscuous mode [ 1621.605529][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.896842][T14806] bridge_slave_0: left allmulticast mode [ 1621.896880][T14806] bridge_slave_0: left promiscuous mode [ 1621.897178][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.713757][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.845799][T14806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.935713][T14806] bond0 (unregistering): Released all slaves [ 1624.069321][T22085] syz.8.3455 (22085): drop_caches: 2 [ 1624.230175][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.299783][T14806] bond0 (unregistering): Released all slaves [ 1624.394428][T22087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1624.394473][T22087] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1624.640357][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.900569][T22087] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1624.900600][T22087] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1624.931194][T14806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.005743][T14806] bond0 (unregistering): Released all slaves [ 1625.029348][T22087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1625.029379][T22087] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1625.402357][T22087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1625.402385][T22087] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1627.452637][T22087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1627.452665][T22087] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1629.336591][ T5257] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1631.509026][T21373] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1632.028964][T21373] usb 9-1: Using ep0 maxpacket: 8 [ 1632.033422][T21373] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1632.033453][T21373] usb 9-1: config 0 has no interface number 0 [ 1632.033505][T21373] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1632.033553][T21373] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1632.033579][T21373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.153329][T21373] usb 9-1: config 0 descriptor?? [ 1632.175003][T21373] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1633.568135][T12796] usb 9-1: USB disconnect, device number 8 [ 1636.960508][T21980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.960858][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.961142][T21980] bridge_slave_0: entered allmulticast mode [ 1636.979178][T21980] bridge_slave_0: entered promiscuous mode [ 1637.293051][T21980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.293424][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.293762][T21980] bridge_slave_1: entered allmulticast mode [ 1637.307865][T21980] bridge_slave_1: entered promiscuous mode [ 1637.352428][T14806] hsr_slave_0: left promiscuous mode [ 1637.373252][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3468'. [ 1637.388843][T14806] hsr_slave_1: left promiscuous mode [ 1637.392902][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.433515][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.648717][T14806] hsr_slave_0: left promiscuous mode [ 1637.689761][T14806] hsr_slave_1: left promiscuous mode [ 1637.693133][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.693166][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.731013][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.731050][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.948442][T14806] hsr_slave_0: left promiscuous mode [ 1637.988365][T14806] hsr_slave_1: left promiscuous mode [ 1637.990278][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.399624][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.533850][T14806] veth1_macvtap: left promiscuous mode [ 1638.533924][T14806] veth0_macvtap: left promiscuous mode [ 1638.534060][T14806] veth1_vlan: left promiscuous mode [ 1638.534233][T14806] veth0_vlan: left promiscuous mode [ 1638.919147][T14806] team0 (unregistering): Port device team_slave_1 removed [ 1638.969125][T14806] team0 (unregistering): Port device team_slave_0 removed [ 1639.698965][T14806] team0 (unregistering): Port device team_slave_1 removed [ 1639.758888][T14806] team0 (unregistering): Port device team_slave_0 removed [ 1640.178452][ T91] smbdirect: ib_dev[syz0] removed [ 1640.439759][T14806] team0 (unregistering): Port device team_slave_1 removed [ 1640.488660][T14806] team0 (unregistering): Port device team_slave_0 removed [ 1640.843842][T17414] lo speed is unknown, defaulting to 1000 [ 1640.843866][T17414] infiniband syz0: ib_query_port failed (-19) [ 1641.498433][T12796] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1641.624584][T21980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.624699][T21843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1641.667321][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1641.681749][T21980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.682489][T12796] usb 5-1: Using ep0 maxpacket: 8 [ 1641.790727][T12796] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1641.790761][T12796] usb 5-1: config 0 has no interface number 0 [ 