last executing test programs: 25m42.672508973s ago: executing program 1 (id=116): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x100}}}}}}}}, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000), 0x12) bind$x25(r0, &(0x7f0000000040), 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) kexec_load(0x58fb, 0x55, &(0x7f00000195c0), 0x160000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000019a80)={'syztnl1\x00', 0x0}) getpeername$packet(r2, &(0x7f0000019ac0), &(0x7f0000019b00)=0x14) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, &(0x7f0000019580)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES64=r3, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25m40.356753111s ago: executing program 1 (id=122): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000045c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_init_net_socket$x25(0x9, 0x5, 0x0) setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 25m37.958379236s ago: executing program 1 (id=127): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c530", 0x22}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 25m36.001863967s ago: executing program 1 (id=134): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 25m31.746996726s ago: executing program 1 (id=138): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x100}}}}}}}}, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000), 0x12) bind$x25(r0, &(0x7f0000000040), 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000180)) 25m27.899182687s ago: executing program 1 (id=146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) socket(0x80000000000000a, 0x80000, 0x20000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 25m11.91939568s ago: executing program 32 (id=146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) socket(0x80000000000000a, 0x80000, 0x20000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 15m18.648852986s ago: executing program 0 (id=1521): syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x100}}}}}}}}, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$x25(0xffffffffffffffff, &(0x7f0000000040), 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) kexec_load(0x58fb, 0x55, &(0x7f00000195c0), 0x160000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000019a80)={'syztnl1\x00', 0x0}) getpeername$packet(r1, &(0x7f0000019ac0), &(0x7f0000019b00)=0x14) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, &(0x7f0000019580)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES64=r2, @ANYRESHEX, @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m8.875894794s ago: executing program 0 (id=1545): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x6) 15m5.470674719s ago: executing program 0 (id=1553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000390400000000000000000000f200", @ANYBLOB="00000000000400001c0012800b00010062726964676500000c00028008"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m0.663594304s ago: executing program 0 (id=1566): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x201001, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000000)={@default, @default}) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 14m57.811133653s ago: executing program 0 (id=1568): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x100}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000), 0x12) bind$x25(r0, &(0x7f0000000040), 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) kexec_load(0x58fb, 0x55, &(0x7f00000195c0), 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000180)) 14m55.1650972s ago: executing program 0 (id=1580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 14m39.352811646s ago: executing program 33 (id=1580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 13m48.407859199s ago: executing program 3 (id=1838): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[]) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) 13m48.109848498s ago: executing program 3 (id=1840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) acct(0x0) chroot(0x0) geteuid() r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 13m47.86857893s ago: executing program 3 (id=1842): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x2) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x100, 0x9, 0x101, 0x64b0, 0xfac, 0x10}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) io_setup(0x30, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x6ea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r7}) 13m47.676729584s ago: executing program 3 (id=1843): close(0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 13m47.577265063s ago: executing program 3 (id=1844): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) io_setup(0x30, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x6ea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 13m46.739067518s ago: executing program 3 (id=1846): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 12m48.164933423s ago: executing program 2 (id=1934): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000007900)="60c82576ef", 0x5}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)}}], 0x1, 0x0, 0x0) 12m47.845931866s ago: executing program 2 (id=1936): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRES32=r2, @ANYRESHEX=r2], 0x60}}, 0x20040481) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/319], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r8, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000000180)=0x5) 12m44.6481887s ago: executing program 2 (id=1938): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) 12m43.482546183s ago: executing program 2 (id=1940): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x201001, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 12m41.873336293s ago: executing program 2 (id=1941): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) io_setup(0x30, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x6ea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) 12m39.794584332s ago: executing program 2 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0xd7) 12m23.21567696s ago: executing program 34 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0xd7) 3m4.891705752s ago: executing program 6 (id=2679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private0, 0x10, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0xffffffffffffffff}, {0x8000000000000, 0xa00, 0x40800000000000, 0x800000000000002}, 0x400, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) acct(0x0) chroot(0x0) geteuid() r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r4, &(0x7f00000000c0), 0x0) 3m1.635262204s ago: executing program 6 (id=2682): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) futex(0x0, 0xd, 0x4, 0x0, 0x0, 0xfffffffe) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0xa, 0x4, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x52424752}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2m57.765959668s ago: executing program 6 (id=2687): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 2m57.544329674s ago: executing program 6 (id=2688): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = dup(r0) sendmsg$inet(r5, 0x0, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 2m53.681047608s ago: executing program 6 (id=2693): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x2) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x100, 0x9, 0x101, 0x64b0, 0xfac, 0x10}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) io_setup(0x30, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x6ea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r7}) 2m51.400077649s ago: executing program 6 (id=2695): syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x701801, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2m36.302503142s ago: executing program 35 (id=2695): syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x701801, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 11.083743854s ago: executing program 4 (id=2902): r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r0], 0x40}}, 0x0) 7.536803051s ago: executing program 4 (id=2904): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x23}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000), 0x80000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000049e000/0x4000)=nil, 0xfffffffffffffe94, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x140075, 0x7ffe, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.463549845s ago: executing program 4 (id=2906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x400c0c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x40000) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bb", 0xe, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) rmdir(0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f0000000280)=""/83, 0x53, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4180) 4.528335215s ago: executing program 4 (id=2907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x40000) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bb", 0xe, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) rmdir(0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f0000000280)=""/83, 0x53, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4180) 4.262040111s ago: executing program 5 (id=2908): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) write(r0, 0x0, 0x0) 4.202845217s ago: executing program 5 (id=2909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) acct(0x0) chroot(0x0) geteuid() openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700", 0x12) 3.467938465s ago: executing program 5 (id=2910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20044182) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x1, [0x4]}, 0xa) 3.060475563s ago: executing program 5 (id=2911): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa0000007}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3}) 2.608276748s ago: executing program 5 (id=2912): syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x701801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01a9480000000004090000000000ddbc3abd41680f00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, &(0x7f0000000080)={0x2}) 1.732844402s ago: executing program 4 (id=2913): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESHEX=r2], 0x60}}, 0x20040481) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) r7 = syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/319], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r9, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f0000000180)=0x5) 71.404618ms ago: executing program 4 (id=2914): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) futex(0x0, 0xd, 0x4, 0x0, 0x0, 0xfffffffe) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0xa, 0x4, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x52424752}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 5 (id=2915): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) kernel console output (not intermixed with test programs): v: batadv0: Removing interface: batadv_slave_0 [ 1136.130918][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.170115][ T6897] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1136.729554][ T6897] usb 6-1: Using ep0 maxpacket: 32 [ 1136.731631][ T6897] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1136.731658][ T6897] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1136.731679][ T6897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1136.731696][ T6897] usb 6-1: config 1 has no interface number 0 [ 1136.731724][ T6897] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1136.731740][ T6897] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1136.731765][ T6897] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1136.731779][ T6897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.808880][ T6897] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1138.054563][T11853] hsr_slave_0: left promiscuous mode [ 1138.369631][T11853] hsr_slave_1: left promiscuous mode [ 1138.386343][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.471083][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.123123][ T6897] snd_usb_pod 6-1:1.1: set_interface failed [ 1139.123453][ T6897] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1139.146851][ T6897] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1139.414757][ T6897] usb 6-1: USB disconnect, device number 7 [ 1140.292698][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1140.473357][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1140.729050][T10763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1140.889997][T10763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1140.896198][T10763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1140.897610][T10763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1140.898356][T10763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1144.053935][ T5116] Bluetooth: hci2: command tx timeout [ 1144.942756][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1145.880185][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1146.089975][ T5116] Bluetooth: hci2: command tx timeout [ 1147.886880][T13596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1148.169510][ T5116] Bluetooth: hci2: command tx timeout [ 1148.213277][T13799] team0: Port device team_slave_0 added [ 1148.230772][T13799] team0: Port device team_slave_1 added [ 1148.470585][T13799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.470605][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.470632][T13799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.535717][T13799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.535737][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.535765][T13799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.649609][ T809] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1148.834177][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 1148.838089][ T809] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1148.838117][ T809] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1148.838139][ T809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1148.838162][ T809] usb 6-1: config 1 has no interface number 0 [ 1148.838212][ T809] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1148.838240][ T809] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1148.838285][ T809] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1148.838311][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.952560][T13799] hsr_slave_0: entered promiscuous mode [ 1148.953889][T13799] hsr_slave_1: entered promiscuous mode [ 1148.960656][ T809] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1150.460151][ T5116] Bluetooth: hci2: command tx timeout [ 1152.394024][ T809] snd_usb_pod 6-1:1.1: set_interface failed [ 1152.394372][ T809] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1152.394607][ T809] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1152.456769][ T809] usb 6-1: USB disconnect, device number 8 [ 1153.828879][T13987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2204'. [ 1157.342168][T13938] chnl_net:caif_netlink_parms(): no params data found [ 1160.047031][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 1160.702855][T14039] tipc: Failed to remove unknown binding: 66,0,0/0:3114665659/3114665660 [ 1160.703115][T14039] tipc: Failed to remove unknown binding: 66,0,0/0:3114665659/3114665660 [ 1162.904622][T13938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.904769][T13938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.905017][T13938] bridge_slave_0: entered allmulticast mode [ 1162.908638][T13938] bridge_slave_0: entered promiscuous mode [ 1162.936903][T13938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.937011][T13938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.937225][T13938] bridge_slave_1: entered allmulticast mode [ 1162.949724][T13938] bridge_slave_1: entered promiscuous mode [ 1163.140517][T13938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.145076][T13938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.583279][T13938] team0: Port device team_slave_0 added [ 1163.596001][T13938] team0: Port device team_slave_1 added [ 1165.131686][T14076] tipc: Failed to remove unknown binding: 66,0,0/0:3529176205/3529176206 [ 1165.131989][T14076] tipc: Failed to remove unknown binding: 66,0,0/0:3529176205/3529176206 [ 1165.168932][T13938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.168952][T13938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.168979][T13938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.210341][T13938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.210360][T13938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.210386][T13938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.027565][T13938] hsr_slave_0: entered promiscuous mode [ 1166.029272][T13938] hsr_slave_1: entered promiscuous mode [ 1166.049906][T13938] debugfs: 'hsr0' already exists in 'hsr' [ 1166.049937][T13938] Cannot create hsr debugfs directory [ 1166.375454][T13799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1166.844600][T13799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1168.382903][T13799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1168.463902][T13799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1168.877302][T14102] CUSE: info not properly terminated [ 1171.515881][T11853] bridge_slave_1: left allmulticast mode [ 1171.515913][T11853] bridge_slave_1: left promiscuous mode [ 1171.516193][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.472241][T14136] tipc: Failed to remove unknown binding: 66,0,0/0:3113884956/3113884957 [ 1173.472501][T14136] tipc: Failed to remove unknown binding: 66,0,0/0:3113884956/3113884957 [ 1174.581603][T11853] bridge_slave_0: left allmulticast mode [ 1174.581626][T11853] bridge_slave_0: left promiscuous mode [ 1174.581812][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.684881][T11853] bridge_slave_1: left allmulticast mode [ 1174.684914][T11853] bridge_slave_1: left promiscuous mode [ 1174.685180][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.945540][T11853] bridge_slave_0: left allmulticast mode [ 1174.945563][T11853] bridge_slave_0: left promiscuous mode [ 1174.945721][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.260706][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.338635][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.442213][T11853] bond0 (unregistering): Released all slaves [ 1176.980937][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.041658][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.081186][T11853] bond0 (unregistering): Released all slaves [ 1181.689598][T11853] hsr_slave_0: left promiscuous mode [ 1181.937775][T11853] hsr_slave_1: left promiscuous mode [ 1181.965732][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.088717][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.151062][T10763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.210958][T10763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.217543][T10763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.232656][T10763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.234875][T10763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1183.612446][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1183.947426][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.947503][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.406922][ T5116] Bluetooth: hci1: command tx timeout [ 1184.681714][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1184.915680][T14201] 9pnet_fd: Insufficient options for proto=fd [ 1186.278414][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1186.330313][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1187.000325][ T5116] Bluetooth: hci1: command tx timeout [ 1187.167471][T14217] CUSE: info not properly terminated [ 1189.265080][ T5116] Bluetooth: hci1: command tx timeout [ 1190.112749][ T6897] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1190.259573][ T6897] usb 7-1: device descriptor read/64, error -71 [ 1190.520018][ T6897] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1190.658322][ T6897] usb 7-1: device descriptor read/64, error -71 [ 1190.760053][ T6897] usb usb7-port1: attempt power cycle [ 1191.000935][T14245] 9pnet_fd: Insufficient options for proto=fd [ 1191.129659][ T6897] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1191.150366][ T6897] usb 7-1: device descriptor read/8, error -71 [ 1191.289745][ T5116] Bluetooth: hci1: command tx timeout [ 1191.336323][T13938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1191.389547][ T6897] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1191.440478][ T6897] usb 7-1: device descriptor read/8, error -71 [ 1191.475288][T13938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1191.549889][ T6897] usb usb7-port1: unable to enumerate USB device [ 1191.554925][T14178] chnl_net:caif_netlink_parms(): no params data found [ 1191.582449][T13938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1191.711723][T13938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1192.549514][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.549647][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.549906][T14178] bridge_slave_0: entered allmulticast mode [ 1192.552901][T14178] bridge_slave_0: entered promiscuous mode [ 1192.626615][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.626790][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.627177][T14178] bridge_slave_1: entered allmulticast mode [ 1192.632959][T14178] bridge_slave_1: entered promiscuous mode [ 1192.768723][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.803649][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.017607][T14178] team0: Port device team_slave_0 added [ 1193.029075][T14178] team0: Port device team_slave_1 added [ 1193.125696][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.125711][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.125727][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.128288][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.128298][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.128314][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.936456][T14178] hsr_slave_0: entered promiscuous mode [ 1193.950866][T14178] hsr_slave_1: entered promiscuous mode [ 1193.951963][T14178] debugfs: 'hsr0' already exists in 'hsr' [ 1193.951991][T14178] Cannot create hsr debugfs directory [ 1194.826230][T14279] ubi: mtd0 is already attached to ubi31 [ 1195.056626][ T5116] Bluetooth: Frame is too long (len 12, expected len 4) [ 1196.620320][T14283] CUSE: info not properly terminated [ 1197.607214][T14285] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2261'. [ 1199.268126][T13938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.424022][T10763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1203.444451][T10763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1203.446422][T10763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1203.447351][T10763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1203.448225][T10763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1204.073128][T14334] ubi: mtd0 is already attached to ubi31 [ 1204.124497][ T5116] Bluetooth: Frame is too long (len 12, expected len 4) [ 1205.529530][ T5116] Bluetooth: hci4: command tx timeout [ 1205.552079][T14337] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2274'. [ 1205.936556][T14345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2277'. [ 1207.081730][T14354] fuse: Bad value for 'fd' [ 1207.650314][ T5116] Bluetooth: hci4: command tx timeout [ 1207.964269][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 1212.719546][ T5116] Bluetooth: hci4: command tx timeout [ 1213.845103][T11853] bridge_slave_1: left allmulticast mode [ 1213.845127][T11853] bridge_slave_1: left promiscuous mode [ 1213.845340][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.110367][T10763] Bluetooth: hci4: command tx timeout [ 1215.226360][T11853] bridge_slave_0: left allmulticast mode [ 1215.226392][T11853] bridge_slave_0: left promiscuous mode [ 1215.226674][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.957324][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.492988][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.593835][T14401] overlayfs: overlapping lowerdir path [ 1217.603361][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 1217.675431][T11853] bond0 (unregistering): Released all slaves [ 1224.879386][T14432] tipc: Failed to remove unknown binding: 66,0,0/0:2839403034/2839403035 [ 1224.880190][T14432] tipc: Failed to remove unknown binding: 66,0,0/0:2839403034/2839403035 [ 1226.118199][T11853] hsr_slave_0: left promiscuous mode [ 1226.269600][T11853] hsr_slave_1: left promiscuous mode [ 1226.275192][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.524912][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.286692][T14442] serio: Serial port ptm0 [ 1229.600524][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1229.994309][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1230.638245][T14465] ubi: mtd0 is already attached to ubi31 [ 1231.089515][T10763] Bluetooth: Frame is too long (len 12, expected len 4) [ 1238.103486][T14494] syz.6.2315 (14494) used greatest stack depth: 14584 bytes left [ 1238.786010][T14508] ubi: mtd0 is already attached to ubi31 [ 1238.800719][T10763] Bluetooth: Frame is too long (len 12, expected len 4) [ 1239.404649][T14323] chnl_net:caif_netlink_parms(): no params data found [ 1239.498679][T14514] overlayfs: overlapping lowerdir path [ 1240.024132][T14516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.551311][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.551469][T14323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.551732][T14323] bridge_slave_0: entered allmulticast mode [ 1240.611733][T14323] bridge_slave_0: entered promiscuous mode [ 1240.617900][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.618112][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.618348][T14323] bridge_slave_1: entered allmulticast mode [ 1240.651417][T14323] bridge_slave_1: entered promiscuous mode [ 1242.301470][T14323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.321556][T14323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.423527][T14323] team0: Port device team_slave_0 added [ 1242.441264][T14323] team0: Port device team_slave_1 added [ 1242.506658][T14323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.506679][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.506708][T14323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.587938][T14323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.587959][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.587990][T14323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.987646][T14323] hsr_slave_0: entered promiscuous mode [ 1242.998351][T14323] hsr_slave_1: entered promiscuous mode [ 1243.017975][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1243.031064][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1243.032537][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1243.034127][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1243.947994][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1244.614272][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2325'. [ 1246.639116][T14556] tipc: Failed to remove unknown binding: 66,0,0/0:811796461/811796462 [ 1246.945540][T10763] Bluetooth: hci2: command tx timeout [ 1246.984556][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.992870][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.600281][T14566] tipc: Failed to remove unknown binding: 66,0,0/0:2967782425/2967782426 [ 1247.600528][T14566] tipc: Failed to remove unknown binding: 66,0,0/0:2967782425/2967782426 [ 1248.169529][T14567] ubi: mtd0 is already attached to ubi31 [ 1248.184810][T10763] Bluetooth: Frame is too long (len 12, expected len 4) [ 1248.749547][ T6897] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1248.899683][ T6897] usb 6-1: Using ep0 maxpacket: 8 [ 1248.984077][T10763] Bluetooth: hci2: command tx timeout [ 1249.551581][ T6897] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1249.551616][ T6897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.551638][ T6897] usb 6-1: Product: syz [ 1249.551653][ T6897] usb 6-1: Manufacturer: syz [ 1249.551669][ T6897] usb 6-1: SerialNumber: syz [ 1249.595473][ T6897] usb 6-1: config 0 descriptor?? [ 1249.631136][ T6897] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1250.028200][ T6897] gspca_sq930x: ucbus_write failed -71 [ 1251.672628][T10763] Bluetooth: hci2: command tx timeout [ 1252.003293][ T6897] gspca_sq930x: Sensor ov9630 not yet treated [ 1252.003414][ T6897] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 1252.049718][ T6897] usb 6-1: USB disconnect, device number 9 [ 1253.922621][T10763] Bluetooth: hci2: command tx timeout [ 1256.557991][T14616] tipc: Failed to remove unknown binding: 66,0,0/0:797370973/797370974 [ 1256.558276][T14616] tipc: Failed to remove unknown binding: 66,0,0/0:797370973/797370974 [ 1258.080627][ T809] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1258.209450][ T809] usb 5-1: device descriptor read/64, error -71 [ 1258.919436][ T809] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1259.049798][ T809] usb 5-1: device descriptor read/64, error -71 [ 1259.167212][ T809] usb usb5-port1: attempt power cycle [ 1259.539805][ T809] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1259.570838][ T809] usb 5-1: device descriptor read/8, error -71 [ 1260.475019][T14542] chnl_net:caif_netlink_parms(): no params data found [ 1260.549478][ T809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1260.644684][T11853] bridge_slave_1: left allmulticast mode [ 1260.644719][T11853] bridge_slave_1: left promiscuous mode [ 1260.645006][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.882029][ T809] usb 5-1: device not accepting address 24, error -71 [ 1260.882448][ T809] usb usb5-port1: unable to enumerate USB device [ 1261.806509][T11853] bridge_slave_0: left allmulticast mode [ 1261.806582][T11853] bridge_slave_0: left promiscuous mode [ 1261.815781][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.650129][T11853] bridge_slave_1: left allmulticast mode [ 1263.650154][T11853] bridge_slave_1: left promiscuous mode [ 1263.650315][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.702576][T11853] bridge_slave_0: left allmulticast mode [ 1263.702601][T11853] bridge_slave_0: left promiscuous mode [ 1263.702774][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.119164][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1264.152970][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1264.193977][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1264.198007][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1264.198867][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1264.440320][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.520191][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.563974][T11853] bond0 (unregistering): Released all slaves [ 1264.915758][T14659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2353'. [ 1264.916360][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2353'. [ 1264.916375][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2353'. [ 1265.270423][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.357637][T14664] tipc: Failed to remove unknown binding: 66,0,0/0:3162664736/3162664737 [ 1265.357922][T14664] tipc: Failed to remove unknown binding: 66,0,0/0:3162664736/3162664737 [ 1265.382328][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.432128][T11853] bond0 (unregistering): Released all slaves [ 1266.409502][T10763] Bluetooth: hci1: command tx timeout [ 1266.620807][T14671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.649743][T11853] hsr_slave_0: left promiscuous mode [ 1266.699571][T11853] hsr_slave_1: left promiscuous mode [ 1266.700748][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.752739][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.218161][T11853] hsr_slave_0: left promiscuous mode [ 1267.259594][T11853] hsr_slave_1: left promiscuous mode [ 1267.260471][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.267240][T14677] ubi: mtd0 is already attached to ubi31 [ 1267.620412][ T36] audit: type=1800 audit(1775378022.600:2): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2359" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1267.623828][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.496896][T10763] Bluetooth: hci1: command tx timeout [ 1269.851336][T14695] ubi: mtd0 is already attached to ubi31 [ 1269.854321][T10763] Bluetooth: Frame is too long (len 12, expected len 4) [ 1270.582505][T10763] Bluetooth: hci1: command tx timeout [ 1270.785253][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 1271.980383][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1272.020447][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1272.650061][T10763] Bluetooth: hci1: command tx timeout [ 1272.754668][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1272.800084][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1274.515710][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2368'. [ 1274.621208][T14542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.621313][T14542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.621472][T14542] bridge_slave_0: entered allmulticast mode [ 1274.624720][T14542] bridge_slave_0: entered promiscuous mode [ 1274.823975][T14542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.824121][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.824374][T14542] bridge_slave_1: entered allmulticast mode [ 1274.830389][T14542] bridge_slave_1: entered promiscuous mode [ 1277.523349][T14542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.532606][T14542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.973715][T14734] ubi: mtd0 is already attached to ubi31 [ 1279.023730][T10763] Bluetooth: Frame is too long (len 12, expected len 4) [ 1279.026885][T14542] team0: Port device team_slave_0 added [ 1279.170023][T14542] team0: Port device team_slave_1 added [ 1281.327145][T14542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.327165][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.327195][T14542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.375673][T14542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.375693][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.375722][T14542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.733220][T14752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.882261][T14542] hsr_slave_0: entered promiscuous mode [ 1282.885925][T14542] hsr_slave_1: entered promiscuous mode [ 1282.886943][T14542] debugfs: 'hsr0' already exists in 'hsr' [ 1282.886970][T14542] Cannot create hsr debugfs directory [ 1287.001817][T14774] overlayfs: overlapping lowerdir path [ 1287.902133][T14654] chnl_net:caif_netlink_parms(): no params data found [ 1288.628265][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2386'. [ 1291.362050][T14654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.362193][T14654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.362433][T14654] bridge_slave_0: entered allmulticast mode [ 1291.374556][T14654] bridge_slave_0: entered promiscuous mode [ 1291.409573][T14654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.409702][T14654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.409942][T14654] bridge_slave_1: entered allmulticast mode [ 1291.478945][T14654] bridge_slave_1: entered promiscuous mode [ 1291.623794][T14654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.734375][T14654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.774983][T14654] team0: Port device team_slave_0 added [ 1297.842093][T14654] team0: Port device team_slave_1 added [ 1297.902925][T14542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1298.899575][T11853] bridge_slave_1: left allmulticast mode [ 1298.899607][T11853] bridge_slave_1: left promiscuous mode [ 1298.899895][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.980959][T11853] bridge_slave_0: left allmulticast mode [ 1298.980992][T11853] bridge_slave_0: left promiscuous mode [ 1298.981290][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.833649][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.910245][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.971089][T11853] bond0 (unregistering): Released all slaves [ 1302.004872][T14542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1302.058293][T14654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.058313][T14654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.058343][T14654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.065614][T14654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.065631][T14654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.065656][T14654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.201107][T14654] hsr_slave_0: entered promiscuous mode [ 1302.202498][T14654] hsr_slave_1: entered promiscuous mode [ 1302.203453][T14654] debugfs: 'hsr0' already exists in 'hsr' [ 1302.203477][T14654] Cannot create hsr debugfs directory [ 1302.855679][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2402'. [ 1303.491668][T11853] hsr_slave_0: left promiscuous mode [ 1303.601150][T11853] hsr_slave_1: left promiscuous mode [ 1303.602349][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.642180][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1303.679612][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1303.682920][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.695762][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1303.709718][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1303.715402][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1305.787096][ T5116] Bluetooth: hci4: command tx timeout [ 1306.780652][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1306.825558][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.825640][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.888070][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1307.857495][ T5116] Bluetooth: hci4: command tx timeout [ 1309.931373][ T5116] Bluetooth: hci4: command tx timeout [ 1310.788365][T14914] fuse: Bad value for 'fd' [ 1312.009452][ T5116] Bluetooth: hci4: command tx timeout [ 1317.884746][T14654] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1318.940274][T14654] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1319.285312][T14654] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1320.692921][T14654] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1321.436503][T14967] tipc: Failed to remove unknown binding: 66,0,0/0:883760132/883760133 [ 1321.436995][T14967] tipc: Failed to remove unknown binding: 66,0,0/0:883760132/883760133 [ 1322.019779][T14865] chnl_net:caif_netlink_parms(): no params data found [ 1322.469455][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1322.620233][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1322.622749][ T10] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1322.622777][ T10] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1322.622799][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1322.622821][ T10] usb 7-1: config 1 has no interface number 0 [ 1322.622871][ T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.622898][ T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1322.622921][ T10] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1322.622966][ T10] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1322.622989][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.651653][ T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1322.861765][ T10] snd_usb_pod 7-1:1.1: cannot start listening: -90 [ 1322.862115][ T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1322.862746][ T10] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 1323.192455][ T10] usb 7-1: USB disconnect, device number 10 [ 1323.328762][T14865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.328982][T14865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.329176][T14865] bridge_slave_0: entered allmulticast mode [ 1323.353981][T14865] bridge_slave_0: entered promiscuous mode [ 1323.379041][T14865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.386258][T14865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.386540][T14865] bridge_slave_1: entered allmulticast mode [ 1323.414403][T14865] bridge_slave_1: entered promiscuous mode [ 1323.493727][T14865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.525522][T14865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.615024][T14865] team0: Port device team_slave_0 added [ 1323.637549][T14865] team0: Port device team_slave_1 added [ 1323.710420][T14865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.710440][T14865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.710469][T14865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.745227][T14865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.745244][T14865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.745269][T14865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.200430][T14865] hsr_slave_0: entered promiscuous mode [ 1324.201940][T14865] hsr_slave_1: entered promiscuous mode [ 1325.001156][T11853] bridge_slave_1: left allmulticast mode [ 1325.001190][T11853] bridge_slave_1: left promiscuous mode [ 1325.001477][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.103659][T11853] bridge_slave_0: left allmulticast mode [ 1325.103771][T11853] bridge_slave_0: left promiscuous mode [ 1325.104491][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.399806][T10763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1325.429855][T10763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1325.519594][T10763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1325.549885][T10763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1325.573645][T10763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1326.104029][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.181033][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.242103][T11853] bond0 (unregistering): Released all slaves [ 1327.419581][T11853] hsr_slave_0: left promiscuous mode [ 1327.771952][ T5116] Bluetooth: hci1: command tx timeout [ 1328.223767][T11853] hsr_slave_1: left promiscuous mode [ 1328.224842][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.243405][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.743450][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1328.791403][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1329.849765][ T5116] Bluetooth: hci1: command tx timeout [ 1331.950537][ T5116] Bluetooth: hci1: command tx timeout [ 1332.352468][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1332.549423][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1332.552402][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1332.552433][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1332.552454][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1332.552475][ T10] usb 5-1: config 1 has no interface number 0 [ 1332.552524][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1332.552564][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1332.552587][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1332.552632][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1332.552658][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.852341][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1332.929960][ T10] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 1332.930167][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1332.930507][ T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 1333.151870][ T10] usb 5-1: USB disconnect, device number 25 [ 1334.084741][ T5116] Bluetooth: hci1: command tx timeout [ 1334.526656][T15002] chnl_net:caif_netlink_parms(): no params data found [ 1334.684839][T15062] ubi: mtd0 is already attached to ubi31 [ 1334.767976][ T5116] Bluetooth: Frame is too long (len 12, expected len 4) [ 1335.898228][T15069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2450'. [ 1335.919848][T15002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.919957][T15002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.920167][T15002] bridge_slave_0: entered allmulticast mode [ 1335.922410][T15002] bridge_slave_0: entered promiscuous mode [ 1335.951451][T15002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.951574][T15002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.951833][T15002] bridge_slave_1: entered allmulticast mode [ 1335.954382][T15002] bridge_slave_1: entered promiscuous mode [ 1336.886073][T15078] tipc: Failed to remove unknown binding: 66,0,0/0:1887331973/1887331974 [ 1336.886549][T15078] tipc: Failed to remove unknown binding: 66,0,0/0:1887331973/1887331974 [ 1339.299914][T15002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.604596][T15002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.544029][T15002] team0: Port device team_slave_0 added [ 1342.561333][T15002] team0: Port device team_slave_1 added [ 1342.801171][T15104] overlayfs: overlapping lowerdir path [ 1344.872961][T14865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1344.943436][T15002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.943456][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.943486][T15002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.947627][T14865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1345.313884][T15002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.313906][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.313936][T15002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.314795][T14865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1345.720492][T14865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1345.864978][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2466'. [ 