1641.790828][T12796] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1641.790877][T12796] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1641.790903][T12796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.848715][T12796] usb 5-1: config 0 descriptor?? [ 1642.059367][T12796] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1643.739312][ T38] audit: type=1326 audit(1784241329.688:351): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.739371][ T38] audit: type=1326 audit(1784241329.688:352): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.739412][ T38] audit: type=1326 audit(1784241329.688:353): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.739453][ T38] audit: type=1326 audit(1784241329.688:354): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.739506][ T38] audit: type=1326 audit(1784241329.688:355): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.749523][ T38] audit: type=1326 audit(1784241329.698:356): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.778663][T21843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1643.799396][ T38] audit: type=1326 audit(1784241329.758:357): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.800004][ T38] audit: type=1326 audit(1784241329.758:358): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.824646][ T38] audit: type=1326 audit(1784241329.778:359): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1643.825476][ T38] audit: type=1326 audit(1784241329.778:360): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22185 comm="syz.7.3479" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1644.289375][T21843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1644.845598][T21980] team0: Port device team_slave_0 added [ 1644.895255][T21980] team0: Port device team_slave_1 added [ 1645.139875][T21373] usb 5-1: USB disconnect, device number 26 [ 1645.581606][T21980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.581625][T21980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.581654][T21980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.819417][T21980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.819438][T21980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.819470][T21980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.070239][T17687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1646.186351][T17687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1646.203095][T17687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1646.206947][T17687] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1646.214025][T17687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1646.734865][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1646.764494][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1646.778092][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1646.782923][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1646.787013][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1646.985742][T21980] hsr_slave_0: entered promiscuous mode [ 1647.013119][T21980] hsr_slave_1: entered promiscuous mode [ 1647.067010][T21980] debugfs: 'hsr0' already exists in 'hsr' [ 1647.067040][T21980] Cannot create hsr debugfs directory [ 1648.934645][T22223] netlink: 'syz.8.3483': attribute type 1 has an invalid length. [ 1648.934706][T22223] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3483'. [ 1649.270592][ T5612] Bluetooth: hci4: command tx timeout [ 1649.469745][T22223] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 1651.261969][ T5257] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1651.551805][ T5612] Bluetooth: hci4: command tx timeout [ 1652.110500][T21373] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1652.241539][T21373] usb 9-1: device descriptor read/64, error -71 [ 1652.486918][T21373] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1652.617037][T21373] usb 9-1: device descriptor read/64, error -71 [ 1652.733073][T21373] usb usb9-port1: attempt power cycle [ 1652.930305][ T5730] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1653.076900][ T5730] usb 8-1: Using ep0 maxpacket: 8 [ 1653.079777][ T5730] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1653.079842][ T5730] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1653.079866][ T5730] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1653.079894][ T5730] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1653.079919][ T5730] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1653.079962][ T5730] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1653.079987][ T5730] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.106880][T21373] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1653.266921][T21373] usb 9-1: device descriptor read/8, error -71 [ 1653.476177][ T5730] usb 8-1: usb_control_msg returned -32 [ 1653.476243][ T5730] usbtmc 8-1:16.0: can't read capabilities [ 1653.576845][ T5612] Bluetooth: hci4: command tx timeout [ 1653.578638][T21373] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1653.600781][T21373] usb 9-1: device descriptor read/8, error -71 [ 1653.707568][T21373] usb usb9-port1: unable to enumerate USB device [ 1653.738027][T22270] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1653.744142][T21373] usb 8-1: USB disconnect, device number 7 [ 1655.694062][ T5612] Bluetooth: hci4: command tx timeout [ 