1347.241953][T15002] hsr_slave_0: entered promiscuous mode [ 1347.243426][T15002] hsr_slave_1: entered promiscuous mode [ 1347.244421][T15002] debugfs: 'hsr0' already exists in 'hsr' [ 1347.244447][T15002] Cannot create hsr debugfs directory [ 1348.226157][T15151] overlayfs: overlapping lowerdir path [ 1350.278981][T11853] bridge_slave_1: left allmulticast mode [ 1350.279015][T11853] bridge_slave_1: left promiscuous mode [ 1350.279610][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.361787][T11853] bridge_slave_0: left allmulticast mode [ 1350.361819][T11853] bridge_slave_0: left promiscuous mode [ 1350.362100][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.479978][T11853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.612542][T11853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.691046][T11853] bond0 (unregistering): Released all slaves [ 1352.386738][T11853] hsr_slave_0: left promiscuous mode [ 1352.468871][T11853] hsr_slave_1: left promiscuous mode [ 1352.481102][T11853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.520065][T11853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.540030][T11853] team0 (unregistering): Port device team_slave_1 removed [ 1354.574863][T11853] team0 (unregistering): Port device team_slave_0 removed [ 1360.882471][T14865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.957732][T14865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.991275][ T1526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.991393][ T1526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.999036][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.999200][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.021616][T15002] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1362.348007][T15238] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2493'. [ 1363.069456][T15002] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1363.681112][T15002] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1364.319389][T15002] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1368.270312][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.270390][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.367539][T15002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.490836][T15002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.542594][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.542751][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.596875][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.655830][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.725549][T10763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1368.741215][T10763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1368.745412][T10763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1368.792933][T10763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1368.807480][T10763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1370.933948][ T5116] Bluetooth: hci2: command tx timeout [ 1373.109945][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2501'. [ 1374.042143][ T5116] Bluetooth: hci2: command tx timeout [ 1374.436428][T15323] loop2: detected capacity change from 0 to 7 [ 1374.508705][T15323] Dev loop2: unable to read RDB block 7 [ 1374.508756][T15323] loop2: unable to read partition table [ 1374.509017][T15323] loop2: partition table beyond EOD, truncated [ 1374.509062][T15323] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1376.436210][T10763] Bluetooth: hci2: command tx timeout [ 1377.016106][T15002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.039576][T15279] chnl_net:caif_netlink_parms(): no params data found [ 1378.709546][ T5116] Bluetooth: hci2: command tx timeout [ 1380.230488][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.230791][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.231039][T15279] bridge_slave_0: entered allmulticast mode [ 1380.261628][T15279] bridge_slave_0: entered promiscuous mode [ 1380.330320][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.330466][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.330730][T15279] bridge_slave_1: entered allmulticast mode [ 1380.340147][T15279] bridge_slave_1: entered promiscuous mode [ 1380.697618][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.723098][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.112524][T15279] team0: Port device team_slave_0 added [ 1381.272265][T15279] team0: Port device team_slave_1 added [ 1381.588565][ T1526] bridge_slave_1: left allmulticast mode [ 1381.588597][ T1526] bridge_slave_1: left promiscuous mode [ 1381.588863][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.493660][ T1526] bridge_slave_0: left allmulticast mode [ 1382.493693][ T1526] bridge_slave_0: left promiscuous mode [ 1382.493974][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.012547][T15397] overlay: Unknown parameter '/' [ 1388.331596][T10763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1388.380898][T10763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1388.383662][T10763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1388.386283][T10763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1388.387604][T10763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1388.511640][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.554440][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.734779][ T1526] bond0 (unregistering): Released all slaves [ 1388.758409][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.758427][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.758443][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.764246][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.764266][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.764321][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.013855][T15441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1390.013887][T15441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1390.014925][T15441] vhci_hcd vhci_hcd.0: Device attached [ 1390.489720][ T5116] Bluetooth: hci4: command tx timeout [ 1390.493229][T11077] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1390.499515][T13885] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1390.561811][T15279] hsr_slave_0: entered promiscuous mode [ 1390.563527][T15279] hsr_slave_1: entered promiscuous mode [ 1390.564672][T15279] debugfs: 'hsr0' already exists in 'hsr' [ 1390.564700][T15279] Cannot create hsr debugfs directory [ 1390.649442][T11077] usb 6-1: Using ep0 maxpacket: 8 [ 1390.656838][T11077] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1390.656870][T11077] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.656935][T11077] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1390.656959][T11077] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1390.656985][T11077] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1390.657031][T11077] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1390.657055][T11077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.559531][T11077] usbtmc 6-1:16.0: bulk endpoints not found [ 1391.630121][T15442] usb 43-1: recv xbuf, 0 [ 1391.657479][ T74] vhci_hcd vhci_hcd.5: stop threads [ 1391.689438][ T74] vhci_hcd vhci_hcd.5: release socket [ 1391.697814][ T74] vhci_hcd vhci_hcd.5: disconnect device [ 1391.725270][T13885] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1391.909557][T11077] usb 6-1: USB disconnect, device number 10 [ 1392.869429][ T5116] Bluetooth: hci4: command tx timeout [ 1393.257873][T15465] tipc: Failed to remove unknown binding: 66,0,0/0:2779985100/2779985101 [ 1393.259626][T15465] tipc: Failed to remove unknown binding: 66,0,0/0:2779985100/2779985101 [ 1395.360161][ T5116] Bluetooth: hci4: command tx timeout [ 1395.457014][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2543'. [ 1398.205504][ T5116] Bluetooth: hci4: command tx timeout [ 1398.289518][ T1526] hsr_slave_0: left promiscuous mode [ 1398.340477][ T1526] hsr_slave_1: left promiscuous mode [ 1398.341655][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.530378][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.878556][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1399.960713][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1401.121446][T15508] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1401.121478][T15508] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1401.123389][T15508] vhci_hcd vhci_hcd.0: Device attached [ 1401.359453][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1401.359503][ T1232] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1401.789445][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1401.811748][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1401.811809][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.812157][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.812207][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.812258][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1401.812434][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1401.812486][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.131699][T15528] tipc: Failed to remove unknown binding: 66,0,0/0:457540189/457540190 [ 1402.133767][T15528] tipc: Failed to remove unknown binding: 66,0,0/0:457540189/457540190 [ 1402.685192][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 1402.924471][ T5886] usb 5-1: USB disconnect, device number 26 [ 1402.987244][T15509] usb 41-1: recv xbuf, 0 [ 1402.993235][ T1689] vhci_hcd vhci_hcd.4: stop threads [ 1402.993260][ T1689] vhci_hcd vhci_hcd.4: release socket [ 1403.009897][ T1689] vhci_hcd vhci_hcd.4: disconnect device [ 1403.081336][ T1232] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1405.215468][T15555] ubi: mtd0 is already attached to ubi31 [ 1405.329720][ T5116] Bluetooth: Frame is too long (len 12, expected len 4) [ 1417.808091][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1418.660609][T15582] tipc: Failed to remove unknown binding: 66,0,0/0:3951685082/3951685083 [ 1418.660894][T15582] tipc: Failed to remove unknown binding: 66,0,0/0:3951685082/3951685083 [ 1420.579955][T15432] chnl_net:caif_netlink_parms(): no params data found [ 1423.857730][T13885] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1423.989501][T13885] usb 5-1: device descriptor read/64, error -71 [ 1425.169514][T13885] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1425.175910][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.209528][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.210961][T15432] bridge_slave_0: entered allmulticast mode [ 1425.215554][T15432] bridge_slave_0: entered promiscuous mode [ 1425.299452][T13885] usb 5-1: device descriptor read/64, error -71 [ 1425.410841][T13885] usb usb5-port1: attempt power cycle [ 1425.547807][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.547891][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.548062][T15432] bridge_slave_1: entered allmulticast mode [ 1425.581639][T15432] bridge_slave_1: entered promiscuous mode [ 1425.762824][T13885] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1425.793431][T13885] usb 5-1: device descriptor read/8, error -71 [ 1425.886094][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.905268][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.973977][T15432] team0: Port device team_slave_0 added [ 1426.029388][T13885] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1426.196132][T13885] usb 5-1: device descriptor read/8, error -71 [ 1426.411218][T13885] usb usb5-port1: unable to enumerate USB device [ 1426.426091][T15634] tipc: Failed to remove unknown binding: 66,0,0/0:403363980/403363981 [ 1426.426784][T15634] tipc: Failed to remove unknown binding: 66,0,0/0:403363980/403363981 [ 1428.905621][T15653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1429.313095][T15432] team0: Port device team_slave_1 added [ 1429.474988][T10763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1429.498195][T10763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1429.507396][T10763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1429.508742][T10763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1429.520012][T10763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1429.651151][T15665] netlink: 'syz.5.2576': attribute type 10 has an invalid length. [ 1429.695852][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.695934][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.905723][T15671] ubi: mtd0 is already attached to ubi31 [ 1430.320837][T15665] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1430.321040][T15665] team0: Failed to send options change via netlink (err -105) [ 1430.321057][T15665] team0: Port device netdevsim0 added [ 1430.880343][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.880362][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.880393][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.958138][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.958160][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.958189][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.503632][T15432] hsr_slave_0: entered promiscuous mode [ 1431.505158][T15432] hsr_slave_1: entered promiscuous mode [ 1431.610855][ T5116] Bluetooth: hci1: command tx timeout [ 1433.757568][ T5116] Bluetooth: hci1: command tx timeout [ 1433.920105][ T1526] bridge_slave_1: left allmulticast mode [ 1433.920138][ T1526] bridge_slave_1: left promiscuous mode [ 1433.920400][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.032780][ T1526] bridge_slave_0: left allmulticast mode [ 1434.032813][ T1526] bridge_slave_0: left promiscuous mode [ 1434.033116][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.661342][ T36] audit: type=1800 audit(1775378190.660:3): pid=15719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2583" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1435.832200][T10763] Bluetooth: hci1: command tx timeout [ 1435.919994][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.966766][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.001332][ T1526] bond0 (unregistering): Released all slaves [ 1436.901628][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2584'. [ 1437.892103][T10763] Bluetooth: hci1: command tx timeout [ 1438.174381][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2585'. [ 1438.219520][ T1526] hsr_slave_0: left promiscuous mode [ 1438.269606][ T1526] hsr_slave_1: left promiscuous mode [ 1438.273667][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.320529][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.364626][T15735] tipc: Failed to remove unknown binding: 66,0,0/0:163274131/163274132 [ 1439.364876][T15735] tipc: Failed to remove unknown binding: 66,0,0/0:163274131/163274132 [ 1441.525546][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1441.630118][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1443.192017][T15754] ubi: mtd0 is already attached to ubi31 [ 1443.748407][T15657] chnl_net:caif_netlink_parms(): no params data found [ 1444.854071][T15657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.868284][T15657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.868546][T15657] bridge_slave_0: entered allmulticast mode [ 1444.955358][T15657] bridge_slave_0: entered promiscuous mode [ 1444.982222][T15657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.982375][T15657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.982634][T15657] bridge_slave_1: entered allmulticast mode [ 1444.985630][T15657] bridge_slave_1: entered promiscuous mode [ 1445.323114][T15657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.522580][T15657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.852671][T15657] team0: Port device team_slave_0 added [ 1446.867945][T15657] team0: Port device team_slave_1 added [ 1447.180676][T15657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.180696][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.180725][T15657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.187825][T15657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.187844][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.187873][T15657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.453479][ T1526] bridge_slave_1: left allmulticast mode [ 1447.453511][ T1526] bridge_slave_1: left promiscuous mode [ 1447.453769][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.521196][ T1526] bridge_slave_0: left allmulticast mode [ 1447.521229][ T1526] bridge_slave_0: left promiscuous mode [ 1447.521536][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.773497][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1447.788998][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1447.791608][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1447.798514][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1447.800963][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1449.947587][T10763] Bluetooth: hci2: command tx timeout [ 1451.920327][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.009341][T10763] Bluetooth: hci2: command tx timeout [ 1453.219052][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.252625][ T1526] bond0 (unregistering): Released all slaves [ 1453.884650][T15657] hsr_slave_0: entered promiscuous mode [ 1453.886157][T15657] hsr_slave_1: entered promiscuous mode [ 1453.887245][T15657] debugfs: 'hsr0' already exists in 'hsr' [ 1453.887272][T15657] Cannot create hsr debugfs directory [ 1454.058518][ T1526] hsr_slave_0: left promiscuous mode [ 1454.089346][T10763] Bluetooth: hci2: command tx timeout [ 1454.107225][T15824] ubi: mtd0 is already attached to ubi31 [ 1454.279530][ T1526] hsr_slave_1: left promiscuous mode [ 1454.280717][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.361992][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.169508][T10763] Bluetooth: hci2: command tx timeout [ 1456.230151][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1456.270276][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1457.333416][T15846] tipc: Failed to remove unknown binding: 66,0,0/0:2016769338/2016769339 [ 1457.333675][T15846] tipc: Failed to remove unknown binding: 66,0,0/0:2016769338/2016769339 [ 1460.179669][ T36] audit: type=1800 audit(1775378215.030:4): pid=15866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2610" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1460.529371][T15657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1460.827542][T15657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1461.959485][T15657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1462.184302][T15657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1464.800448][T15894] ubi: mtd0 is already attached to ubi31 [ 1464.842146][T15797] chnl_net:caif_netlink_parms(): no params data found [ 1465.406087][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.406251][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.406507][T15797] bridge_slave_0: entered allmulticast mode [ 1465.437659][T15797] bridge_slave_0: entered promiscuous mode [ 1465.458924][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.459098][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.474199][T15797] bridge_slave_1: entered allmulticast mode [ 1465.477567][T15797] bridge_slave_1: entered promiscuous mode [ 1466.587599][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.623292][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.693852][T15797] team0: Port device team_slave_0 added [ 1466.713833][T15797] team0: Port device team_slave_1 added [ 1468.330390][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.330458][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.330499][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.400899][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.400918][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.400947][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.505159][T15657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.710913][T15797] hsr_slave_0: entered promiscuous mode [ 1470.715393][T15797] hsr_slave_1: entered promiscuous mode [ 1470.732286][T15797] debugfs: 'hsr0' already exists in 'hsr' [ 1470.732319][T15797] Cannot create hsr debugfs directory [ 1471.142876][T15657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.491556][T15953] ubi: mtd0 is already attached to ubi31 [ 1471.690837][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.692481][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.849547][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.849707][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.710689][T13885] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1473.947781][ T1526] bridge_slave_1: left allmulticast mode [ 1473.947814][ T1526] bridge_slave_1: left promiscuous mode [ 1473.951365][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.969695][T13885] usb 7-1: device descriptor read/64, error -71 [ 1475.321978][ T1526] bridge_slave_0: left allmulticast mode [ 1475.322002][ T1526] bridge_slave_0: left promiscuous mode [ 1475.322201][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.447339][T13885] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1475.670805][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.749897][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.806248][ T1526] bond0 (unregistering): Released all slaves [ 1476.942966][ T1526] hsr_slave_0: left promiscuous mode [ 1477.022003][ T1526] hsr_slave_1: left promiscuous mode [ 1477.023084][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.080852][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.645433][T15973] mmap: syz.4.2633 (15973) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1480.325535][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1480.530215][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1489.914370][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1489.968597][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1490.066308][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1490.113238][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1490.136273][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1490.922852][T16040] ubi: mtd0 is already attached to ubi31 [ 1491.136344][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.136429][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.379848][T16027] chnl_net:caif_netlink_parms(): no params data found [ 1492.729538][T10763] Bluetooth: hci4: command tx timeout [ 1494.349826][T16027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.350104][T16027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.350356][T16027] bridge_slave_0: entered allmulticast mode [ 1494.353362][T16027] bridge_slave_0: entered promiscuous mode [ 1494.812632][T10763] Bluetooth: hci4: command tx timeout [ 1497.289404][T10763] Bluetooth: hci4: command tx timeout [ 1497.901525][T16027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.901683][T16027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.901938][T16027] bridge_slave_1: entered allmulticast mode [ 1497.904982][T16027] bridge_slave_1: entered promiscuous mode [ 1498.891252][T15797] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1499.049247][T16102] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2657'. [ 1499.473962][T10763] Bluetooth: hci4: command tx timeout [ 1499.674190][T15797] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1500.069450][T15797] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1500.923291][T16027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.923783][T15797] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1501.087556][T16121] ubi: mtd0 is already attached to ubi31 [ 1501.977257][T16027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.796155][T16027] team0: Port device team_slave_0 added [ 1504.112764][T16027] team0: Port device team_slave_1 added [ 1504.309446][T16027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.309468][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.309495][T16027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.312015][T16027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.312032][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.312061][T16027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.771554][T16027] hsr_slave_0: entered promiscuous mode [ 1504.773189][T16027] hsr_slave_1: entered promiscuous mode [ 1507.108052][ T1526] bridge_slave_1: left allmulticast mode [ 1507.108083][ T1526] bridge_slave_1: left promiscuous mode [ 1507.108359][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.211083][ T1526] bridge_slave_0: left allmulticast mode [ 1507.211118][ T1526] bridge_slave_0: left promiscuous mode [ 1507.211405][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.260403][T16158] binder: 16154:16158 ioctl c018620c 200000000900 returned -1 [ 1509.284585][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1509.296387][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1509.297923][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1509.301479][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1509.302466][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1510.240537][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.320145][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.344191][ T1526] bond0 (unregistering): Released all slaves [ 1511.369687][ T5116] Bluetooth: hci1: command tx timeout [ 1513.160341][ T1526] hsr_slave_0: left promiscuous mode [ 1513.251601][ T1526] hsr_slave_1: left promiscuous mode [ 1513.277338][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.449648][ T5116] Bluetooth: hci1: command tx timeout [ 1514.167017][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.769906][ T5116] Bluetooth: hci1: command tx timeout [ 1517.837334][T16232] tipc: Failed to remove unknown binding: 66,0,0/0:3204393956/3204393957 [ 1517.843731][T16232] tipc: Failed to remove unknown binding: 66,0,0/0:3204393956/3204393957 [ 1518.759327][ T5116] Bluetooth: hci1: command tx timeout [ 1518.780468][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1518.810108][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1520.559480][T16236] nvme_fabrics: missing parameter 'transport=%s' [ 1520.559499][T16236] nvme_fabrics: missing parameter 'nqn=%s' [ 1523.363099][T16183] chnl_net:caif_netlink_parms(): no params data found [ 1523.497600][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2688'. [ 1529.426177][T16183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.426407][T16183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.426667][T16183] bridge_slave_0: entered allmulticast mode [ 1529.467768][T16183] bridge_slave_0: entered promiscuous mode [ 1529.495552][T16183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.495699][T16183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.495951][T16183] bridge_slave_1: entered allmulticast mode [ 1529.499078][T16183] bridge_slave_1: entered promiscuous mode [ 1529.624326][T16183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.770103][T16183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.142522][T16183] team0: Port device team_slave_0 added [ 1531.369706][T16324] nvme_fabrics: missing parameter 'transport=%s' [ 1531.369727][T16324] nvme_fabrics: missing parameter 'nqn=%s' [ 1531.441413][T16183] team0: Port device team_slave_1 added [ 1532.842981][T16183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.843000][T16183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.843030][T16183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.910521][T16183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.910541][T16183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.910570][T16183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1533.126697][T16027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1533.360415][T16342] tipc: Failed to remove unknown binding: 66,0,0/0:1297296618/1297296619 [ 1533.362091][T16342] tipc: Failed to remove unknown binding: 66,0,0/0:1297296618/1297296619 [ 1534.223319][T16027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1534.502151][T16183] hsr_slave_0: entered promiscuous mode [ 1534.503611][T16183] hsr_slave_1: entered promiscuous mode [ 1534.504845][T16183] debugfs: 'hsr0' already exists in 'hsr' [ 1534.504870][T16183] Cannot create hsr debugfs directory [ 1535.458470][T16027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1535.698306][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2695'. [ 1537.524076][T16027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1543.768496][ T1526] bridge_slave_1: left allmulticast mode [ 1543.768528][ T1526] bridge_slave_1: left promiscuous mode [ 1543.768805][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.867086][ T1526] bridge_slave_0: left allmulticast mode [ 1543.867126][ T1526] bridge_slave_0: left promiscuous mode [ 1543.867410][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.129123][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.297714][T10763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1545.328762][T10763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1545.338127][T10763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1545.344924][T10763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1545.345864][T10763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1545.350158][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.429377][ T809] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1545.454762][ T1526] bond0 (unregistering): Released all slaves [ 1546.504540][ T809] usb 6-1: device descriptor read/64, error -71 [ 1546.829742][ T809] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1547.873030][T10763] Bluetooth: hci2: command tx timeout [ 1547.949476][ T809] usb 6-1: device descriptor read/64, error -71 [ 1548.069727][ T809] usb usb6-port1: attempt power cycle [ 1548.491415][ T1526] hsr_slave_0: left promiscuous mode [ 1548.531066][ T1526] hsr_slave_1: left promiscuous mode [ 1548.532105][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.598644][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.740193][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1549.771687][ T1232] libceph: connect (1)[c::]:6789 error -101 [ 1549.771883][ T1232] libceph: mon0 (1)[c::]:6789 connect error [ 1549.793918][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1549.830701][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1549.836614][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1549.842251][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1549.847947][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1549.851775][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1549.863455][T16454] ceph: No mds server is up or the cluster is laggy [ 1549.954888][T10763] Bluetooth: hci2: command tx timeout [ 1551.718049][T16419] chnl_net:caif_netlink_parms(): no params data found [ 1551.929793][T10763] Bluetooth: hci3: command tx timeout [ 1552.018076][T10763] Bluetooth: hci2: command tx timeout [ 1552.301841][T16183] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1552.508756][T16183] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1552.545377][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2726'. [ 1552.574260][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.574360][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.645156][T16183] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1552.780265][T16183] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1552.834696][T16419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.834806][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.834950][T16419] bridge_slave_0: entered allmulticast mode [ 1552.849616][T16419] bridge_slave_0: entered promiscuous mode [ 1552.899617][T16419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.899694][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.899864][T16419] bridge_slave_1: entered allmulticast mode [ 1552.901610][T16419] bridge_slave_1: entered promiscuous mode [ 1553.321235][T16419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.445566][T16419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.693778][T16502] netlink: 'syz.4.2727': attribute type 10 has an invalid length. [ 1553.854630][T16502] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1553.854727][T16502] team0: Failed to send options change via netlink (err -105) [ 1553.854737][T16502] team0: Port device netdevsim0 added [ 1553.861217][T16458] chnl_net:caif_netlink_parms(): no params data found [ 1553.973591][T16504] fuse: Invalid rootmode [ 1554.019764][T10763] Bluetooth: hci3: command tx timeout [ 1554.090187][T10763] Bluetooth: hci2: command tx timeout [ 1554.391599][T16419] team0: Port device team_slave_0 added [ 1554.761351][T16419] team0: Port device team_slave_1 added [ 1555.315893][T16516] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1555.315957][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1556.179485][T10763] Bluetooth: hci3: command tx timeout [ 1556.436971][T16419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.436990][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.437020][T16419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.448747][T16419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.448767][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.448798][T16419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.773637][T16458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.773873][T16458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.774098][T16458] bridge_slave_0: entered allmulticast mode [ 1556.780313][T16458] bridge_slave_0: entered promiscuous mode [ 1557.121402][T16458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.121486][T16458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.121658][T16458] bridge_slave_1: entered allmulticast mode [ 1557.123317][T16458] bridge_slave_1: entered promiscuous mode [ 1559.758129][T10763] Bluetooth: hci3: command tx timeout [ 1561.177552][T16419] hsr_slave_0: entered promiscuous mode [ 1561.178779][T16419] hsr_slave_1: entered promiscuous mode [ 1561.180859][T16419] debugfs: 'hsr0' already exists in 'hsr' [ 1561.180883][T16419] Cannot create hsr debugfs directory [ 1561.418497][T16458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.419484][T11075] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1561.452599][T16458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.526072][T16458] team0: Port device team_slave_0 added [ 1561.537750][T16458] team0: Port device team_slave_1 added [ 1561.589456][T11075] usb 5-1: Using ep0 maxpacket: 16 [ 1561.605627][T11075] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.605666][T11075] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.605690][T11075] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1561.605728][T11075] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1561.605752][T11075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.613670][T11075] usb 5-1: config 0 descriptor?? [ 1561.657839][T16458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.657858][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.657884][T16458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.734569][T16458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.734588][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.734615][T16458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.061425][T11075] usbhid 5-1:0.0: can't add hid device: -71 [ 1562.061569][T11075] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1562.073905][T11075] usb 5-1: USB disconnect, device number 31 [ 1562.205391][T16458] hsr_slave_0: entered promiscuous mode [ 1562.206517][T16458] hsr_slave_1: entered promiscuous mode [ 1562.207130][T16458] debugfs: 'hsr0' already exists in 'hsr' [ 1562.207148][T16458] Cannot create hsr debugfs directory [ 1562.492768][T16183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.161578][ T1526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.566222][ T1526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.645092][T16183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.720034][T16419] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1565.446274][T16419] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1566.162090][ T1526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.215266][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.215448][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.215976][T16419] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1566.275616][T16419] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1567.021608][ T1526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.147692][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 1568.092021][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.092176][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.271370][T16419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.329664][T16419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.342032][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.348038][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.383865][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.384956][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.473196][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1572.486965][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1572.488509][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1572.491472][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1572.492465][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1573.806192][ T1526] bridge_slave_1: left allmulticast mode [ 1573.806225][ T1526] bridge_slave_1: left promiscuous mode [ 1573.806500][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.270146][ T1526] bridge_slave_0: left allmulticast mode [ 1574.270180][ T1526] bridge_slave_0: left promiscuous mode [ 1574.270486][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.398474][T16610] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2747'. [ 1574.398528][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 1574.602931][ T5116] Bluetooth: hci1: command tx timeout [ 1575.424121][ T1526] bridge_slave_1: left allmulticast mode [ 1575.424145][ T1526] bridge_slave_1: left promiscuous mode [ 1575.424331][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.075062][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'. [ 1577.139579][ T5116] Bluetooth: hci1: command tx timeout [ 1578.261025][ T1526] bridge_slave_0: left allmulticast mode [ 1578.261056][ T1526] bridge_slave_0: left promiscuous mode [ 1578.261328][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.430030][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1579.095482][T16636] tipc: Failed to remove unknown binding: 66,0,0/0:2443002323/2443002324 [ 1579.095917][T16636] tipc: Failed to remove unknown binding: 66,0,0/0:2443002323/2443002324 [ 1579.210108][ T5116] Bluetooth: hci1: command tx timeout [ 1580.526887][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.662572][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.920541][ T1526] bond0 (unregistering): Released all slaves [ 1581.769801][ T5116] Bluetooth: hci1: command tx timeout [ 1581.802136][T16645] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2754'. [ 1581.802816][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.889969][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.912180][ T1526] bond0 (unregistering): Released all slaves [ 1583.704500][T16458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1584.121804][T16458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1584.186665][T16458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1584.235032][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2756'. [ 1584.364368][T16458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1585.227412][T16669] tipc: Failed to remove unknown binding: 66,0,0/0:3350552237/3350552238 [ 1585.227832][T16669] tipc: Failed to remove unknown binding: 66,0,0/0:3350552237/3350552238 [ 1586.849749][ T1526] hsr_slave_0: left promiscuous mode [ 1586.889664][ T1526] hsr_slave_1: left promiscuous mode [ 1586.890742][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.930171][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.252261][ T1526] hsr_slave_0: left promiscuous mode [ 1587.289464][ T1526] hsr_slave_1: left promiscuous mode [ 1587.290201][ T1526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.290219][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.331003][ T1526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.331024][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.434102][ T1526] veth1_macvtap: left promiscuous mode [ 1587.434172][ T1526] veth0_macvtap: left promiscuous mode [ 1587.434327][ T1526] veth1_vlan: left promiscuous mode [ 1587.434442][ T1526] veth0_vlan: left promiscuous mode [ 1588.159924][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1588.210349][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1588.950040][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1588.990676][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1589.735029][T16419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.737070][T16703] netlink: 'syz.5.2762': attribute type 10 has an invalid length. [ 1589.848474][T16602] chnl_net:caif_netlink_parms(): no params data found [ 1590.740684][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.749636][T16602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.749911][T16602] bridge_slave_0: entered allmulticast mode [ 1590.753760][T16602] bridge_slave_0: entered promiscuous mode [ 1590.767270][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.767926][T16602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.768149][T16602] bridge_slave_1: entered allmulticast mode [ 1590.778814][T16602] bridge_slave_1: entered promiscuous mode [ 1590.944812][T16602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.009983][T16602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.898396][T16602] team0: Port device team_slave_0 added [ 1591.922623][T16602] team0: Port device team_slave_1 added [ 1593.252859][T16602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.252879][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.252909][T16602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.318543][T16602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.318562][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.318590][T16602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.341662][T16458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.788462][T16602] hsr_slave_0: entered promiscuous mode [ 1593.790220][T16602] hsr_slave_1: entered promiscuous mode [ 1594.089736][T16751] tipc: Failed to remove unknown binding: 66,0,0/0:1400320109/1400320110 [ 1594.090104][T16751] tipc: Failed to remove unknown binding: 66,0,0/0:1400320109/1400320110 [ 1594.773574][T16458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.800159][T16750] netlink: 'syz.5.2768': attribute type 1 has an invalid length. [ 1597.548447][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.548685][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.599085][T16419] veth0_vlan: entered promiscuous mode [ 1597.639904][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.640131][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.289970][T16419] veth1_vlan: entered promiscuous mode [ 1600.109819][T16428] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1600.308600][T16428] usb 6-1: device descriptor read/64, error -71 [ 1600.549494][T16428] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1600.709338][T16428] usb 6-1: device descriptor read/64, error -71 [ 1600.829733][T16428] usb usb6-port1: attempt power cycle [ 1600.835385][T16419] veth0_macvtap: entered promiscuous mode [ 1600.915156][T16419] veth1_macvtap: entered promiscuous mode [ 1601.183791][T16428] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1601.215051][T16428] usb 6-1: device descriptor read/8, error -71 [ 1601.469374][T16428] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1601.507056][T16428] usb 6-1: device descriptor read/8, error -71 [ 1601.687077][T16808] tipc: Failed to remove unknown binding: 66,0,0/0:3474310476/3474310477 [ 1601.690004][T16808] tipc: Failed to remove unknown binding: 66,0,0/0:3474310476/3474310477 [ 1601.762409][T16428] usb usb6-port1: unable to enumerate USB device [ 1605.566155][T16419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.832586][T16458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.177505][ T1526] bridge_slave_1: left allmulticast mode [ 1606.177548][ T1526] bridge_slave_1: left promiscuous mode [ 1606.177923][ T1526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.261448][ T1526] bridge_slave_0: left allmulticast mode [ 1606.261482][ T1526] bridge_slave_0: left promiscuous mode [ 1606.261875][ T1526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.335864][T10763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1606.353187][T10763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1606.355198][T10763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1606.356787][T10763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1606.357818][T10763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1610.494963][T10763] Bluetooth: hci4: command tx timeout [ 1610.872896][ T1526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.930044][ T1526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.971450][ T1526] bond0 (unregistering): Released all slaves [ 1611.490468][ T1526] hsr_slave_0: left promiscuous mode [ 1611.535674][ T1526] hsr_slave_1: left promiscuous mode [ 1611.537563][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.580440][ T1526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.401747][T10763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1612.432249][T10763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1612.433788][T10763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1612.435364][T10763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1612.436335][T10763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1612.631345][T16859] tipc: Failed to remove unknown binding: 66,0,0/0:3869686206/3869686207 [ 1612.637350][T16859] tipc: Failed to remove unknown binding: 66,0,0/0:3869686206/3869686207 [ 1613.559282][T10763] Bluetooth: hci4: command tx timeout [ 1613.654431][ T1526] team0 (unregistering): Port device team_slave_1 removed [ 1613.739867][ T1526] team0 (unregistering): Port device team_slave_0 removed [ 1614.013838][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.013888][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.449657][T10763] Bluetooth: hci2: command tx timeout [ 1615.619774][T10763] Bluetooth: hci4: command tx timeout [ 1615.967865][T16602] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1616.050396][T16602] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1616.122073][T16602] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1616.206632][T16602] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1617.757483][T10763] Bluetooth: hci2: command tx timeout [ 1617.757522][T10763] Bluetooth: hci4: command tx timeout [ 1620.144897][ T5116] Bluetooth: hci2: command tx timeout [ 1620.857955][T16916] netlink: 'syz.5.2793': attribute type 10 has an invalid length. [ 1620.980645][T16830] chnl_net:caif_netlink_parms(): no params data found [ 1621.101975][T16854] chnl_net:caif_netlink_parms(): no params data found [ 1621.885467][T16935] openvswitch: netlink: Flow key attr not present in new flow. [ 1622.150724][T16830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.150941][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.151196][T16830] bridge_slave_0: entered allmulticast mode [ 1622.154262][T16830] bridge_slave_0: entered promiscuous mode [ 1622.169843][ T5116] Bluetooth: hci2: command tx timeout [ 1622.229530][T16830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.229653][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.229797][T16830] bridge_slave_1: entered allmulticast mode [ 1622.231348][T16830] bridge_slave_1: entered promiscuous mode [ 1622.508478][T16854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.508634][T16854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.508903][T16854] bridge_slave_0: entered allmulticast mode [ 1622.524314][T16854] bridge_slave_0: entered promiscuous mode [ 1622.570259][T16854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.570397][T16854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.570656][T16854] bridge_slave_1: entered allmulticast mode [ 1622.573736][T16854] bridge_slave_1: entered promiscuous mode [ 1622.677015][T16830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.925928][T16830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.943727][T16854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.013154][T16854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.301625][T16830] team0: Port device team_slave_0 added [ 1625.832557][T16830] team0: Port device team_slave_1 added [ 1625.840166][T16854] team0: Port device team_slave_0 added [ 1625.874495][T16854] team0: Port device team_slave_1 added [ 1627.380024][T16602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.417241][T16830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.417261][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.417289][T16830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.510840][T16830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.510853][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.510869][T16830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.545199][T16854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.545218][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.545243][T16854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.614916][T16854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.614935][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.614960][T16854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.846914][T16602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.921685][T16830] hsr_slave_0: entered promiscuous mode [ 1627.933811][T16830] hsr_slave_1: entered promiscuous mode [ 1627.935036][T16830] debugfs: 'hsr0' already exists in 'hsr' [ 1627.935064][T16830] Cannot create hsr debugfs directory [ 1628.453974][T16854] hsr_slave_0: entered promiscuous mode [ 1628.455718][T16854] hsr_slave_1: entered promiscuous mode [ 1628.456813][T16854] debugfs: 'hsr0' already exists in 'hsr' [ 1628.456840][T16854] Cannot create hsr debugfs directory [ 1628.562365][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.562655][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.020225][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.021622][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.504954][T16985] binder: 16982:16985 ioctl c018620c 200000000900 returned -1 [ 1632.260863][T10763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1632.343643][T10763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1632.346207][T10763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1632.352117][T10763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1632.366046][T10763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1633.455257][ T6478] bridge_slave_1: left allmulticast mode [ 1633.455289][ T6478] bridge_slave_1: left promiscuous mode [ 1633.455560][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.541044][ T6478] bridge_slave_0: left allmulticast mode [ 1633.541078][ T6478] bridge_slave_0: left promiscuous mode [ 1633.541362][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.643101][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2815'. [ 1633.675268][ T6478] bridge_slave_1: left allmulticast mode [ 1633.675338][ T6478] bridge_slave_1: left promiscuous mode [ 1633.676144][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.926017][ T6478] bridge_slave_0: left allmulticast mode [ 1634.926082][ T6478] bridge_slave_0: left promiscuous mode [ 1634.927009][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.289489][ T5116] Bluetooth: hci1: command tx timeout [ 1636.870506][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.910049][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.929311][ T5985] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1636.931442][ T6478] bond0 (unregistering): Released all slaves [ 1637.149329][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1637.152464][ T5985] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.152499][ T5985] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.154862][ T5985] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1637.154893][ T5985] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1637.154914][ T5985] usb 5-1: Product: syz [ 1637.154929][ T5985] usb 5-1: Manufacturer: syz [ 1637.226756][ T5985] hub 5-1:4.0: USB hub found [ 1637.350007][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.379370][ T5116] Bluetooth: hci1: command tx timeout [ 1637.400226][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.423035][ T6478] bond0 (unregistering): Released all slaves [ 1637.430256][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1637.445284][ T5985] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 1637.480850][ T5985] usb 5-1: USB disconnect, device number 32 [ 1639.691650][ T5116] Bluetooth: hci1: command tx timeout [ 1639.746922][ T6478] hsr_slave_0: left promiscuous mode [ 1640.195522][ T6478] hsr_slave_1: left promiscuous mode [ 1640.196727][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.247445][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.649388][ T5985] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1640.990493][ T5985] usb 5-1: config 0 has no interfaces? [ 1640.994027][ T5985] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1640.994051][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1640.994063][ T5985] usb 5-1: SerialNumber: syz [ 1640.998900][ T5985] usb 5-1: config 0 descriptor?? [ 1641.149407][ T6478] hsr_slave_0: left promiscuous mode [ 1641.192076][ T6478] hsr_slave_1: left promiscuous mode [ 1641.193385][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.193412][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.228064][T10838] usb 5-1: USB disconnect, device number 33 [ 1641.240538][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.777245][ T5116] Bluetooth: hci1: command tx timeout [ 1641.892166][ T6478] veth1_macvtap: left promiscuous mode [ 1641.892282][ T6478] veth0_macvtap: left promiscuous mode [ 1641.892564][ T6478] veth1_vlan: left promiscuous mode [ 1641.892760][ T6478] veth0_vlan: left promiscuous mode [ 1643.520423][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 1643.542874][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 1644.080589][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 1644.120789][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 1647.673156][T16999] chnl_net:caif_netlink_parms(): no params data found [ 1648.463564][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.463851][T16999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.464114][T16999] bridge_slave_0: entered allmulticast mode [ 1648.471675][T16999] bridge_slave_0: entered promiscuous mode [ 1648.481767][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.482299][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.482533][T16999] bridge_slave_1: entered allmulticast mode [ 1648.485158][T16999] bridge_slave_1: entered promiscuous mode [ 1648.828638][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.496778][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.647270][T16999] team0: Port device team_slave_0 added [ 1649.697268][T16999] team0: Port device team_slave_1 added [ 1649.750189][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.750209][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.750239][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.752720][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.752761][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.752790][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.002687][T16999] hsr_slave_0: entered promiscuous mode [ 1650.004973][T16999] hsr_slave_1: entered promiscuous mode [ 1650.013033][T16999] debugfs: 'hsr0' already exists in 'hsr' [ 1650.013071][T16999] Cannot create hsr debugfs directory [ 1650.986038][T16830] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1651.189429][T16830] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1651.262905][T16830] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1651.378090][T16830] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1652.036731][T16854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1652.074135][T16854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1652.126586][T16854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1653.518296][T16854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1655.042927][T16854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.087501][T16854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.244006][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.244146][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.763683][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.763837][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.124713][T16830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.373673][T16830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.578234][ T6478] bridge_slave_1: left allmulticast mode [ 1656.578268][ T6478] bridge_slave_1: left promiscuous mode [ 1656.578545][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.656117][ T6478] bridge_slave_0: left allmulticast mode [ 1656.656142][ T6478] bridge_slave_0: left promiscuous mode [ 1656.656319][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.559338][T16428] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1658.639967][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.700075][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.720512][T16428] usb 6-1: Using ep0 maxpacket: 32 [ 1658.722688][T16428] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.722720][T16428] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.724827][T16428] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1658.724848][T16428] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1658.724860][T16428] usb 6-1: Product: syz [ 1658.724869][T16428] usb 6-1: Manufacturer: syz [ 1658.788135][T16428] hub 6-1:4.0: USB hub found [ 1658.788516][ T6478] bond0 (unregistering): Released all slaves [ 1658.860532][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.860820][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.032561][T16428] hub 6-1:4.0: 2 ports detected [ 1659.255726][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.255879][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.463995][ T6478] hsr_slave_0: left promiscuous mode [ 1659.499495][ T6478] hsr_slave_1: left promiscuous mode [ 1659.500440][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.550671][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.644025][T16428] usb 6-1: USB disconnect, device number 18 [ 1659.690220][ T809] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1659.845261][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.845290][ T809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.846586][ T809] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1659.846612][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1659.846630][ T809] usb 5-1: SerialNumber: syz [ 1660.103970][ T809] usb 5-1: 0:2 : does not exist [ 1660.222887][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 1660.264869][ T809] usb 5-1: USB disconnect, device number 34 [ 1660.342950][T17170] udevd[17170]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1660.368098][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 1664.025817][T16854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.400887][T16854] veth0_vlan: entered promiscuous mode [ 1664.477737][T16854] veth1_vlan: entered promiscuous mode [ 1666.233226][T10763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1666.248271][T10763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1666.251274][T10763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1666.252754][T10763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1666.253725][T10763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1667.290447][T16854] veth0_macvtap: entered promiscuous mode [ 