1663.042931][T22197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.043295][T22197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.043618][T22197] bridge_slave_0: entered allmulticast mode [ 1663.070238][T22197] bridge_slave_0: entered promiscuous mode [ 1663.563245][T22197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.563582][T22197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.563923][T22197] bridge_slave_1: entered allmulticast mode [ 1663.581954][T22197] bridge_slave_1: entered promiscuous mode [ 1665.793400][T22197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.923908][T22197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.772859][T22197] team0: Port device team_slave_0 added [ 1667.917383][T22197] team0: Port device team_slave_1 added [ 1668.020180][T22197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.020200][T22197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.020230][T22197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.024594][T22197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.024613][T22197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.024644][T22197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.770087][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1669.858332][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1669.872394][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1669.873995][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1669.884489][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1669.976101][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.162245][T22197] hsr_slave_0: entered promiscuous mode [ 1670.164448][T22197] hsr_slave_1: entered promiscuous mode [ 1670.186701][T22197] debugfs: 'hsr0' already exists in 'hsr' [ 1670.186732][T22197] Cannot create hsr debugfs directory [ 1672.291352][T17687] Bluetooth: hci0: command tx timeout [ 1675.060698][T17687] Bluetooth: hci0: command tx timeout [ 1677.094887][ T5612] Bluetooth: hci0: command tx timeout [ 1679.140974][T22500] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1679.177491][ T5612] Bluetooth: hci0: command tx timeout [ 1680.895123][ T1071] bridge_slave_1: left allmulticast mode [ 1680.895165][ T1071] bridge_slave_1: left promiscuous mode [ 1680.895538][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.911773][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 1680.911793][ T38] audit: type=1326 audit(1784241366.862:366): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1680.952542][ T38] audit: type=1326 audit(1784241366.872:367): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.077916][ T38] audit: type=1326 audit(1784241367.032:368): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.079776][ T38] audit: type=1326 audit(1784241367.032:369): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.112352][ T38] audit: type=1326 audit(1784241367.062:370): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.278887][ T38] audit: type=1326 audit(1784241367.182:371): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.278933][ T38] audit: type=1326 audit(1784241367.232:372): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.342857][ T38] audit: type=1326 audit(1784241367.232:373): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1681.349762][ T1071] bridge_slave_0: left allmulticast mode [ 1681.349800][ T1071] bridge_slave_0: left promiscuous mode [ 1681.350131][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.358623][ T38] audit: type=1326 audit(1784241367.312:374): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa52b0ae68e code=0x7ffc0000 [ 1681.381055][ T38] audit: type=1326 audit(1784241367.332:375): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22511 comm="syz.7.3530" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52b0ede59 code=0x7ffc0000 [ 1684.410474][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.588025][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.679073][ T1071] bond0 (unregistering): Released all slaves [ 1686.952264][ T1071] hsr_slave_0: left promiscuous mode [ 1686.986502][ T1071] hsr_slave_1: left promiscuous mode [ 1686.988572][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.027948][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1687.281657][T21205] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1687.443855][T21205] usb 5-1: Using ep0 maxpacket: 16 [ 1687.448219][T21205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.448256][T21205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1687.448270][T21205] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1687.454717][T21205] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1687.454748][T21205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.454768][T21205] usb 5-1: Product: syz [ 1687.454782][T21205] usb 5-1: Manufacturer: syz [ 1687.454796][T21205] usb 5-1: SerialNumber: syz [ 1687.476057][T21205] usb 5-1: config 0 descriptor?? [ 1687.488323][T21205] mcba_usb 5-1:0.0: Can't find endpoints [ 1689.196259][ T10] usb 5-1: USB disconnect, device number 27 [ 1689.855977][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 1690.008188][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 1690.032509][T22573] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3541'. [ 1694.118293][T17876] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1694.309915][T17876] usb 8-1: Using ep0 maxpacket: 32 [ 1694.320698][T17876] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1694.323650][T17876] usb 8-1: config 14 has an invalid interface number: 57 but max is 0 [ 1694.323669][T17876] usb 8-1: config 14 has no interface number 0 [ 1694.323699][T17876] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1694.326874][T17876] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1694.326894][T17876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.326906][T17876] usb 8-1: Product: syz [ 1694.326915][T17876] usb 8-1: Manufacturer: syz [ 1694.326924][T17876] usb 8-1: SerialNumber: syz [ 1694.734303][T22601] process 'syz.8.3538' launched './file1' with NULL argv: empty string added [ 1694.833164][T17876] legousbtower 8-1:14.57: interrupt endpoints not found [ 1697.506380][T17414] usb 8-1: USB disconnect, device number 8 [ 1699.063093][T22438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.063459][T22438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.126869][T22438] bridge_slave_0: entered allmulticast mode [ 1699.140509][T22438] bridge_slave_0: entered promiscuous mode [ 1699.718780][T22438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.719230][T22438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.719560][T22438] bridge_slave_1: entered allmulticast mode [ 1699.724921][T22438] bridge_slave_1: entered promiscuous mode [ 1701.260371][T22438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.098294][T22438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.322314][T21205] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1703.472410][T21205] usb 5-1: Using ep0 maxpacket: 32 [ 1703.478401][T21205] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1703.481202][T21205] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1703.481231][T21205] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1703.481259][T21205] usb 5-1: config 14 has no interface number 0 [ 1703.481275][T21205] usb 5-1: config 14 has no interface number 1 [ 1703.483129][T21205] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1703.483152][T21205] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1703.497946][T21205] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1703.497977][T21205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.497996][T21205] usb 5-1: Product: syz [ 1703.498010][T21205] usb 5-1: Manufacturer: syz [ 1703.498024][T21205] usb 5-1: SerialNumber: syz [ 1703.657590][T22197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1703.732669][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1704.047067][T21205] legousbtower 5-1:14.57: interrupt endpoints not found [ 1704.083194][T22197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1704.176295][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1704.211378][T22438] team0: Port device team_slave_0 added [ 1704.321250][T21205] legousbtower 5-1:14.228: interrupt endpoints not found [ 1704.340757][T22197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1704.369457][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1704.401939][T22438] team0: Port device team_slave_1 added [ 1705.088246][T17687] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1705.146783][T17687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1705.171384][T17687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1705.186777][T17687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1705.187715][T17687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1705.528867][T22684] vxcan3: entered allmulticast mode [ 1705.596937][T22687] bridge1: entered allmulticast mode [ 1705.683733][T22438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.683746][T22438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.683779][T22438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.778153][T22438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.778173][T22438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.778204][T22438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.372718][T22438] hsr_slave_0: entered promiscuous mode [ 1706.389532][T22438] hsr_slave_1: entered promiscuous mode [ 1706.615313][T21373] usb 5-1: USB disconnect, device number 28 [ 1707.201075][T22701] orangefs_mount: mount request failed with -4 [ 1707.492069][T17687] Bluetooth: hci1: command tx timeout [ 1709.579675][T17687] Bluetooth: hci1: command tx timeout [ 1711.532147][T22730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1711.532182][T22730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1711.532205][T22730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1711.653549][T17687] Bluetooth: hci1: command tx timeout [ 1712.801568][T21205] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1712.811620][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1712.953284][ T1071] bridge_slave_1: left allmulticast mode [ 1712.953325][ T1071] bridge_slave_1: left promiscuous mode [ 1712.953676][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.976395][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1712.998756][T21205] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1712.998792][T21205] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1712.998815][T21205] usb 