1667.306398][T16999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1667.428803][T16999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1667.474663][T16854] veth1_macvtap: entered promiscuous mode [ 1667.485064][T16999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1667.560557][T16999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1667.689292][T16427] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1668.159268][T16427] usb 5-1: Using ep0 maxpacket: 32 [ 1668.281412][T16427] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.281450][T16427] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.283807][T16427] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1668.283835][T16427] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1668.283857][T16427] usb 5-1: Product: syz [ 1668.283883][T16427] usb 5-1: Manufacturer: syz [ 1668.337475][T10763] Bluetooth: hci3: command tx timeout [ 1668.352503][T16427] hub 5-1:4.0: USB hub found [ 1668.710575][T16427] hub 5-1:4.0: 2 ports detected [ 1669.187964][T16427] usb 5-1: USB disconnect, device number 35 [ 1669.383526][T16854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.628548][T16854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.677561][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.862321][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.876073][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.886545][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.462064][T10763] Bluetooth: hci3: command tx timeout [ 1672.489423][T10763] Bluetooth: hci3: command tx timeout [ 1672.847490][T17233] chnl_net:caif_netlink_parms(): no params data found [ 1673.977156][T17301] ubi: mtd0 is already attached to ubi31 [ 1674.181101][T10763] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1674.865925][T10763] Bluetooth: hci3: command tx timeout [ 1675.219946][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1675.237228][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1675.239773][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1675.251263][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1675.252768][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1675.345021][T16999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.360616][T17233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.360703][T17233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.360874][T17233] bridge_slave_0: entered allmulticast mode [ 1675.364294][T17233] bridge_slave_0: entered promiscuous mode [ 1675.429778][T17233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.430011][T17233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.430265][T17233] bridge_slave_1: entered allmulticast mode [ 1675.451754][T17233] bridge_slave_1: entered promiscuous mode [ 1675.455993][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.456072][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.574306][T17233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.663533][T17233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.868970][T16999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.931232][T17233] team0: Port device team_slave_0 added [ 1675.995030][T17233] team0: Port device team_slave_1 added [ 1676.152837][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.153111][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.370945][T10763] Bluetooth: hci2: command tx timeout [ 1677.478361][T17233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.478380][T17233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.478410][T17233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.681743][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.681901][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.715602][T17233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.715621][T17233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.715650][T17233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.591149][ T6478] bridge_slave_1: left allmulticast mode [ 1678.591183][ T6478] bridge_slave_1: left promiscuous mode [ 1678.591474][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.841240][ T6478] bridge_slave_0: left allmulticast mode [ 1678.841275][ T6478] bridge_slave_0: left promiscuous mode [ 1678.841627][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.449999][T10763] Bluetooth: hci2: command tx timeout [ 1681.064030][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.150316][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.193181][ T6478] bond0 (unregistering): Released all slaves [ 1681.427701][T17233] hsr_slave_0: entered promiscuous mode [ 1681.435298][T17233] hsr_slave_1: entered promiscuous mode [ 1681.549195][T10763] Bluetooth: hci2: command tx timeout [ 1681.831176][ T6478] hsr_slave_0: left promiscuous mode [ 1681.869317][ T6478] hsr_slave_1: left promiscuous mode [ 1681.870484][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.926761][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.988791][T10763] Bluetooth: hci2: command tx timeout [ 1685.210175][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 1685.260397][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 1686.545551][T17306] chnl_net:caif_netlink_parms(): no params data found [ 1687.079068][T17368] binder: 17367:17368 ioctl c018620c 200000000900 returned -1 [ 1687.655953][T17306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.656976][T17306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.657185][T17306] bridge_slave_0: entered allmulticast mode [ 1687.681338][T17306] bridge_slave_0: entered promiscuous mode [ 1687.705862][T17306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.706081][T17306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.706344][T17306] bridge_slave_1: entered allmulticast mode [ 1687.731954][T17306] bridge_slave_1: entered promiscuous mode [ 1687.770876][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.814730][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.842962][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.934477][T17306] team0: Port device team_slave_0 added [ 1687.945675][T17306] team0: Port device team_slave_1 added [ 1688.038510][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.038531][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.038560][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.043980][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.043998][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.044028][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.437728][T17306] hsr_slave_0: entered promiscuous mode [ 1689.438590][T17306] hsr_slave_1: entered promiscuous mode [ 1689.450649][T17306] debugfs: 'hsr0' already exists in 'hsr' [ 1689.450676][T17306] Cannot create hsr debugfs directory [ 1690.428409][ T6478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.021659][ T6478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.443734][ T6478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.040399][ T6478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.478708][T17233] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1692.544872][T17233] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1692.629414][T17233] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1692.787362][T17233] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1694.198183][ T6478] bridge_slave_1: left allmulticast mode [ 1694.198217][ T6478] bridge_slave_1: left promiscuous mode [ 1694.198490][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.329591][ T6478] bridge_slave_0: left allmulticast mode [ 1694.329625][ T6478] bridge_slave_0: left promiscuous mode [ 1694.329898][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.368917][T10763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1694.388481][T10763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1694.392463][T10763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1694.398679][T10763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1694.401404][T10763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1696.505693][T10763] Bluetooth: hci1: command tx timeout [ 1696.680158][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.400231][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.424661][ T6478] bond0 (unregistering): Released all slaves [ 1698.182408][ T6478] hsr_slave_0: left promiscuous mode [ 1698.219437][ T6478] hsr_slave_1: left promiscuous mode [ 1698.222795][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.222827][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.270123][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1698.270154][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.401206][ T6478] veth1_macvtap: left promiscuous mode [ 1698.401318][ T6478] veth0_macvtap: left promiscuous mode [ 1698.401617][ T6478] veth1_vlan: left promiscuous mode [ 1698.401819][ T6478] veth0_vlan: left promiscuous mode [ 1698.570853][T10763] Bluetooth: hci1: command tx timeout [ 1699.631751][T17523] ubi: mtd0 is already attached to ubi31 [ 1699.768984][T10763] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1700.651945][T10763] Bluetooth: hci1: command tx timeout [ 1702.335433][ T5985] ------------[ cut here ]------------ [ 1702.335452][ T5985] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1702.335471][ T5985] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:6/5985 [ 1702.335522][ T5985] Modules linked in: [ 1702.335542][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1702.335568][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1702.335582][ T5985] Workqueue: events drm_fb_helper_damage_work [ 1702.335613][ T5985] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1702.335644][ T5985] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1702.335664][ T5985] RSP: 0018:ffffc900050df8c0 EFLAGS: 00010246 [ 1702.335683][ T5985] RAX: 1ffff11004a4c600 RBX: ffffffff8f755ab0 RCX: 0000000000000000 [ 1702.335699][ T5985] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f755ab0 [ 1702.335716][ T5985] RBP: ffffc900050df9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1702.335730][ T5985] R10: dffffc0000000000 R11: fffffbfff1ed4e77 R12: ffffffff8bc121e0 [ 1702.335746][ T5985] R13: ffff888025263000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 1702.335761][ T5985] FS: 0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 1702.335779][ T5985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1702.335794][ T5985] CR2: 0000001b2f41fff8 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1702.335815][ T5985] Call Trace: [ 1702.335825][ T5985] [ 1702.335841][ T5985] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1702.335872][ T5985] ? rt_spin_unlock+0x14f/0x200 [ 1702.335998][ T5985] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1702.336037][ T5985] ? rt_spin_unlock+0x160/0x200 [ 1702.336072][ T5985] ? drm_vblank_get+0x147/0x260 [ 1702.336104][ T5985] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1702.336134][ T5985] drm_fb_helper_damage_work+0x131/0x6f0 [ 1702.336186][ T5985] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1702.336223][ T5985] ? process_scheduled_works+0xa8d/0x18c0 [ 1702.336254][ T5985] ? process_scheduled_works+0xa8d/0x18c0 [ 1702.336288][ T5985] process_scheduled_works+0xb6e/0x18c0 [ 1702.336359][ T5985] ? __pfx_process_scheduled_works+0x10/0x10 [ 1702.336399][ T5985] ? assign_work+0x3d5/0x5e0 [ 1702.336436][ T5985] worker_thread+0xa53/0xfc0 [ 1702.336504][ T5985] kthread+0x388/0x470 [ 1702.336529][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 1702.336558][ T5985] ? __pfx_kthread+0x10/0x10 [ 1702.336585][ T5985] ret_from_fork+0x51e/0xb90 [ 1702.336622][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 1702.336652][ T5985] ? __switch_to+0xc7d/0x1450 [ 1702.336685][ T5985] ? __pfx_kthread+0x10/0x10 [ 1702.336712][ T5985] ret_from_fork_asm+0x1a/0x30 [ 1702.336756][ T5985] [ 1702.336767][ T5985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1702.336783][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1702.336807][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1702.336821][ T5985] Workqueue: events drm_fb_helper_damage_work [ 1702.336849][ T5985] Call Trace: [ 1702.336859][ T5985] [ 1702.336868][ T5985] vpanic+0x56c/0xa60 [ 1702.336902][ T5985] ? __pfx__printk+0x10/0x10 [ 1702.336927][ T5985] ? __pfx_vpanic+0x10/0x10 [ 1702.336957][ T5985] ? is_bpf_text_address+0x292/0x2b0 [ 1702.336989][ T5985] ? is_bpf_text_address+0x26/0x2b0 [ 1702.337031][ T5985] panic+0xc5/0xd0 [ 1702.337064][ T5985] ? __pfx_panic+0x10/0x10 [ 1702.337109][ T5985] ? ret_from_fork_asm+0x1a/0x30 [ 1702.337137][ T5985] __warn+0x315/0x4f0 [ 1702.337176][ T5985] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1702.337208][ T5985] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1702.337239][ T5985] __report_bug+0x29a/0x540 [ 1702.337293][ T5985] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1702.337325][ T5985] ? __pfx___report_bug+0x10/0x10 [ 1702.337374][ T5985] report_bug_entry+0x19a/0x290 [ 1702.337399][ T5985] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1702.337425][ T5985] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1702.337455][ T5985] handle_bug+0xce/0x200 [ 1702.337526][ T5985] exc_invalid_op+0x1a/0x50 [ 1702.337554][ T5985] asm_exc_invalid_op+0x1a/0x20 [ 1702.337576][ T5985] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1702.337606][ T5985] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1702.337624][ T5985] RSP: 0018:ffffc900050df8c0 EFLAGS: 00010246 [ 1702.337642][ T5985] RAX: 1ffff11004a4c600 RBX: ffffffff8f755ab0 RCX: 0000000000000000 [ 1702.337658][ T5985] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f755ab0 [ 1702.337675][ T5985] RBP: ffffc900050df9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1702.337690][ T5985] R10: dffffc0000000000 R11: fffffbfff1ed4e77 R12: ffffffff8bc121e0 [ 1702.337707][ T5985] R13: ffff888025263000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 1702.337748][ T5985] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1702.337777][ T5985] ? rt_spin_unlock+0x14f/0x200 [ 1702.337808][ T5985] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1702.337845][ T5985] ? rt_spin_unlock+0x160/0x200 [ 1702.337881][ T5985] ? drm_vblank_get+0x147/0x260 [ 1702.337912][ T5985] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1702.337941][ T5985] drm_fb_helper_damage_work+0x131/0x6f0 [ 1702.337984][ T5985] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1702.338020][ T5985] ? process_scheduled_works+0xa8d/0x18c0 [ 1702.338050][ T5985] ? process_scheduled_works+0xa8d/0x18c0 [ 1702.338083][ T5985] process_scheduled_works+0xb6e/0x18c0 [ 1702.338153][ T5985] ? __pfx_process_scheduled_works+0x10/0x10 [ 1702.338201][ T5985] ? assign_work+0x3d5/0x5e0 [ 1702.338238][ T5985] worker_thread+0xa53/0xfc0 [ 1702.338303][ T5985] kthread+0x388/0x470 [ 1702.338328][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 1702.338357][ T5985] ? __pfx_kthread+0x10/0x10 [ 1702.338383][ T5985] ret_from_fork+0x51e/0xb90 [ 1702.338415][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 1702.338443][ T5985] ? __switch_to+0xc7d/0x1450 [ 1702.338476][ T5985] ? __pfx_kthread+0x10/0x10 [ 1702.338502][ T5985] ret_from_fork_asm+0x1a/0x30 [ 1702.338545][ T5985] [ 1702.338962][ T5985] Kernel Offset: disabled