9-1: Product: syz [ 1712.998832][T21205] usb 9-1: SerialNumber: syz [ 1713.045087][T21205] usb 9-1: config 0 descriptor?? [ 1713.067113][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1713.067225][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.161102][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1713.163004][ T10] pvrusb2: ********** [ 1713.163045][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1713.163295][ T10] pvrusb2: Important functionality might not be entirely working. [ 1713.163308][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1713.163321][ T10] pvrusb2: ********** [ 1713.247392][ T1071] bridge_slave_0: left allmulticast mode [ 1713.254579][ T1071] bridge_slave_0: left promiscuous mode [ 1713.269253][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.636982][T18427] usb 9-1: USB disconnect, device number 13 [ 1713.674253][ T2380] pvrusb2: Invalid write control endpoint [ 1713.734822][T17687] Bluetooth: hci1: command tx timeout [ 1713.887208][T22745] pvrusb2: Invalid write control endpoint [ 1714.172871][ T10] usb 5-1: USB disconnect, device number 29 [ 1714.344138][ T2380] pvrusb2: Invalid write control endpoint [ 1714.344158][ T2380] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1714.344169][ T2380] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1714.344178][ T2380] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1714.344189][ T2380] pvrusb2: Device being rendered inoperable [ 1714.397673][ T2380] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1714.397801][ T2380] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1714.466563][T21149] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1714.486418][ T2380] pvrusb2: Attached sub-driver cx25840 [ 1714.486494][ T2380] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1714.486507][ T2380] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1714.670577][T21149] usb 8-1: Using ep0 maxpacket: 32 [ 1714.673496][T21149] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1714.673528][T21149] usb 8-1: config 0 has no interface number 0 [ 1714.673580][T21149] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1714.673604][T21149] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1714.676796][T21149] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1714.676829][T21149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.676849][T21149] usb 8-1: Product: syz [ 1714.676865][T21149] usb 8-1: Manufacturer: syz [ 1714.676879][T21149] usb 8-1: SerialNumber: syz [ 1714.862238][T21149] usb 8-1: config 0 descriptor?? [ 1715.014528][T21149] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1715.014701][T21149] em28xx 8-1:0.89: Video interface 89 found: [ 1715.112355][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.748469][T21149] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1715.767684][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.924920][ T1071] bond0 (unregistering): Released all slaves [ 1716.773511][T21149] em28xx 8-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1716.773550][T21149] em28xx 8-1:0.89: board has no eeprom [ 1717.105879][T21149] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1717.106018][T21149] em28xx 8-1:0.89: analog set to bulk mode. [ 1717.168952][ T10] em28xx 8-1:0.89: Registering V4L2 extension [ 1717.226410][T21149] usb 8-1: USB disconnect, device number 9 [ 1717.239769][T21149] em28xx 8-1:0.89: Disconnecting em28xx [ 1717.288389][ T10] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1717.288441][ T10] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1717.288456][ T10] em28xx 8-1:0.89: No AC97 audio processor [ 1717.381131][T17414] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1717.470805][ T10] usb 8-1: Decoder not found [ 1717.471008][ T10] em28xx 8-1:0.89: failed to create media graph [ 1717.471130][ T10] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1717.551567][T17414] usb 5-1: Using ep0 maxpacket: 32 [ 1717.626604][T17414] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1717.626638][T17414] usb 5-1: config 0 has no interface number 0 [ 1717.626689][T17414] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1717.626719][T17414] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1717.689015][T17414] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1717.689052][T17414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.689075][T17414] usb 5-1: Product: syz [ 1717.689091][T17414] usb 5-1: Manufacturer: syz [ 1717.689106][T17414] usb 5-1: SerialNumber: syz [ 1717.737097][ T10] INFO: trying to register non-static key. [ 1717.737176][ T10] The code is fine but needs lockdep annotation, or maybe [ 1717.737185][ T10] you didn't initialize this object before use? [ 1717.737216][ T10] turning off the locking correctness validator. [ 1717.737235][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1717.737263][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1717.737279][ T10] Workqueue: events request_module_async [ 1717.737319][ T10] Call Trace: [ 1717.737328][ T10] [ 1717.737340][ T10] dump_stack_lvl+0xe8/0x150 [ 1717.737376][ T10] assign_lock_key+0x133/0x150 [ 1717.737404][ T10] register_lock_class+0xcc/0x2e0 [ 1717.737431][ T10] __lock_acquire+0xaf/0x2e40 [ 1717.737457][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 1717.737480][ T10] ? stack_trace_save+0xa9/0x100 [ 1717.737502][ T10] ? __pfx_stack_trace_save+0x10/0x10 [ 1717.737529][ T10] lock_acquire+0x115/0x350 [ 1717.737557][ T10] ? __wake_up_common_lock+0x2f/0x1f0 [ 1717.737584][ T10] rt_spin_lock+0x83/0x400 [ 1717.737606][ T10] ? __wake_up_common_lock+0x2f/0x1f0 [ 1717.737627][ T10] ? __pfx_rt_spin_lock+0x10/0x10 [ 1717.737653][ T10] __wake_up_common_lock+0x2f/0x1f0 [ 1717.737675][ T10] __vb2_queue_cancel+0x2de/0xdc0 [ 1717.737703][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1717.737734][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 1717.737765][ T10] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1717.737794][ T10] vb2_core_queue_release+0x2f/0x150 [ 1717.737823][ T10] vb2_video_unregister_device+0x15b/0x200 [ 1717.737853][ T10] em28xx_v4l2_init+0x1c60/0x3140 [ 1717.737894][ T10] em28xx_init_extension+0x120/0x1d0 [ 1717.737925][ T10] ? process_one_work+0x7fd/0x1480 [ 1717.737951][ T10] process_one_work+0xaaf/0x1480 [ 1717.737986][ T10] ? __pfx_process_one_work+0x10/0x10 [ 1717.738010][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 1717.738032][ T10] ? assign_work+0x3cf/0x5d0 [ 1717.738059][ T10] worker_thread+0xb05/0x10d0 [ 1717.738095][ T10] kthread+0x388/0x470 [ 1717.738127][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1717.738152][ T10] ? __pfx_kthread+0x10/0x10 [ 1717.738184][ T10] ret_from_fork+0x514/0xb70 [ 1717.738217][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1717.738248][ T10] ? __switch_to+0xc89/0x1420 [ 1717.738277][ T10] ? __pfx_kthread+0x10/0x10 [ 1717.738309][ T10] ret_from_fork_asm+0x1a/0x30 [ 1717.738336][ T10] [ 1717.738443][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1717.738487][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1717.738508][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1717.738531][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1717.738553][ T10] Workqueue: events request_module_async [ 1717.738586][ T10] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1717.738608][ T10] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 1717.738627][ T10] RSP: 0018:ffffc900000f7908 EFLAGS: 00010246 [ 1717.738646][ T10] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1717.738660][ T10] RDX: dffffc0000000000 RSI: ffffffff8bca9460 RDI: 00000000ffffffff [ 1717.738675][ T10] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1717.738689][ T10] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: ffff88805fd71b14 [ 1717.738705][ T10] R13: ffff88805fd71c28 R14: 0000000000000000 R15: 0000000000000000 [ 1717.738721][ T10] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 1717.738738][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1717.738754][ T10] CR2: 00007ffc6d63fd88 CR3: 0000000038592000 CR4: 00000000003526f0 [ 1717.738775][ T10] Call Trace: [ 1717.738783][ T10] [ 1717.738795][ T10] __vb2_queue_cancel+0x2de/0xdc0 [ 1717.738823][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1717.738854][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 1717.738884][ T10] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1717.738914][ T10] vb2_core_queue_release+0x2f/0x150 [ 1717.738946][ T10] vb2_video_unregister_device+0x15b/0x200 [ 1717.738978][ T10] em28xx_v4l2_init+0x1c60/0x3140 [ 1717.739017][ T10] em28xx_init_extension+0x120/0x1d0 [ 1717.739046][ T10] ? process_one_work+0x7fd/0x1480 [ 1717.739072][ T10] process_one_work+0xaaf/0x1480 [ 1717.739106][ T10] ? __pfx_process_one_work+0x10/0x10 [ 1717.739130][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 1717.739153][ T10] ? assign_work+0x3cf/0x5d0 [ 1717.739179][ T10] worker_thread+0xb05/0x10d0 [ 1717.739216][ T10] kthread+0x388/0x470 [ 1717.739244][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1717.739264][ T10] ? __pfx_kthread+0x10/0x10 [ 1717.739292][ T10] ret_from_fork+0x514/0xb70 [ 1717.739322][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1717.739352][ T10] ? __switch_to+0xc89/0x1420 [ 1717.739381][ T10] ? __pfx_kthread+0x10/0x10 [ 1717.739412][ T10] ret_from_fork_asm+0x1a/0x30 [ 1717.739439][ T10] [ 1717.739446][ T10] Modules linked in: [ 1717.739462][ T10] ---[ end trace 0000000000000000 ]--- [ 1717.739472][ T10] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1717.739493][ T10] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 1717.739512][ T10] RSP: 0018:ffffc900000f7908 EFLAGS: 00010246 [ 1717.739529][ T10] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1717.739553][ T10] RDX: dffffc0000000000 RSI: ffffffff8bca9460 RDI: 00000000ffffffff [ 1717.739568][ T10] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1717.739581][ T10] R10: dffffc0000000000 R11: fffffbfff1f5f0b0 R12: ffff88805fd71b14 [ 1717.739597][ T10] R13: ffff88805fd71c28 R14: 0000000000000000 R15: 0000000000000000 [ 1717.739612][ T10] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 1717.739630][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1717.739645][ T10] CR2: 00007ffc6d63fd88 CR3: 0000000038592000 CR4: 00000000003526f0 [ 1717.739666][ T10] Kernel panic - not syncing: Fatal exception [ 1717.739945][ T10] Kernel Offset: disabled